Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: tziWIvp/lG/Jhmefl4vRwoEBgk6jVEEh7Z3mSEbAMNY=
Subject key identifier: 5C:2E:43:21:54:99:6C:EB:0C:48:1E:41:8A:AD:9B:57:54:9F:2D:F8
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0198451ACDACB875ADA0EBD2D2FBCFA42CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 088D
Signing time: Sat 26 Jul 2025 05:00:41 +0000
Manifest this update: Sat 26 Jul 2025 05:00:41 +0000
Manifest next update: Sun 27 Jul 2025 05:00:41 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: Ummyf4kvw7flB7QWYPxG4qYHsF5UoblhpzXP9R7yilM=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:cd:ac:b8:75:ad:a0:eb:d2:d2:fb:cf:a4:2c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Jul 26 05:00:41 2025 GMT
Not After : Jul 27 05:00:41 2025 GMT
Subject: CN=5c2e432154996ceb0c481e418aad9b57549f2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:3f:e7:4b:ca:ea:83:a2:1e:6e:6e:2c:b4:
a7:39:88:89:f5:8a:83:28:40:8d:99:03:ae:ab:66:
de:33:e6:15:d2:19:8d:9d:4c:02:20:d6:06:72:38:
d5:dc:db:48:50:74:1f:1a:96:f1:d7:94:8a:ba:d3:
13:bb:68:c7:39:61:e6:66:ed:e7:ac:d8:40:6e:13:
b6:fb:34:a0:16:de:63:d1:b0:48:ba:f1:ab:31:59:
48:de:18:88:e0:1f:01:43:57:08:f9:be:40:cd:2d:
ff:d8:b9:6d:27:3b:b4:be:77:38:02:17:3c:5f:94:
a1:77:36:41:8c:7a:f8:24:43:59:ce:df:ec:57:e6:
17:8d:e4:c9:74:38:90:cf:5c:4c:45:13:14:58:54:
89:be:8e:cb:6b:41:5a:5a:f1:06:8a:f3:55:6a:71:
95:e9:23:e0:64:6f:4f:3d:e2:6e:ca:27:27:34:51:
3c:7f:a9:04:ec:4b:65:ca:bb:75:77:99:99:d5:b6:
0a:d6:f4:ff:91:c9:b2:6a:9c:52:d2:8d:75:2b:24:
c3:40:41:0e:05:b2:3a:e2:c0:aa:60:96:cc:92:50:
77:d8:72:4f:18:ed:e5:b3:cb:d7:60:95:f6:6a:7e:
11:96:6c:e8:3f:ec:73:6b:e1:f7:22:6f:d4:8b:f6:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:43:21:54:99:6C:EB:0C:48:1E:41:8A:AD:9B:57:54:9F:2D:F8
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a5:3f:57:18:a4:84:92:d2:64:0b:8c:e5:d1:a8:2b:18:be:
c3:e7:1d:8a:42:a3:26:e1:73:72:37:70:c5:60:92:c9:cb:c3:
71:02:bd:df:49:b0:57:e6:a3:21:2e:ad:75:a1:e6:df:87:3b:
4d:0d:d4:92:39:63:95:24:54:15:12:df:47:77:9f:03:e8:81:
a8:1a:79:83:02:c7:7e:ac:cd:31:ca:9c:ee:7f:c2:d9:a4:e8:
bd:fc:1e:d4:d4:af:95:fd:ee:b0:78:49:dc:c4:21:e8:68:d2:
c3:c0:0b:89:13:b7:e4:8a:6e:0d:ab:f4:ea:09:49:ab:ca:db:
cc:d2:54:94:d8:f2:82:28:8b:67:fa:3d:0a:12:92:36:76:03:
48:8e:70:3f:11:2a:ea:7a:49:9a:60:82:12:fd:bc:0f:e2:a0:
f1:f1:6f:12:2a:24:b7:31:61:38:0c:2a:1b:0d:b9:12:e2:a7:
cd:29:dc:bd:93:79:89:87:30:95:88:4f:d3:6d:2a:9c:6e:4a:
59:a3:9b:52:8d:bc:45:49:25:fe:31:b8:47:29:ce:01:ac:87:
91:e5:26:45:7f:c7:c1:20:24:3f:a7:ef:8d:fe:98:57:c4:7a:
d2:c4:81:f2:17:af:c3:3c:e4:4c:b5:29:92:c9:36:50:20:a4:
ea:e7:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:08:01 2025 by rpki-client