Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: 8hKO8vVEQnSLQ/EsFCVvnMXpOHuDuVZfaPsGFHEisaA=
Subject key identifier: 2C:BF:D9:E0:DC:48:3A:2C:8F:A9:11:F6:DA:A9:27:9D:BC:8A:5A:7B
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 019874F4FE2E28D9B953FEDFC22939CED1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 15CF
Signing time: Mon 04 Aug 2025 12:01:09 +0000
Manifest this update: Mon 04 Aug 2025 12:01:09 +0000
Manifest next update: Tue 05 Aug 2025 12:01:09 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: aPXbaS6dJjUXqSG+Nr4zBiRfJHuEeRHPxkDnrlLKa1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:fe:2e:28:d9:b9:53:fe:df:c2:29:39:ce:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Aug 4 12:01:09 2025 GMT
Not After : Aug 5 12:01:09 2025 GMT
Subject: CN=2cbfd9e0dc483a2c8fa911f6daa9279dbc8a5a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:da:54:d1:6a:7e:be:40:00:86:0e:45:52:
84:dd:b1:82:e3:b2:b4:bd:9b:f1:8d:b0:65:6a:85:
ce:eb:ba:c3:6d:47:6c:e6:bd:6a:82:af:5a:dd:d4:
a8:d6:62:93:1d:28:c9:ec:d2:4b:93:97:c9:33:16:
cd:ac:d4:1d:60:70:15:2c:32:59:c3:1b:f4:75:f2:
3c:b1:d6:d5:c1:52:1a:7e:84:d1:88:d2:42:aa:1f:
49:d9:43:09:cd:ac:65:d6:5e:88:6c:b2:6e:18:58:
1c:cb:cd:dc:7a:dd:10:52:14:df:cd:2e:31:55:11:
1d:02:fb:54:8f:cf:60:4b:78:76:45:76:3f:1a:5e:
6b:db:93:7b:d3:6c:31:87:03:dd:74:11:48:68:47:
f1:c9:1c:6c:48:fd:c8:2d:6d:22:0f:b4:33:96:bd:
b6:49:c4:cf:71:cd:d5:5b:c6:35:83:02:6d:63:ee:
af:95:81:4c:15:8c:42:1d:29:c3:1f:af:e0:8a:5e:
90:be:48:58:28:53:83:ad:00:fa:1c:a1:25:b5:16:
55:8d:56:5b:39:7f:27:48:8e:4f:5d:34:b5:57:8b:
30:8d:0e:51:8e:fb:e3:ef:1e:80:6b:71:c3:44:8e:
de:86:f4:99:5b:e6:b0:34:b2:10:db:cf:b7:6c:0b:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BF:D9:E0:DC:48:3A:2C:8F:A9:11:F6:DA:A9:27:9D:BC:8A:5A:7B
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:0b:da:56:a4:93:86:d0:8f:39:64:8b:97:2c:ae:00:42:
db:02:ec:c8:a2:8c:47:d4:cd:15:72:1f:9c:2d:e8:ab:8e:47:
a9:c0:23:d1:50:70:9c:cd:e8:eb:fe:c3:cb:ef:67:68:51:09:
9f:99:f2:89:fa:45:7a:0c:42:a9:42:30:83:c4:92:6d:a8:d3:
19:07:40:b9:09:b0:68:8e:c2:86:50:1c:e7:cd:30:a4:71:e2:
fa:29:b1:1f:02:25:13:56:27:96:9a:0c:60:f2:5a:0f:7e:19:
9a:81:a0:84:40:32:e8:6e:7d:e8:48:03:7a:3b:59:e4:bd:1a:
d3:69:ff:97:87:fa:19:6a:cf:97:ec:34:92:76:39:e4:83:0f:
5a:f4:2d:58:97:64:99:6e:1c:f5:f7:1b:df:d5:6f:36:10:80:
fe:c4:5f:d6:75:3d:07:13:54:41:9a:c1:f4:40:0d:cc:3b:a3:
89:e9:e4:4d:1a:bb:53:79:37:2d:b4:6b:a1:2e:f4:7a:20:65:
4b:a4:dc:bb:5c:bb:e7:f5:18:37:1d:e9:62:58:55:93:cd:5d:
84:cd:42:8a:00:25:e1:42:be:a3:85:f2:f0:05:eb:0a:e2:70:
8e:1d:f2:08:f0:a3:d3:6f:21:bb:c8:5a:f1:3b:c9:d6:95:dd:
81:94:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:41 2025 by rpki-client