Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: T/u+Bwyfm4LaNFc+q5VHGTXQfV9unCWEpnwHvteAQNI=
Subject key identifier: DA:7F:02:73:BA:C6:8E:E4:14:09:92:09:39:4F:F1:A3:BC:15:BF:7D
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 0198733D6B10AFAB37C082B115F0FD0C027D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 11E6
Signing time: Mon 04 Aug 2025 04:01:01 +0000
Manifest this update: Mon 04 Aug 2025 04:01:01 +0000
Manifest next update: Tue 05 Aug 2025 04:01:01 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: UViUyNxc3BbSl6L4gw2W+TeOM/CFKdgaCJZK/jpCkOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:6b:10:af:ab:37:c0:82:b1:15:f0:fd:0c:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Aug 4 04:01:01 2025 GMT
Not After : Aug 5 04:01:01 2025 GMT
Subject: CN=da7f0273bac68ee414099209394ff1a3bc15bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:a2:32:02:f7:01:00:3e:ae:68:ec:6d:75:
ff:c0:fa:b5:b3:40:f8:64:16:10:bd:ce:0f:d8:9e:
65:08:6e:a2:bb:6b:c2:24:8a:58:83:35:65:da:f1:
e9:40:50:a1:e2:c9:7d:45:52:2e:95:e9:66:d1:e0:
e6:66:0b:f9:06:4b:d0:b3:a5:89:4f:79:45:d6:bf:
5e:cd:47:dd:59:e0:08:c0:6b:44:2b:29:8b:09:99:
c7:1a:cd:86:5e:5f:97:34:56:cc:cc:ab:e0:f7:70:
6b:bc:e7:3d:10:9c:6a:1b:8b:fb:18:90:da:7f:2d:
6f:d1:19:a7:aa:2e:8d:17:06:0e:00:ee:66:2d:13:
06:16:38:57:9d:58:7c:f4:77:1e:ba:36:35:b2:86:
de:01:f5:04:64:77:e1:1c:d6:39:9d:12:da:5a:bc:
98:ed:08:bb:b0:f1:6a:a9:6f:e1:7a:7c:1f:03:ab:
69:ff:df:ff:53:00:81:97:ba:31:e8:ac:a3:de:d4:
71:26:af:6a:e8:ea:ce:62:34:45:ee:9e:de:d1:ee:
5f:c1:06:f9:fc:ec:99:fd:d4:3f:e2:18:ca:bd:15:
26:ef:7e:39:d4:7a:d3:6b:04:a3:b5:f5:32:33:dc:
d4:f4:b2:da:92:17:74:68:d3:8b:4b:59:25:8f:3e:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:02:73:BA:C6:8E:E4:14:09:92:09:39:4F:F1:A3:BC:15:BF:7D
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:95:6c:59:14:4e:53:d5:d0:d4:4a:34:bd:2f:cb:b9:90:
0c:e0:9e:28:60:40:81:22:3a:4e:15:95:7f:ba:fa:d9:58:a8:
be:e7:54:e7:28:17:8b:ce:79:37:4d:b6:1d:56:82:2d:24:34:
86:8e:98:5e:fe:1e:8f:b1:e7:6d:a3:ac:70:a9:13:ab:27:c4:
2d:90:5c:30:1a:7c:14:3c:c2:06:09:6d:f2:30:71:11:25:2b:
3d:a8:8a:fc:3e:37:cd:c7:22:b8:33:f5:18:81:6a:83:9f:80:
d8:af:66:a6:3c:1f:28:23:30:14:8a:bc:2c:ab:8c:51:a2:c4:
dd:ae:27:7c:8a:8d:06:b2:a4:0d:ef:d3:fe:5e:e9:fe:0d:a3:
4c:c6:c1:1b:79:df:64:66:ed:d1:a6:29:b6:23:aa:c6:5d:51:
dc:27:c2:e1:e3:c6:80:a1:fd:76:cc:d9:2c:a2:0b:70:50:73:
3a:5d:04:65:c4:d7:00:82:d6:fd:9d:06:13:8e:38:5b:40:f0:
30:6a:c5:39:e1:80:c4:dc:10:a0:87:56:a7:5f:38:db:69:48:
59:88:5f:c4:27:6d:1f:87:d4:6c:10:0c:72:8a:82:db:56:68:
0b:09:5d:ef:8e:d7:c4:e0:8b:4c:17:99:10:e8:36:65:b6:05:
2b:4b:3f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPWsQr6s3wIKxFfD9DAJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MWMzZTBmZDg2MjE5NzExNjA0YWU3NmUyMjNjZjBiNzMw
Y2RmYjcwHhcNMjUwODA0MDQwMTAxWhcNMjUwODA1MDQwMTAxWjAzMTEwLwYDVQQD
EyhkYTdmMDI3M2JhYzY4ZWU0MTQwOTkyMDkzOTRmZjFhM2JjMTViZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUOiMgL3AQA+rmjsbXX/wPq1s0D4
ZBYQvc4P2J5lCG6iu2vCJIpYgzVl2vHpQFCh4sl9RVIulelm0eDmZgv5BkvQs6WJ
T3lF1r9ezUfdWeAIwGtEKymLCZnHGs2GXl+XNFbMzKvg93BrvOc9EJxqG4v7GJDa
fy1v0Rmnqi6NFwYOAO5mLRMGFjhXnVh89HceujY1sobeAfUEZHfhHNY5nRLaWryY
7Qi7sPFqqW/henwfA6tp/9//UwCBl7ox6Kyj3tRxJq9q6OrOYjRF7p7e0e5fwQb5
/OyZ/dQ/4hjKvRUm73451HrTawSjtfUyM9zU9LLakhd0aNOLS1kljz6txwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp/AnO6xo7kFAmSCTlP8aO8Fb99MB8GA1UdIwQY
MBaAFBYcPg/YYhlxFgSuduIjzwtzDN+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMt
Y2FjYjMzNWNlOTc1LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMtY2FjYjMzNWNlOTc1
LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFqVbFkU
TlPV0NRKNL0vy7mQDOCeKGBAgSI6ThWVf7r62ViovudU5ygXi855N022HVaCLSQ0
ho6YXv4ej7HnbaOscKkTqyfELZBcMBp8FDzCBglt8jBxESUrPaiK/D43zcciuDP1
GIFqg5+A2K9mpjwfKCMwFIq8LKuMUaLE3a4nfIqNBrKkDe/T/l7p/g2jTMbBG3nf
ZGbt0aYptiOqxl1R3CfC4ePGgKH9dszZLKILcFBzOl0EZcTXAILW/Z0GE444W0Dw
MGrFOeGAxNwQoIdWp18422lIWYhfxCdtH4fUbBAMcoqC21ZoCwld747XxOCLTBeZ
EOg2ZbYFK0s/DQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:51 2025 by rpki-client