Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier: Q2mdOREcTPh6fpZV0L046rRB+bhI+x6qs7Zgk3pZo5Q=
Subject key identifier: B4:C9:03:B3:2E:BB:6F:73:BC:F4:A6:C9:33:0F:8A:2A:89:FB:5A:4D
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01987A8921821A342FA7850A48A0A4332396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number: 1622
Signing time: Tue 05 Aug 2025 14:01:04 +0000
Manifest this update: Tue 05 Aug 2025 14:01:04 +0000
Manifest next update: Wed 06 Aug 2025 14:01:04 +0000
Files and hashes: 1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: h96x3ZXbDFdFYYFpd7ZfJHm6wry1YPEjDx4m3NbKTjo=)
2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:21:82:1a:34:2f:a7:85:0a:48:a0:a4:33:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Aug 5 14:01:04 2025 GMT
Not After : Aug 6 14:01:04 2025 GMT
Subject: CN=b4c903b32ebb6f73bcf4a6c9330f8a2a89fb5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:26:2a:6e:a0:35:06:43:c4:d0:ff:b8:2a:
ec:08:62:4f:0f:82:f4:b7:eb:5d:1d:19:c0:a8:2b:
09:87:9f:75:6f:df:8a:7b:3b:99:25:30:d0:91:a4:
13:5d:e8:2d:cc:a8:b6:9d:3e:13:6c:73:e8:13:79:
71:0f:c2:a6:bb:26:ad:d5:bf:d1:fb:6b:b3:1d:75:
c6:ca:6f:a5:2f:be:5e:d4:45:ee:53:9e:ca:e9:77:
ae:b2:8e:d2:af:6a:43:a3:b4:7e:c5:ab:17:18:9e:
72:07:ae:b4:ce:81:78:a6:96:4c:b2:43:fe:65:9c:
49:3b:ce:aa:ea:c5:61:d4:83:78:7f:80:4a:b2:3f:
61:f7:60:4a:72:0e:b8:32:78:77:17:a4:b5:53:91:
52:04:aa:0b:f4:f3:7a:28:f2:b9:35:fd:8a:00:ae:
4c:22:aa:18:19:ca:81:2c:1f:e3:0c:8b:5c:e0:fa:
43:3e:02:10:61:ab:89:24:1c:3d:77:7f:80:87:25:
c8:b9:0b:61:85:83:0c:e1:c2:0a:8c:0d:b1:27:b1:
25:05:52:b1:13:ad:2d:fc:71:ab:4c:ff:30:05:1c:
f6:22:a1:df:e1:dd:af:47:63:6c:7a:fe:6c:04:48:
ec:2a:51:6c:42:bd:2c:90:50:5c:25:cb:cb:6c:c0:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:03:B3:2E:BB:6F:73:BC:F4:A6:C9:33:0F:8A:2A:89:FB:5A:4D
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:78:87:8a:65:0b:98:56:7c:6e:ae:da:23:63:28:09:78:cf:
6f:3a:dd:a7:d3:c2:cb:69:8a:ce:18:be:0a:f1:ed:3b:ec:af:
ba:e3:76:52:36:c5:a7:05:29:a8:11:78:6c:23:18:f6:66:e8:
65:11:68:5c:d5:46:21:85:ed:e1:7a:1c:e4:77:79:e5:97:e1:
bf:2d:20:cb:09:af:40:39:d5:63:26:fd:52:17:9c:25:73:d0:
f0:64:8c:12:cc:a1:a2:4c:3c:1b:f3:cc:c3:eb:5e:dc:13:11:
7e:5f:aa:e4:e6:25:94:8c:67:a9:82:d1:74:af:8b:28:e9:75:
1a:7f:36:06:0f:11:fd:f2:66:0a:ce:0f:3e:2a:6f:4a:f9:15:
84:9b:53:97:e6:d6:07:35:15:2a:0e:88:06:ea:ae:14:4a:b8:
f5:d8:5a:fd:6b:3e:fc:c7:da:4d:d3:4e:bd:61:29:8d:40:fe:
bc:fe:3d:6d:7c:47:a2:a6:51:8d:38:83:0a:3e:d3:8b:e0:b6:
d2:b0:dc:e4:6b:89:f8:11:a2:02:05:a6:8a:5e:fd:b2:c0:ba:
83:1d:87:d9:78:4f:82:82:5c:a8:5e:f0:43:13:58:4f:1e:2e:
ae:8d:e8:a7:58:49:ee:61:ab:0d:77:11:26:0c:fd:73:23:aa:
99:b6:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:07:48 2025 by rpki-client