Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: 5+pZbFCglCzUDKgKBFnp1d3xXbnA2HaL3AYhzMJjZuU=
Subject key identifier: C7:9C:20:A4:F0:5D:81:51:F8:6D:FD:0A:71:46:B7:4C:8B:9D:2C:31
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0197B7B3513758F33EE8A3572681FA7BE954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 156D
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: 47YGV+JMS4y4pWVD3H1RRqmuFTILH4nFGYomRFqMIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:51:37:58:f3:3e:e8:a3:57:26:81:fa:7b:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=c79c20a4f05d8151f86dfd0a7146b74c8b9d2c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:4e:7a:8a:5b:9a:d7:f3:b4:e8:2d:fb:d2:
93:d1:be:2a:a6:c7:cc:e4:57:2d:00:59:a2:f8:d9:
03:cd:0e:8c:64:99:90:75:d2:2f:5e:e4:b4:bb:b5:
e5:cf:33:fd:96:81:33:f5:85:ad:a8:75:c7:ed:97:
d8:77:47:ce:c6:c6:bf:13:6a:cf:6b:e9:f5:8a:3e:
d9:36:8e:01:3e:c1:bd:da:d4:fd:13:c2:38:f1:d6:
5a:e1:45:02:77:e1:cf:36:f9:a7:76:82:fe:80:80:
98:7e:b5:ef:88:fa:0d:c6:23:b1:45:95:af:96:8e:
3b:7b:15:1a:db:6a:9e:8c:36:d9:ad:73:24:54:86:
9c:59:33:c7:c8:c1:77:84:f9:c0:aa:f8:5d:1c:4e:
16:0f:cb:25:c1:76:fc:36:24:09:e4:d8:31:0b:9f:
1a:7c:39:8e:90:d2:7b:16:99:f8:de:01:60:0c:19:
0b:97:1b:ae:95:eb:59:ec:7e:f4:80:31:87:3f:41:
6a:fd:cb:58:30:a1:11:16:6e:2c:cb:bb:36:e0:6a:
16:8a:cb:dc:f9:2a:14:e8:d4:0b:10:8e:8d:92:3f:
68:ff:99:71:2b:a4:6a:8a:90:4e:c5:c0:75:c5:f5:
3e:b4:cb:a9:31:24:44:80:e4:94:3b:e5:01:52:1e:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:20:A4:F0:5D:81:51:F8:6D:FD:0A:71:46:B7:4C:8B:9D:2C:31
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:5e:75:e9:92:74:3e:f5:6c:24:f0:f7:28:b3:33:90:c5:
6e:24:86:46:f8:19:5b:7d:68:d0:63:de:03:b2:67:bb:b7:61:
83:bd:cb:0b:ca:36:4c:82:a6:04:9f:24:e9:60:a6:f1:28:67:
e0:ee:d9:c3:37:9c:31:36:ba:0c:46:46:69:4c:ee:f9:13:48:
4d:29:cf:cc:5e:cb:bd:e6:bc:7b:54:30:b3:3b:40:2b:b7:c8:
c8:89:80:a4:5b:c0:2c:bd:c7:0d:81:49:e7:67:e7:81:e4:0e:
ae:da:a8:19:91:7f:a7:5d:f9:e2:96:33:94:ca:c1:0d:2e:6b:
62:36:b5:82:17:fb:3b:eb:07:ed:11:0e:5e:a2:74:5e:c0:02:
ca:21:8f:7e:40:eb:32:cf:b4:ad:72:12:d5:9f:25:9a:ab:21:
8d:2d:b8:64:d5:d4:a7:7e:be:d0:2d:d6:de:09:d7:1d:f3:28:
4b:ef:68:7b:ca:2b:59:02:11:dd:48:89:7c:f0:ee:d0:8d:ad:
96:bc:c2:3b:df:d3:eb:fe:98:f7:06:96:36:2f:a3:e5:e3:cd:
a4:92:46:a0:84:f6:f7:0d:3e:d4:dd:a7:59:db:24:16:66:7e:
0e:89:18:81:4c:53:b1:8c:31:4a:26:c2:d4:fc:de:e7:21:3f:
5f:8e:dd:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1E3WPM+6KNXJoH6e+lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk
ZGY0YjAwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD
EyhjNzljMjBhNGYwNWQ4MTUxZjg2ZGZkMGE3MTQ2Yjc0YzhiOWQyYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzBOeopbmtfztOgt+9KT0b4qpsfM
5FctAFmi+NkDzQ6MZJmQddIvXuS0u7XlzzP9loEz9YWtqHXH7ZfYd0fOxsa/E2rP
a+n1ij7ZNo4BPsG92tT9E8I48dZa4UUCd+HPNvmndoL+gICYfrXviPoNxiOxRZWv
lo47exUa22qejDbZrXMkVIacWTPHyMF3hPnAqvhdHE4WD8slwXb8NiQJ5NgxC58a
fDmOkNJ7Fpn43gFgDBkLlxuuletZ7H70gDGHP0Fq/ctYMKERFm4sy7s24GoWisvc
+SoU6NQLEI6Nkj9o/5lxK6RqipBOxcB1xfU+tMupMSREgOSUO+UBUh4CqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMecIKTwXYFR+G39CnFGt0yLnSwxMB8GA1UdIwQY
MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt
OWVlMDA2OTQyYjRiLzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi
LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI1edemS
dD71bCTw9yizM5DFbiSGRvgZW31o0GPeA7Jnu7dhg73LC8o2TIKmBJ8k6WCm8Shn
4O7ZwzecMTa6DEZGaUzu+RNITSnPzF7Lvea8e1QwsztAK7fIyImApFvALL3HDYFJ
52fngeQOrtqoGZF/p1354pYzlMrBDS5rYja1ghf7O+sH7REOXqJ0XsACyiGPfkDr
Ms+0rXIS1Z8lmqshjS24ZNXUp36+0C3W3gnXHfMoS+9oe8orWQIR3UiJfPDu0I2t
lrzCO9/T6/6Y9waWNi+j5ePNpJJGoIT29w0+1N2nWdskFmZ+DokYgUxTsYwxSibC
1Pze5yE/X47dsA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:24 2025 by rpki-client