Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: OMJPct/5CXZqDLhfsfMiK9WPJ4ZGkzNqrlNW3WbMrbc=
Subject key identifier: 62:D5:AB:49:CF:EE:9F:87:01:1D:71:3A:C0:86:D4:83:03:F8:EC:19
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 019A4E8671C5DD04D1F349355FF10F136834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: Y0ca5mBxLKVGQvbAcrewcZdVhBOHX+kuUgFxK0030+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:71:c5:dd:04:d1:f3:49:35:5f:f1:0f:13:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=62d5ab49cfee9f87011d713ac086d48303f8ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:79:78:ef:46:ac:65:9a:ee:ad:b4:16:2e:
46:75:1a:38:24:95:24:71:a0:93:b5:75:1e:85:40:
d7:00:f7:c6:21:cd:65:07:f5:5b:c7:6e:e5:e1:cc:
93:cd:8f:5e:93:49:9e:a6:7a:99:cc:61:04:a3:cc:
65:17:e0:21:c8:aa:8c:7a:5c:27:ea:34:f7:6e:0d:
61:fc:f3:ee:f0:01:f4:b9:a3:cb:09:6a:69:13:9a:
16:0e:a7:5b:89:dd:3b:e4:c9:47:01:aa:32:79:00:
11:61:19:b4:4f:92:fa:db:32:57:2a:a5:0a:3b:64:
88:08:55:fd:b3:7a:7a:85:a5:74:94:05:f6:a0:1a:
6c:51:d9:20:19:92:c1:76:af:6f:26:41:a2:1b:07:
79:16:7f:e4:24:cb:57:9b:7b:5d:55:03:57:70:d3:
cf:d0:b0:68:5f:59:cd:37:ff:db:1a:cc:84:fa:34:
55:df:19:5e:c7:30:30:4b:91:3e:72:7a:23:7a:07:
17:17:c4:8b:f8:51:06:e0:4a:c2:9a:1a:27:5d:ab:
c9:79:e2:54:e3:91:08:b4:5f:93:fe:2a:aa:83:fa:
0d:d7:bb:48:7b:36:22:76:88:c8:2d:14:95:fc:ad:
c7:06:05:db:55:f8:b3:b9:89:42:a1:c0:9b:3a:ec:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:AB:49:CF:EE:9F:87:01:1D:71:3A:C0:86:D4:83:03:F8:EC:19
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:eb:12:d9:34:bd:90:0a:52:f2:22:4a:53:c9:ac:0b:25:ec:
16:35:34:ac:cf:56:31:ec:17:db:c4:9c:51:f5:74:a5:96:ec:
4b:ab:e2:59:74:c4:ad:f8:c1:18:d9:15:b4:ef:eb:dc:94:7a:
df:eb:a1:28:34:50:35:14:2d:ef:6b:b3:89:b2:ad:50:9c:15:
7c:fb:85:fa:c5:bf:41:2e:c4:14:3d:ea:14:dd:32:a7:83:0d:
b4:66:56:99:d9:53:7c:37:a9:e0:ab:e1:60:07:5d:37:87:9b:
26:35:3d:3d:3c:39:3e:4d:de:3f:db:87:1b:f6:9b:77:74:b8:
2f:fc:8c:e6:df:fd:d2:dc:c1:0b:c2:40:0c:c6:1b:50:75:89:
28:2b:ad:48:c6:a7:c3:66:8f:ef:1c:6b:f5:16:87:86:88:c6:
5b:70:d1:24:49:f0:94:1f:ec:f7:38:fa:36:68:ef:59:66:9e:
ba:86:3d:c8:ba:29:c5:0e:61:07:32:1f:04:4b:7c:80:9f:6e:
e4:fd:52:58:6b:88:44:72:e0:49:57:9f:a8:14:1a:dd:ef:68:
1e:7a:bb:c1:9c:7b:98:4d:6c:99:16:81:38:d1:c5:40:ea:78:
57:da:72:73:25:75:4e:9a:34:6c:15:1d:c0:d3:59:c7:ec:da:
28:e6:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:23 2025 by rpki-client