Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: Ri7DRiD7WOqBkbSIpnAALZpTF+lftRH4C/ifdApM+gA=
Subject key identifier: 4E:EA:84:91:EC:86:E3:25:F8:21:62:42:85:C0:FF:B7:23:ED:E6:CD
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 0199FBEC34B16CE4CA8D7FDAB7678751C2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0B99
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: P/JTQM1oiaX1UHe0Oodriijdg8k9QKx0se7Zxg/g2K8=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:34:b1:6c:e4:ca:8d:7f:da:b7:67:87:51:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=4eea8491ec86e325f821624285c0ffb723ede6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:13:32:af:84:42:99:53:c3:77:99:f3:a1:
d9:48:6b:5f:da:c3:be:71:51:39:57:47:a5:fd:7e:
98:87:9a:88:a9:cc:ca:bd:4b:6d:da:4d:2f:3c:8c:
0c:43:68:bb:e2:44:16:5b:7b:7d:3e:b3:8a:a0:1b:
e7:1c:78:8a:77:3c:29:41:00:2d:c9:c7:4d:ad:bb:
13:ee:f0:e6:ce:14:9a:2a:74:2d:a7:e9:a0:85:a6:
51:a6:bb:66:25:3d:89:61:6d:16:53:00:fb:93:d7:
8a:07:c6:33:6f:c3:62:5b:56:45:d3:f4:7d:da:4e:
4a:fa:65:07:79:ca:73:9f:ff:f3:89:0e:32:b2:59:
5d:1d:01:1f:ca:11:82:13:52:0d:71:1d:b5:44:c9:
58:76:bb:64:10:f0:15:b6:a5:01:26:44:1a:81:4c:
18:46:cf:ba:75:52:54:50:84:2f:05:54:66:84:ae:
2c:b3:b2:c0:5c:38:7a:15:55:de:8f:88:5e:68:18:
8f:c9:4d:ce:49:32:64:75:52:ef:76:58:06:da:29:
4e:b3:57:77:d2:0c:6e:94:d9:09:fe:71:44:92:70:
65:fa:b0:72:f6:94:a3:75:9f:b2:4b:a5:97:34:a5:
e0:a0:68:e5:bc:e2:56:42:4c:8b:72:1d:0d:f4:b6:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:84:91:EC:86:E3:25:F8:21:62:42:85:C0:FF:B7:23:ED:E6:CD
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:41:65:2f:71:3a:a6:20:1a:42:6b:28:05:09:39:d4:a4:9c:
d6:8c:12:51:d1:84:56:c6:ca:c8:37:64:5b:44:41:00:33:e4:
61:fa:df:89:54:5c:4b:32:d8:dd:f6:6c:45:6c:8a:dc:9f:82:
ec:7e:be:3a:cd:f5:6d:d3:7e:33:a8:44:88:b5:26:0c:f1:98:
70:5e:5d:fa:d4:43:43:84:d4:87:1a:d9:af:23:02:e6:0b:52:
a4:34:4e:7b:90:fd:fb:6a:2e:80:32:e2:eb:f5:1c:93:f3:67:
2d:19:c7:28:e6:8f:58:8d:ef:15:66:81:d6:5a:ec:10:2a:16:
4a:ea:b0:f1:40:89:66:6a:21:ef:68:58:ea:ee:fe:c7:16:d1:
57:48:80:09:7d:ec:fd:97:2d:37:fa:f4:d6:34:a4:8d:5e:64:
08:ab:33:59:1d:64:f5:42:26:df:6c:e8:5d:15:72:47:75:a9:
0a:3c:a1:01:1d:a1:73:13:5f:bb:45:18:fb:f7:38:1e:44:f3:
74:4f:b8:24:fd:95:7c:2a:9f:6a:b6:8e:a3:ac:6f:79:1d:5f:
40:23:ee:ba:dc:37:7a:c3:18:ab:13:7d:46:c2:f0:6f:46:85:
35:a3:e7:14:23:77:ce:d2:02:2f:f1:eb:40:a6:8e:a3:7f:a7:
6d:d6:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:08 2025 by rpki-client