Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: ZY/AGconq9PrqFcLaTP58uSTKXKrfv4CLZBW0RKuyM0=
Subject key identifier: 53:68:E5:B1:83:64:5C:DA:83:E2:CF:BF:47:95:A0:38:B5:06:53:39
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 0199FF229620E13F44567A80B4C05368B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 12B3
Signing time: Mon 20 Oct 2025 01:01:20 +0000
Manifest this update: Mon 20 Oct 2025 01:01:20 +0000
Manifest next update: Tue 21 Oct 2025 01:01:20 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: VMlFCXugG8JmY6JqIziLqJy8BVxwbIiBL52JkQPVCu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:96:20:e1:3f:44:56:7a:80:b4:c0:53:68:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Oct 20 01:01:20 2025 GMT
Not After : Oct 21 01:01:20 2025 GMT
Subject: CN=5368e5b183645cda83e2cfbf4795a038b5065339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:37:ba:d3:96:46:6e:16:12:63:0e:d7:52:
80:31:b9:4f:55:96:38:b2:02:06:f1:eb:ef:cf:97:
4c:84:60:01:26:49:b7:91:e5:98:e2:39:8c:48:ed:
39:eb:87:16:a2:05:1e:00:e9:90:86:91:75:43:23:
c6:52:a7:38:2e:13:cb:53:08:6b:e5:7f:02:f4:70:
54:40:d7:0f:5b:95:67:f7:5d:48:12:02:cd:25:2d:
1e:ba:9f:ca:53:d9:05:08:03:b2:d9:0c:5c:59:b6:
08:39:59:ab:0b:13:2f:86:54:9a:d2:41:6d:38:27:
0f:cc:09:dc:5d:c7:f2:dd:4e:68:16:74:f5:bd:ac:
37:e2:5b:72:d1:c4:d7:48:a6:76:c9:a4:68:0e:f4:
38:4f:1e:1c:ef:4e:92:88:7e:5c:22:65:3b:d2:34:
64:ad:ad:54:40:eb:97:59:19:65:23:29:df:72:ce:
ea:9f:18:2e:b1:a3:09:08:13:c3:62:10:ef:3d:8b:
cc:56:14:9b:00:6c:95:d7:45:91:60:76:3d:7a:8d:
a4:83:ad:12:2f:32:17:de:be:5c:19:c4:24:fd:0f:
7e:c5:7f:52:61:8a:2e:68:be:2f:a7:93:9f:f8:bf:
4b:ac:f6:d4:ac:65:1e:15:bc:dc:40:3a:7f:1f:7f:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:E5:B1:83:64:5C:DA:83:E2:CF:BF:47:95:A0:38:B5:06:53:39
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:4c:11:13:ac:d4:a9:ce:9b:25:13:52:92:fa:6a:e5:fe:
fc:ce:ec:a3:51:21:bb:cc:b1:50:5c:d7:8e:a5:6b:18:42:f9:
02:0f:2f:f8:be:d0:7f:ae:59:80:f7:6a:6e:2b:1c:33:e3:98:
de:5e:42:28:98:72:1f:62:45:8d:7c:e0:13:1a:0b:a5:99:2b:
e3:02:20:c7:50:4a:61:eb:9d:4f:61:14:cf:8b:c5:02:92:47:
be:99:fe:e9:c1:28:6d:51:69:ca:ca:0f:b1:b1:04:b1:51:9a:
2b:bb:c9:ff:58:f1:04:b3:e7:0a:a1:ad:ae:c0:76:87:d1:8e:
ad:be:a0:7f:a1:b5:79:8e:dd:d5:2d:76:98:fb:d0:bc:51:0a:
ba:97:25:0b:6e:25:5e:f1:e5:a5:b4:d1:e2:e0:13:1e:9b:7c:
85:41:9b:c6:d0:c9:39:39:a2:ca:20:42:81:09:0d:67:55:ca:
93:e7:1a:46:bd:e1:4d:36:ea:36:df:ee:85:af:2b:39:05:fe:
14:74:d3:c5:42:00:22:7e:c0:b8:28:96:e6:6c:a6:16:d6:4f:
46:60:5f:0d:25:e0:69:7f:86:89:62:4a:d2:b0:e4:df:13:92:
72:fc:8a:26:42:9d:dc:81:02:dc:c9:01:f0:b8:82:af:a8:8b:
fa:5a:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:11 2025 by rpki-client