Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: Nfg3s8r8lsqLBAKbYQlLbEZ8r1Ew2AFp0zJKR7U6MTM=
Subject key identifier: 5B:EB:4C:01:B7:46:22:A6:F0:AE:2F:B5:86:2F:EC:2D:23:D5:D2:61
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019896A592683FA655886D9DA09C4234DC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0AE0
Signing time: Mon 11 Aug 2025 01:01:29 +0000
Manifest this update: Mon 11 Aug 2025 01:01:29 +0000
Manifest next update: Tue 12 Aug 2025 01:01:29 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 8CaDP5hPM2kHRHjV+YUIy5IbTkMNKfsEebczVIIUYMo=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:92:68:3f:a6:55:88:6d:9d:a0:9c:42:34:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Aug 11 01:01:29 2025 GMT
Not After : Aug 12 01:01:29 2025 GMT
Subject: CN=5beb4c01b74622a6f0ae2fb5862fec2d23d5d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:25:b7:63:08:68:46:10:3d:05:cd:2b:06:
3d:f4:c9:cf:56:b0:92:63:8c:d5:ed:7a:bf:a9:9f:
ad:13:1d:83:bb:60:43:24:58:8d:b8:a9:83:29:65:
5c:12:47:94:af:a4:56:f8:33:12:9d:b2:ce:ff:b3:
78:1a:ca:9c:a3:84:0e:ae:3d:86:56:6d:e1:0e:0f:
68:1e:df:9e:1c:d2:ba:dd:2e:8d:f1:e1:84:ef:bf:
34:83:0b:4d:da:62:a1:61:13:d6:d3:aa:96:b7:39:
1b:af:e7:16:b6:f7:78:ed:e0:b4:a8:c0:15:ab:84:
cd:12:7a:60:78:21:a6:d7:27:9f:0e:22:d9:ca:38:
24:31:bd:a6:b0:c5:9b:4d:65:08:18:56:92:fe:87:
47:f1:0c:78:90:a8:68:46:de:97:3f:4b:ed:b9:85:
31:b0:ed:a3:44:f5:31:d9:f7:d4:2b:c1:cb:cc:a4:
d9:63:1c:ba:97:eb:ad:51:e1:d2:05:fc:f2:93:dc:
48:61:59:03:f6:0b:94:af:34:ee:71:a5:ef:7a:9d:
ad:4a:a6:8e:b0:11:e9:f4:88:b3:02:e9:33:a9:b6:
14:69:3b:05:38:21:8c:33:37:11:9f:ff:93:cd:2d:
72:62:ef:58:b4:7e:44:21:35:31:8b:04:c9:4c:4e:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:4C:01:B7:46:22:A6:F0:AE:2F:B5:86:2F:EC:2D:23:D5:D2:61
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a1:40:71:97:35:85:06:bc:69:b9:2a:03:5f:bc:5a:85:76:
3a:4d:dd:37:54:82:8f:9e:3d:9d:6b:65:e4:a2:82:e9:da:86:
99:c3:96:83:c6:79:2e:95:ab:61:1e:45:c1:fd:99:13:9e:a0:
29:dd:80:cb:15:d4:58:17:a8:53:7a:09:fd:3d:63:20:5c:f3:
76:31:05:b9:91:a2:09:9c:2d:3b:80:9f:c7:53:ca:4b:e0:c6:
d3:08:22:ee:60:69:aa:77:94:e7:23:54:81:29:c5:f3:c4:fe:
f8:a4:d0:f9:b4:a8:fa:ce:39:05:ba:39:cf:66:3b:4c:58:4c:
98:71:bd:9a:0d:a8:94:e0:05:c4:e7:7f:67:b2:00:de:2f:91:
c2:50:fd:7a:5a:78:ba:1a:9c:df:2a:01:35:87:4b:5b:3f:d7:
8b:aa:45:63:f6:0d:42:1a:37:ab:43:1e:59:61:76:1a:f1:af:
26:e2:a9:da:c6:94:f6:a2:73:04:04:b6:39:11:6a:9b:4a:43:
ad:f5:a6:68:e7:f1:fe:4a:0f:c0:a1:26:91:4f:90:73:61:2d:
f0:a2:82:07:c1:b3:1c:f1:b7:e1:d0:fc:0a:0c:30:30:7e:93:
aa:2a:ec:7b:44:a1:23:fa:b0:77:28:c3:40:70:e5:88:ad:de:
dd:86:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:17 2025 by rpki-client