Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: 5MDsK2BRY0as5nSmD9hwil1CtjPMmB29xNigw4P8LqU=
Subject key identifier: 85:91:86:BE:BD:3C:B9:71:FC:A5:EE:66:16:CD:68:F7:56:7B:AD:98
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019A1497049BBEE4913E8ECED72DE11B74E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 097D
Signing time: Fri 24 Oct 2025 05:00:32 +0000
Manifest this update: Fri 24 Oct 2025 05:00:32 +0000
Manifest next update: Sat 25 Oct 2025 05:00:32 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: 99LaWulHnyIBpfI5Uskj7KVzDdf6nFVa0TGXrV7nFhY=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:97:04:9b:be:e4:91:3e:8e:ce:d7:2d:e1:1b:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Oct 24 05:00:32 2025 GMT
Not After : Oct 25 05:00:32 2025 GMT
Subject: CN=859186bebd3cb971fca5ee6616cd68f7567bad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:14:00:e9:cb:63:07:83:6b:83:21:94:72:
68:c1:74:b1:8b:c1:b3:12:2a:a0:99:ee:a9:a3:d9:
21:6c:8b:3d:4b:f7:ba:19:98:f6:7a:57:f5:c2:9d:
d2:65:04:ec:55:0b:95:3f:2c:c0:ae:08:f8:62:63:
f6:d6:43:f0:90:f7:bb:16:55:18:f8:d3:ca:a2:19:
8a:31:f2:81:32:c0:c0:5a:84:eb:79:91:2c:9c:05:
31:1c:a1:78:0f:84:52:02:71:f8:e7:54:a7:5e:4e:
dc:31:e9:e5:38:da:98:a9:3b:49:8a:05:9c:50:d0:
95:4a:0e:27:21:7c:4e:ac:b7:9c:6f:1e:b1:20:27:
a8:4c:85:c5:ec:2e:f7:c6:09:64:4f:0f:40:38:15:
74:48:b5:9e:42:26:60:f6:48:4e:d0:f5:1b:1b:dc:
f4:c0:d0:df:16:28:9d:65:ad:84:dd:dc:e8:64:98:
20:ab:e7:7e:86:e1:36:5b:41:9b:d0:91:ac:89:75:
f6:1d:64:a1:fc:aa:a3:65:58:ed:1b:07:07:2e:b4:
b5:23:57:98:c5:2b:84:8d:cf:b9:59:a7:f0:a5:7b:
78:79:a8:e2:a4:af:db:70:e7:19:8a:e4:5e:74:48:
14:11:7d:df:5d:72:b2:92:52:89:eb:2f:d8:b4:9e:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:86:BE:BD:3C:B9:71:FC:A5:EE:66:16:CD:68:F7:56:7B:AD:98
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a6:a3:2a:dd:a9:7e:3f:00:3b:da:19:61:6f:2b:0b:4c:3c:
b3:82:9a:a1:8d:12:7a:07:cc:12:64:34:74:59:c5:fd:f3:c8:
08:70:94:2d:b0:6a:97:73:73:c9:de:61:aa:4e:9f:8d:85:ac:
ac:1e:5b:f8:26:b7:f4:6b:48:a2:7a:f3:07:8e:a8:3c:58:94:
7a:e8:cb:10:18:99:43:4e:00:e0:14:77:3e:d4:7e:5e:c5:7b:
de:ec:1f:b2:34:67:b8:23:27:75:2a:ac:76:d5:2e:11:b8:16:
da:c5:41:2a:08:43:f5:34:76:b6:01:d0:4a:5f:ff:e1:22:8b:
83:28:51:2a:4c:61:7f:f8:60:35:ab:dd:87:de:e2:ee:85:20:
1a:61:e1:21:21:0e:bb:fb:d9:a3:5b:3b:fc:c7:8e:66:f7:59:
6b:cd:18:97:42:89:6c:42:50:6c:02:22:fa:54:e8:4e:2b:88:
92:dd:76:e2:0e:45:fb:a1:c4:a0:24:80:e5:63:7c:37:eb:dc:
7e:ea:6c:2a:c3:25:e9:fc:55:59:ee:fe:30:0f:b6:90:95:d7:
a5:07:13:7d:43:0d:38:a7:87:99:2a:d5:05:cb:9f:27:30:61:
ad:c0:72:16:a9:8d:e1:62:46:d7:6e:2a:f6:88:9e:49:2a:6e:
4d:df:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 10:47:35 2025 by rpki-client