Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: Zrri+qy+H4OAnZw78rdqp9f+qg4D8c619KHZz8y++tw=
Subject key identifier: AA:2F:3E:11:DC:84:08:30:5D:B2:D0:61:6B:FC:AF:86:B6:10:3F:12
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019770755FFFACD0F1C67B39B44661056210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 1160
Signing time: Sat 14 Jun 2025 22:00:29 +0000
Manifest this update: Sat 14 Jun 2025 22:00:29 +0000
Manifest next update: Sun 15 Jun 2025 22:00:29 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: VPHQJeVkcRL/3lU2uDaLTeu+VTieKZM0n6/b6xlj76s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:5f:ff:ac:d0:f1:c6:7b:39:b4:46:61:05:62:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Jun 14 22:00:29 2025 GMT
Not After : Jun 15 22:00:29 2025 GMT
Subject: CN=aa2f3e11dc8408305db2d0616bfcaf86b6103f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:c2:b5:ba:74:72:6b:56:38:df:32:c9:32:
01:2e:64:6a:5c:bf:f8:88:3b:bc:c2:80:84:51:81:
fc:4e:68:88:91:0c:f6:5f:d8:dd:e8:d2:24:ad:33:
21:76:ab:13:8c:5a:b7:0c:45:ca:34:bb:f7:57:dc:
25:e2:78:cf:fe:4c:dd:79:df:1c:f7:ee:0c:3f:cf:
72:38:4d:0e:88:2d:6b:4c:bf:3b:c4:41:3f:0c:ad:
e6:48:06:2c:e3:27:73:26:c1:eb:88:00:ab:4f:50:
4d:21:95:1f:76:ce:8d:98:0e:be:08:26:5e:38:7e:
d4:8a:47:85:81:e7:3e:2c:51:82:95:67:db:9a:9d:
78:26:28:c2:09:bc:07:df:29:84:8b:16:9b:81:db:
50:14:58:9f:1f:76:73:07:8a:e0:b5:87:f2:68:d1:
71:2b:31:1d:34:33:75:96:5c:79:8c:c2:c6:e6:5b:
f2:e2:d9:e0:59:0d:11:e9:49:c4:9a:42:45:c4:3e:
c6:4e:ed:d6:80:a9:40:0a:36:46:15:c6:e5:54:b6:
bb:df:2a:01:26:4e:85:65:44:34:ad:9e:3a:6a:81:
9b:36:c2:d8:63:19:dc:10:2d:5b:15:a0:85:aa:c9:
0f:80:49:e0:76:fd:fb:93:56:f0:a3:ed:ae:d5:14:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:3E:11:DC:84:08:30:5D:B2:D0:61:6B:FC:AF:86:B6:10:3F:12
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:92:6a:0b:eb:23:1d:aa:af:79:21:d2:71:c0:b5:53:f3:
95:54:0e:b5:75:05:a8:87:b7:52:53:98:33:96:5c:be:e1:f6:
1a:8a:af:0d:46:cc:e9:85:0f:a6:83:db:e4:2e:c3:40:35:11:
ef:95:0b:f9:c5:aa:fe:e7:49:bf:9b:5d:0d:2c:b8:26:1c:37:
8b:7c:f1:d1:ee:53:2b:c5:d7:58:d0:8c:3d:98:60:32:7b:ac:
af:a7:88:9d:c7:a8:d5:c3:bb:d4:18:02:e1:6e:53:e3:7d:20:
3c:b8:29:cd:a5:5f:25:e2:e9:1c:02:40:67:09:61:7d:fa:d9:
36:75:b8:1f:d8:5c:4a:b8:5d:43:eb:12:8b:b7:5a:e4:0c:1d:
59:4b:dc:00:15:94:b7:5b:9f:17:4b:66:8f:d1:f1:bb:eb:0a:
0f:c4:1b:4e:e3:30:53:55:b2:13:5c:3b:25:74:41:7d:64:79:
4a:ca:90:a7:c6:d5:c3:7d:e5:c5:6a:7d:fc:91:ed:e6:01:46:
ee:f5:db:73:27:47:5e:fa:83:f6:10:65:2e:1b:81:3f:6f:72:
86:63:8a:1b:45:05:06:32:db:e8:ea:5e:09:b4:6a:11:26:fe:
c7:b2:a1:cc:18:50:d9:7d:03:fa:5d:6e:36:81:61:6c:29:4e:
06:80:2b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdV//rNDxxns5tEZhBWIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MWMzZTBmZDg2MjE5NzExNjA0YWU3NmUyMjNjZjBiNzMw
Y2RmYjcwHhcNMjUwNjE0MjIwMDI5WhcNMjUwNjE1MjIwMDI5WjAzMTEwLwYDVQQD
EyhhYTJmM2UxMWRjODQwODMwNWRiMmQwNjE2YmZjYWY4NmI2MTAzZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg3Ctbp0cmtWON8yyTIBLmRqXL/4
iDu8woCEUYH8TmiIkQz2X9jd6NIkrTMhdqsTjFq3DEXKNLv3V9wl4njP/kzded8c
9+4MP89yOE0OiC1rTL87xEE/DK3mSAYs4ydzJsHriACrT1BNIZUfds6NmA6+CCZe
OH7UikeFgec+LFGClWfbmp14JijCCbwH3ymEixabgdtQFFifH3ZzB4rgtYfyaNFx
KzEdNDN1llx5jMLG5lvy4tngWQ0R6UnEmkJFxD7GTu3WgKlACjZGFcblVLa73yoB
Jk6FZUQ0rZ46aoGbNsLYYxncEC1bFaCFqskPgEngdv37k1bwo+2u1RRbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKovPhHchAgwXbLQYWv8r4a2ED8SMB8GA1UdIwQY
MBaAFBYcPg/YYhlxFgSuduIjzwtzDN+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMt
Y2FjYjMzNWNlOTc1LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMtY2FjYjMzNWNlOTc1
LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkqSagvr
Ix2qr3kh0nHAtVPzlVQOtXUFqIe3UlOYM5ZcvuH2GoqvDUbM6YUPpoPb5C7DQDUR
75UL+cWq/udJv5tdDSy4Jhw3i3zx0e5TK8XXWNCMPZhgMnusr6eInceo1cO71BgC
4W5T430gPLgpzaVfJeLpHAJAZwlhffrZNnW4H9hcSrhdQ+sSi7da5AwdWUvcABWU
t1ufF0tmj9Hxu+sKD8QbTuMwU1WyE1w7JXRBfWR5SsqQp8bVw33lxWp9/JHt5gFG
7vXbcydHXvqD9hBlLhuBP29yhmOKG0UFBjLb6OpeCbRqESb+x7KhzBhQ2X0D+l1u
NoFhbClOBoArGg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:58 2025 by rpki-client