Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: RSHfQgYb7FpWO8bg9OInNBI/WLOktFRyyBmpEBwACdM=
Subject key identifier: 1F:EE:AF:F8:C1:BE:BD:D8:53:58:7C:7F:B7:94:F3:96:D6:8B:1F:03
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0198D7738A562451CD16E3AB5B70E57C87DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 1602
Signing time: Sat 23 Aug 2025 15:02:10 +0000
Manifest this update: Sat 23 Aug 2025 15:02:10 +0000
Manifest next update: Sun 24 Aug 2025 15:02:10 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: KWeOBmcYPiRKWn1NTdabP9aZHvegzQwGe/COw1Vxwl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:8a:56:24:51:cd:16:e3:ab:5b:70:e5:7c:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Aug 23 15:02:10 2025 GMT
Not After : Aug 24 15:02:10 2025 GMT
Subject: CN=1feeaff8c1bebdd853587c7fb794f396d68b1f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:41:00:95:6c:26:4b:42:75:6c:81:93:39:
d4:a1:a7:1a:39:94:fd:e7:2e:b7:c9:ba:ed:da:37:
68:fa:c6:8d:01:d8:dc:f3:76:51:05:42:bb:16:c3:
d4:12:bc:d8:b4:fc:52:3f:71:c6:f4:57:94:dc:65:
10:a3:70:a1:8d:77:73:1d:41:af:29:ae:50:66:a6:
65:a6:dc:e8:bd:d8:fd:24:f1:38:bd:88:36:03:d1:
b4:03:a1:b6:6b:a4:d1:e6:be:1d:5c:62:d3:8c:37:
69:0f:ae:7b:d8:cf:5d:23:82:9f:9b:3b:e0:77:4d:
d1:1e:80:25:a0:40:94:03:11:35:dd:bc:d4:f7:cb:
43:30:19:94:a3:7f:5e:f5:fb:f7:a4:8f:43:2e:26:
b9:60:82:11:d9:e6:a8:4e:e9:93:37:20:e5:d6:c6:
98:7a:aa:41:bc:30:95:a5:81:48:90:8b:82:9a:78:
7d:16:bf:46:96:f4:cc:15:c4:e9:b7:6b:13:67:36:
df:cf:2c:6a:ae:b1:7e:28:0e:20:69:36:a8:07:3f:
9d:37:b0:f9:02:2f:a3:c3:d6:0e:33:29:f3:3d:c4:
4a:9e:a2:31:c3:40:98:6c:82:35:84:fc:5b:79:7c:
a6:e6:e7:bb:c8:72:51:f1:53:89:bc:db:1f:42:df:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:AF:F8:C1:BE:BD:D8:53:58:7C:7F:B7:94:F3:96:D6:8B:1F:03
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:04:02:a4:da:9d:e6:a2:69:62:1c:85:29:fa:9b:28:dd:
56:fa:83:ef:85:01:a1:9f:9e:f7:4c:65:7e:e5:b1:08:c8:38:
82:98:18:5b:43:ec:01:f2:bd:04:94:a3:2c:50:3a:be:a4:03:
68:5b:df:2f:6d:9b:bf:25:e5:5c:aa:6c:8f:66:3f:f0:72:70:
b7:c5:34:97:20:28:18:24:58:83:56:42:cd:da:a7:fc:e9:12:
5f:06:7e:23:54:75:06:f6:59:ce:1d:8b:95:7e:99:55:48:b5:
e2:61:93:50:55:9b:1d:26:dc:2e:61:2c:15:42:5a:43:fa:ae:
47:cb:9a:6a:73:6e:71:31:69:49:ea:8e:f2:1c:c6:43:81:a6:
4b:92:84:dc:81:f3:a7:4d:a7:30:ed:d4:88:f6:0e:91:da:d2:
90:a7:f2:63:a9:5f:b9:db:ca:95:48:98:5d:a9:bb:5a:a5:9c:
71:d2:d4:f5:ab:63:f7:a2:bf:12:3a:ff:72:1c:c7:09:17:ec:
78:64:ff:cd:03:8c:54:9b:87:00:8d:20:2f:c9:14:22:93:10:
21:65:26:38:90:30:da:da:8c:87:6e:69:03:88:f7:d6:3e:46:
c2:e4:b6:ac:33:9f:71:05:7c:7e:7a:ee:1c:45:87:2f:75:96:
4b:02:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:26 2025 by rpki-client