Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: 1y3O5UlJHlVHLmah4ZoySK/nakZE1n0qzisVWWttQ8k=
Subject key identifier: F0:C6:B5:8C:3D:57:54:49:EC:2B:3C:78:DA:65:E3:2B:F6:E2:FE:9C
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 0198D5BBF3A9268FCB1EC9C42F8601E618AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 1219
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: bZcwAVuDoHALgJFG0JJ4O/+Hb4b5MXBXvg5ptib1SVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f3:a9:26:8f:cb:1e:c9:c4:2f:86:01:e6:18:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=f0c6b58c3d575449ec2b3c78da65e32bf6e2fe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:af:bc:72:54:6f:7e:7c:63:0e:bf:8d:24:
6b:e2:35:5b:d5:c2:1a:61:3e:52:8c:78:dc:e0:1e:
6e:de:45:ff:43:95:4a:36:aa:42:dd:cf:bb:61:ec:
46:f3:3c:ac:55:8a:e0:01:b8:74:31:f4:91:fc:75:
db:06:8f:d2:68:b8:71:bc:f1:d9:ef:01:d4:6f:1f:
c8:25:5c:26:55:04:70:0c:e0:4d:3b:96:5b:91:f4:
de:7b:25:f5:ec:91:a5:a9:b1:6c:eb:d2:cc:c4:70:
46:7c:a6:1f:74:e1:39:64:bb:ec:cd:90:ce:92:77:
b9:28:f0:26:f0:a5:13:61:b1:d5:5d:d8:87:77:fc:
f4:3f:85:93:fc:7a:6e:2b:22:87:48:98:ff:8b:78:
42:6a:ca:9b:da:92:71:d3:06:48:01:d9:22:6a:50:
63:23:c1:73:1b:1a:ed:3a:18:fd:6c:2b:d5:c7:a3:
13:51:a3:36:5a:84:85:42:db:90:00:d6:0a:c8:c0:
5b:96:80:3c:34:ea:a0:c9:13:7b:49:d5:12:52:e7:
41:12:a1:22:83:bc:9e:66:7f:8c:7c:a5:32:d5:db:
80:e4:45:33:46:8b:cb:16:2a:05:52:55:a9:ed:4c:
8d:6a:38:4b:b7:a6:ac:1f:5b:07:06:2a:17:4f:0c:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:B5:8C:3D:57:54:49:EC:2B:3C:78:DA:65:E3:2B:F6:E2:FE:9C
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:bb:5c:b1:41:bd:e1:68:71:8d:2c:a3:1a:a8:fc:a2:79:
9a:ff:02:cf:79:14:df:a5:d9:11:dc:50:3b:03:38:6d:e8:14:
32:74:e6:61:aa:22:00:29:5e:34:0b:58:70:27:8f:bc:7d:f4:
20:f2:20:f6:57:a6:df:4a:da:57:70:e9:bf:d4:bc:5d:39:dd:
7a:a2:f5:f6:96:d0:1a:7e:72:36:d2:6b:cd:9e:a9:8c:1d:35:
0f:ab:fa:52:58:99:84:81:ca:75:c5:6e:50:a5:fc:91:f4:77:
fc:4e:e1:ac:dc:f0:e0:85:72:bc:a1:01:41:e2:a5:ce:c7:d1:
9e:49:87:23:e9:c8:48:57:40:14:fc:87:f5:01:3c:9f:f1:14:
7f:09:8b:59:78:65:76:63:bb:94:9d:de:6a:3a:d9:9a:36:74:
d0:b5:e7:fb:6d:9f:b7:36:4d:b1:f7:e3:7d:40:52:6a:cd:21:
a1:3d:47:b7:71:b7:dc:ff:88:37:cc:66:66:98:b0:c7:a8:90:
fd:a4:b3:52:cc:8d:5f:d0:df:a9:ec:11:08:a6:be:c2:d6:a7:
47:a8:18:15:65:0a:56:80:70:04:c8:90:e6:57:ed:82:cb:d5:
de:e4:39:14:de:20:3d:51:76:36:ab:3a:0e:be:37:92:6e:f4:
f9:36:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:42 2025 by rpki-client