Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: onvPIiGT33DL5+WzfUo0zoJxX5ho8IiiR8mc1SkvflQ=
Subject key identifier: 7B:8F:D3:0A:61:F2:E3:5B:0C:E9:84:12:BA:4A:38:82:E1:F5:09:86
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 0199FCFD4A6AE325CC4AB51466731C5BA2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: SZbB1icM+G75dqF+3emtaXDkKIJY3703AufXEVXSjI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4a:6a:e3:25:cc:4a:b5:14:66:73:1c:5b:a2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=7b8fd30a61f2e35b0ce98412ba4a3882e1f50986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:b1:4c:3a:48:80:98:31:d2:48:3d:58:9b:
13:ed:50:b0:3f:df:fb:ec:f1:33:0f:4e:91:16:47:
42:a5:3a:28:30:ac:2c:bd:8a:8d:40:24:21:80:a7:
cd:5d:88:c5:1e:74:06:51:5e:20:ea:e7:66:6d:25:
99:80:97:8f:c1:d8:e7:1a:86:62:f3:d8:f6:59:e4:
41:8d:43:2e:d9:a2:88:8d:bd:af:91:54:20:7a:56:
5a:ce:61:b8:07:fd:3c:e9:b1:8e:5c:5f:73:dc:a8:
da:60:ad:6f:f4:d5:e5:89:6c:9a:c9:15:ff:12:60:
d8:f2:ca:87:8d:0c:11:0c:ca:d6:ba:b5:fb:c1:ef:
53:f8:52:9b:bd:10:e8:d5:db:eb:f9:2f:26:e3:71:
d2:97:cc:bb:9e:e1:3e:bc:e7:e1:a5:78:66:88:23:
26:c8:65:9e:85:6c:ba:2f:a5:89:91:12:81:4d:34:
b3:7a:77:90:d1:e2:69:df:94:3f:63:c2:e1:ad:fa:
ee:ee:51:7a:5b:d8:b2:05:c4:9d:69:9f:24:57:b3:
18:1b:52:56:db:a7:a9:47:6a:dc:b4:44:28:f5:80:
0c:51:79:10:e1:f5:11:6d:df:3b:52:59:a9:aa:f0:
63:91:ce:f6:90:c4:23:65:01:03:4e:ec:08:d6:a6:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:D3:0A:61:F2:E3:5B:0C:E9:84:12:BA:4A:38:82:E1:F5:09:86
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b6:dc:16:40:8e:a1:79:d3:ec:54:f0:8e:c8:f6:6d:6d:28:
45:b7:4d:ee:69:a4:a3:f9:e1:a8:c7:70:e9:6f:ca:71:39:4e:
4b:8a:29:e5:a7:a2:4f:6a:10:1b:ed:00:09:8c:04:36:af:66:
d4:f3:5e:fd:17:0f:eb:b7:fe:32:2a:5d:f2:7a:25:49:74:d0:
65:aa:ed:95:c7:ad:42:f7:82:08:40:59:03:f8:2c:20:5a:a6:
ef:6e:d9:2f:24:ff:9a:33:08:01:74:d1:29:14:07:c7:4a:df:
76:6f:4b:1b:d4:9b:07:40:4e:03:e6:ea:b2:6d:6a:4c:2f:51:
83:5b:b1:6d:ad:20:0e:b6:7b:bb:b4:bf:36:1d:0e:e6:c0:92:
9f:77:7d:a6:38:65:5b:83:40:58:6a:b6:74:25:9a:48:b1:8d:
3f:8a:aa:f7:90:02:48:e7:2c:ab:8f:c4:c3:81:88:7d:87:bf:
1c:b1:40:2e:a3:b8:31:4a:a4:cf:25:0f:93:74:75:f4:b0:5d:
43:ec:48:28:5a:59:a4:e8:91:0c:83:8e:80:cc:b3:46:eb:29:
91:29:d4:72:a2:e7:bc:23:89:a1:2a:b2:bb:c1:c2:21:b5:b8:
fc:0c:e7:35:07:69:fd:1b:dc:b0:f0:54:1c:49:ef:3a:91:0d:
da:03:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:21 2025 by rpki-client