Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: dw4H2eJaBfTgV30yT2WpqnIqo5NPKGuaFc3SP5U3NZ8=
Subject key identifier: 9A:DA:63:B8:CE:00:CD:FC:4D:17:1D:1A:A9:DA:73:C8:DA:AA:74:F3
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019A50E2AA2829ABDE59E6DCB22CDE262C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0BC5
Signing time: Tue 04 Nov 2025 22:00:23 +0000
Manifest this update: Tue 04 Nov 2025 22:00:23 +0000
Manifest next update: Wed 05 Nov 2025 22:00:23 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: I31wqo6iX+GcIEpzt/hxtLuZJst1k5U0ScraO5G20Fo=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:aa:28:29:ab:de:59:e6:dc:b2:2c:de:26:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Nov 4 22:00:23 2025 GMT
Not After : Nov 5 22:00:23 2025 GMT
Subject: CN=9ada63b8ce00cdfc4d171d1aa9da73c8daaa74f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:d9:41:84:7d:9b:3c:cb:a6:31:f1:c1:09:
d8:a2:2e:0a:b3:7f:51:a4:3f:ae:44:5d:e5:b1:10:
3b:4d:b3:7e:7a:17:aa:d8:33:58:b1:d3:24:5f:d5:
19:41:16:2b:1d:92:d6:d3:a6:94:3a:a7:9c:4d:35:
d0:2b:2f:0d:d8:57:85:00:f0:0c:1f:f5:da:20:03:
4e:9e:f0:b2:8f:2d:a9:d5:a4:06:36:b8:01:a1:86:
76:8b:4b:56:a7:0a:40:6a:6f:db:ae:8b:43:5d:5c:
d4:fb:9f:ce:41:fd:cb:17:de:f8:cd:77:90:99:91:
a7:65:3a:ae:99:26:d8:e4:be:d8:68:a4:da:34:13:
d7:c2:73:65:29:3c:de:5f:94:1a:8f:82:e6:d8:53:
22:cf:11:1d:07:df:02:25:c9:83:51:57:29:0c:1a:
26:e4:69:46:fd:3e:21:b9:76:6f:36:8d:c4:21:9d:
52:ac:34:28:3c:9c:51:3a:73:92:ae:ef:b5:58:46:
60:51:23:cf:6f:e6:fc:af:a6:07:60:51:a4:88:95:
89:5e:5e:7d:f0:4a:3a:fe:89:8b:6c:0e:5f:dd:59:
a2:e2:c3:f3:b4:c9:37:3d:82:3a:11:f7:56:32:17:
56:ed:36:d9:c1:26:d8:ea:d0:81:51:0b:12:e5:5f:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DA:63:B8:CE:00:CD:FC:4D:17:1D:1A:A9:DA:73:C8:DA:AA:74:F3
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:a5:1e:b6:9e:09:ce:0f:d7:2c:2d:47:57:fd:60:9a:5c:
e9:8d:79:2c:84:11:81:c1:1a:08:cd:af:76:77:51:86:64:65:
05:0c:85:49:50:16:2d:aa:76:21:86:2c:e7:03:d4:84:ef:29:
e3:5d:5e:53:2a:ac:0f:11:95:ba:59:cd:04:41:c0:09:f4:66:
b6:85:1f:69:0a:80:3c:f4:4c:76:31:99:cf:88:7c:20:66:a4:
9b:ad:5e:85:b6:60:96:3f:5b:c8:3d:73:95:38:50:19:bd:9a:
b4:0c:4c:0f:bc:3e:86:42:ab:45:df:f5:f8:cf:b1:86:22:f6:
1f:62:dc:35:04:29:f5:e9:18:64:cd:30:b6:28:db:d3:94:74:
a8:e6:54:06:73:b0:67:16:bb:78:77:4a:65:80:d9:9b:a8:44:
49:58:ce:62:78:7b:66:da:6f:b9:44:45:93:9c:68:4b:da:60:
6a:2a:ea:62:96:cb:d7:ac:77:6e:9f:eb:6d:eb:c2:6a:11:ee:
f4:a8:4a:ad:61:b5:c3:57:82:0c:1c:84:ff:74:0c:be:fe:92:
44:b9:eb:b6:d2:f6:79:58:a0:9a:1d:78:72:24:36:3c:8f:ae:
4b:b7:af:08:cd:3c:a6:0c:b0:75:ea:a3:18:99:ab:81:18:56:
59:f1:aa:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4qooKaveWebcsizeJiw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjUxMTA0MjIwMDIzWhcNMjUxMTA1MjIwMDIzWjAzMTEwLwYDVQQD
Eyg5YWRhNjNiOGNlMDBjZGZjNGQxNzFkMWFhOWRhNzNjOGRhYWE3NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+jZQYR9mzzLpjHxwQnYoi4Ks39R
pD+uRF3lsRA7TbN+eheq2DNYsdMkX9UZQRYrHZLW06aUOqecTTXQKy8N2FeFAPAM
H/XaIANOnvCyjy2p1aQGNrgBoYZ2i0tWpwpAam/brotDXVzU+5/OQf3LF974zXeQ
mZGnZTqumSbY5L7YaKTaNBPXwnNlKTzeX5Qaj4Lm2FMizxEdB98CJcmDUVcpDBom
5GlG/T4huXZvNo3EIZ1SrDQoPJxROnOSru+1WEZgUSPPb+b8r6YHYFGkiJWJXl59
8Eo6/omLbA5f3Vmi4sPztMk3PYI6EfdWMhdW7TbZwSbY6tCBUQsS5V8gywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJraY7jOAM38TRcdGqnac8jaqnTzMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqKlHrae
Cc4P1ywtR1f9YJpc6Y15LIQRgcEaCM2vdndRhmRlBQyFSVAWLap2IYYs5wPUhO8p
411eUyqsDxGVulnNBEHACfRmtoUfaQqAPPRMdjGZz4h8IGakm61ehbZglj9byD1z
lThQGb2atAxMD7w+hkKrRd/1+M+xhiL2H2LcNQQp9ekYZM0wtijb05R0qOZUBnOw
Zxa7eHdKZYDZm6hESVjOYnh7ZtpvuURFk5xoS9pgairqYpbL16x3bp/rbevCahHu
9KhKrWG1w1eCDByE/3QMvv6SRLnrttL2eVigmh14ciQ2PI+uS7evCM08pgywdeqj
GJmrgRhWWfGq8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:09 2025 by rpki-client