Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: hpYDDvOGHEkvMUaV/8PIkHQdrUyeotIL+Yrx88Cayig=
Subject key identifier: 4C:51:57:BC:98:0F:D9:F3:60:EA:30:83:42:C3:C5:1C:55:C6:E6:E0
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 01987562D7157B18D97FF0165B10A228D91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 08A6
Signing time: Mon 04 Aug 2025 14:01:08 +0000
Manifest this update: Mon 04 Aug 2025 14:01:08 +0000
Manifest next update: Tue 05 Aug 2025 14:01:08 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: iG3uJk+DtEz82O4XYWKmvxyzbV5UNRxMshBH1v4SikY=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:d7:15:7b:18:d9:7f:f0:16:5b:10:a2:28:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Aug 4 14:01:08 2025 GMT
Not After : Aug 5 14:01:08 2025 GMT
Subject: CN=4c5157bc980fd9f360ea308342c3c51c55c6e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:86:e7:f6:67:13:d7:73:25:36:3b:f8:2a:
de:7c:9e:c1:b6:d6:fd:bd:32:08:b5:48:5d:da:a6:
a2:6f:75:79:51:4f:ff:77:6b:18:fc:0c:c6:53:c6:
e6:7a:6e:4e:fa:4b:f9:0d:40:fe:d2:8b:56:95:1f:
e1:10:0a:e8:cc:28:b1:7a:da:30:73:18:79:bf:8c:
db:b3:ff:24:dc:7b:cd:93:66:61:19:c9:f9:09:ec:
d2:be:4d:4c:b9:35:cb:bc:a6:a2:aa:89:46:24:cb:
6a:d5:45:48:98:be:22:e8:95:33:7f:f2:33:64:01:
94:56:2f:85:a1:c8:14:e0:1a:b9:be:1c:b2:d5:a8:
90:b4:4a:03:c7:9f:ef:23:8b:dc:db:a0:5b:08:45:
9c:72:88:99:a7:19:1d:98:bf:a0:dc:ff:e8:30:b5:
3c:c9:72:f3:13:b2:0b:cb:e6:7c:e2:6f:e8:99:95:
3d:8d:8b:02:13:07:58:2d:bf:c4:50:38:2c:a5:1b:
0a:48:38:52:f6:43:9b:85:cf:2f:27:21:4a:22:ae:
cc:5e:25:f3:84:b8:5b:57:7c:e1:23:27:95:9a:76:
ad:0c:49:cc:ff:63:46:05:be:89:77:2a:22:9b:17:
fe:4c:19:4c:bf:e0:d4:19:2f:15:2e:87:8d:98:f3:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:57:BC:98:0F:D9:F3:60:EA:30:83:42:C3:C5:1C:55:C6:E6:E0
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:e4:2a:6e:d6:d9:a7:0d:7b:eb:4e:13:45:c9:ed:01:18:
7c:cc:8c:9a:e7:c3:e1:e1:b9:2a:49:ba:7e:7c:48:41:cb:27:
ee:de:70:71:18:36:bd:44:7f:51:c6:28:76:ed:66:37:d4:9a:
be:92:f1:89:25:ee:ca:e1:7d:d0:cc:0d:78:6f:2b:5a:cb:86:
07:fe:49:fb:7d:17:ad:59:3c:51:bb:e1:22:3c:a0:eb:65:02:
0e:69:62:5c:07:e2:96:c9:1e:ce:0d:ee:99:4b:e0:f1:cc:25:
2f:85:74:7e:3d:43:c7:7c:d6:22:ab:25:4b:91:4e:03:f5:dd:
ec:e1:bc:53:94:6a:dc:b2:d4:a0:81:d0:3d:02:d6:83:30:99:
dc:47:50:72:26:a2:01:da:d7:57:ba:9e:cb:29:5c:84:6b:78:
67:91:2c:cd:a6:ab:f9:55:e1:db:32:97:be:58:5f:d1:67:dd:
1a:53:5f:ef:70:0f:ba:de:48:44:a8:2a:eb:6e:38:a0:7b:c2:
7c:a9:5e:d9:16:1b:a6:77:5c:fc:be:fa:aa:65:ea:62:81:6e:
e6:aa:9e:b4:b1:32:ab:9a:bd:87:e1:df:ad:3e:2a:ff:9e:c8:
2e:9f:05:bb:94:91:6c:03:8d:b7:5b:25:34:ae:2e:bc:df:62:
08:37:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:38 2025 by rpki-client