Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: fmZHDSpfWdZr3kq8kKsidU2+N0k4rJkSVCYlf9UIJN4=
Subject key identifier: AF:3B:49:BE:C9:F8:06:74:06:2D:6D:4E:96:80:A7:3D:7F:09:47:BB
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 019A500767DF671821F3FD43D918270EA016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 16C5
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: kscZkJqsj+gp9ttTwelTn5w55LkJfHahk07q/XYirtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:67:df:67:18:21:f3:fd:43:d9:18:27:0e:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=af3b49bec9f80674062d6d4e9680a73d7f0947bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:08:03:e5:c2:ea:54:14:d6:50:6c:0e:cb:
8f:59:b1:02:42:b7:3a:5c:0b:4b:ba:fe:87:33:17:
a6:51:e4:c4:a7:73:e2:89:d5:22:de:c6:d8:97:d6:
1c:ee:c0:01:43:de:c5:42:71:e6:d1:cc:2e:98:47:
5b:8f:80:6f:b8:b6:09:2a:78:5d:7a:19:73:34:50:
6e:a0:2c:c3:ba:15:4a:3e:fd:7f:69:1f:b0:6c:71:
bb:30:74:79:53:27:dd:32:da:c1:db:97:57:65:47:
8d:1d:e6:04:16:0c:40:fe:94:1b:e8:9c:27:fb:59:
81:9c:fe:41:29:20:52:e3:49:39:26:f4:d7:d4:fb:
96:e3:4a:d7:f0:95:8c:75:bd:22:7c:92:0d:90:0a:
30:bd:2c:22:09:5c:cb:67:38:7c:1d:21:d0:fb:15:
a9:d7:98:ae:f6:e6:e2:29:39:72:e2:1d:9e:a9:67:
0b:2f:8e:b5:b8:61:49:00:8a:57:63:62:9c:7c:c2:
72:31:43:77:19:ba:93:40:b0:1a:8d:7e:99:96:45:
17:74:81:c6:ea:33:4d:dc:a0:c2:4b:85:07:e2:2a:
6b:86:37:1d:d2:e4:1c:7a:82:23:69:1c:ef:5e:0e:
e5:c3:02:6f:c1:97:49:ea:d9:b8:40:57:ba:3d:61:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:49:BE:C9:F8:06:74:06:2D:6D:4E:96:80:A7:3D:7F:09:47:BB
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:f6:e7:b8:d2:bd:fd:4f:21:30:bb:6c:df:f7:65:ba:0d:
f8:6c:ce:0e:75:bf:95:c7:d0:f5:f7:28:c6:36:d7:3b:52:d8:
a1:66:75:14:d3:28:4e:5a:bf:48:c7:33:d7:fb:83:c1:8b:68:
e2:fe:5c:7c:e7:a9:8a:5e:ca:a3:37:76:ec:70:64:80:26:e2:
a6:64:c1:0b:23:d7:cc:8a:3c:a4:ed:49:b4:54:f9:1b:c7:f6:
04:a5:8a:26:fc:02:30:c7:ce:fe:5f:92:4b:f7:78:a4:6e:c6:
be:71:e9:a9:17:25:49:6d:7a:c4:7e:d3:e4:20:bf:41:b4:18:
04:0b:92:e8:fa:89:40:01:38:2a:ef:09:0c:95:ac:9c:4b:82:
ec:f9:ad:66:7d:54:a8:aa:45:cf:c4:34:22:2f:39:43:04:02:
39:12:8b:28:b5:eb:2b:9c:62:d6:53:5b:d9:4f:71:d6:e1:82:
88:2d:24:24:60:0e:da:54:f6:59:b0:03:cf:7f:23:4c:73:51:
6f:a5:76:ba:fe:28:27:02:2c:f5:f0:db:4d:ad:89:b3:ec:76:
33:7e:32:ef:91:e7:e6:a4:f7:18:09:84:65:af:c1:4a:44:6a:
22:57:7b:5c:8e:d7:5e:4f:80:82:af:70:16:c8:d6:de:47:55:
eb:b7:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:01 2025 by rpki-client