Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: 1R4InwnsNFHkDDMGDmm5dg1m9hqpfUIroAxfyVcELdc=
Subject key identifier: F4:77:A2:87:C1:CC:B8:BC:9D:6B:16:9F:48:13:9D:D7:2F:59:6C:42
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 0198D6616E2876BFFF92CCF5986BD9765F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0B01
Signing time: Sat 23 Aug 2025 10:02:46 +0000
Manifest this update: Sat 23 Aug 2025 10:02:46 +0000
Manifest next update: Sun 24 Aug 2025 10:02:46 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: Oo/8r94rFmAW3SitZieVvBoUmnBI2XqNBBiJWZZ/2CA=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:6e:28:76:bf:ff:92:cc:f5:98:6b:d9:76:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Aug 23 10:02:46 2025 GMT
Not After : Aug 24 10:02:46 2025 GMT
Subject: CN=f477a287c1ccb8bc9d6b169f48139dd72f596c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:9f:51:f9:8a:86:8c:20:40:31:1b:65:af:
58:8d:fc:ea:76:9a:b2:a1:44:e1:20:12:8c:07:66:
f2:56:cc:8c:bc:9a:b8:89:43:25:59:95:3a:e4:86:
ac:3f:9e:60:80:0f:a2:20:e4:25:a6:c6:bc:8f:61:
9b:99:9c:95:31:cc:54:d2:88:bf:3d:4d:fb:6b:2d:
9f:2b:10:7f:95:7c:ef:6c:b2:f1:8c:b7:0a:e8:4b:
54:25:eb:45:28:fe:e6:ed:82:a7:f3:d0:9d:d0:9c:
f1:92:2b:e3:65:1b:d5:f8:83:aa:dd:9f:57:4c:0a:
ee:f9:2a:a3:e1:2c:69:0e:cd:c2:79:3c:05:df:17:
5f:5d:ab:38:16:00:5c:dd:5f:c2:55:46:80:16:c8:
ae:6d:f2:6a:a5:c6:59:b3:c9:49:8d:52:10:58:68:
51:14:16:29:2c:a3:84:86:c6:b5:67:5c:56:52:5f:
6a:e1:46:33:a7:b1:1e:14:1d:6c:8c:de:e1:ac:7d:
e5:96:8f:13:97:d0:16:e8:49:ac:c9:57:6f:f4:38:
df:0a:67:7d:25:60:96:3d:09:3c:83:ac:01:88:a1:
c6:a2:ed:93:71:9e:1f:8e:b1:93:0c:9d:4c:16:5b:
0b:1d:00:b6:70:ad:69:9e:a0:9a:ef:b6:5a:dd:3d:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:77:A2:87:C1:CC:B8:BC:9D:6B:16:9F:48:13:9D:D7:2F:59:6C:42
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:71:00:2c:50:89:96:3b:70:3e:82:28:9b:bb:1f:8d:77:28:
e7:af:fc:cb:f4:b4:4c:e7:f8:a8:a2:29:0a:72:d0:b7:4a:49:
3d:9b:56:12:83:19:f0:d4:70:23:9d:31:4e:71:bc:a5:c9:d2:
7e:f7:07:1e:3b:bf:ab:59:bf:ae:40:a9:92:57:8d:ce:43:92:
e3:13:e7:f9:69:fd:d2:ee:61:cf:79:e2:ad:a6:10:24:b5:99:
ec:91:5a:db:34:9d:29:da:79:a7:24:f3:3a:5d:88:f6:7d:b5:
3f:e5:97:bd:e3:51:1f:39:f7:98:48:8a:bd:e3:a7:01:e1:6f:
f9:8d:b1:8a:f9:8b:c0:64:d7:4f:43:84:50:63:c6:35:49:a4:
58:e0:52:5f:61:6b:8c:59:bd:02:7e:33:9a:fb:a2:22:b5:00:
aa:aa:e0:af:f4:2f:4b:5a:73:f8:4f:a3:89:18:32:dc:35:c7:
ea:af:56:3b:fc:df:9d:08:7f:3a:2e:02:d2:03:12:2b:a0:81:
8f:2c:7d:0f:c4:db:ad:82:66:7b:92:26:33:50:8d:8b:5d:83:
27:09:f8:0b:3f:67:68:f6:45:63:85:2c:b5:da:6f:41:0b:6f:
7a:24:9c:17:9f:96:02:1e:d1:ec:ea:92:58:95:b4:44:fe:cd:
18:5a:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:23 2025 by rpki-client