Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: 84SbFZ3FeBMrZTjQ4z8YcSzmbTFdJBUn6ua7vHSS6KM=
Subject key identifier: FA:EE:E1:A1:B9:D3:E8:68:92:CF:3A:AA:AE:04:ED:B9:29:0A:9B:D4
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 01984A77CCC4858DE55E99B009DC457116A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:21 +0000
Manifest this update: Sun 27 Jul 2025 06:00:21 +0000
Manifest next update: Mon 28 Jul 2025 06:00:21 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: PaRULpIl7YsHKLswv5SrBzXPD3PYTwiMl58su4nd8kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:cc:c4:85:8d:e5:5e:99:b0:09:dc:45:71:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Jul 27 06:00:21 2025 GMT
Not After : Jul 28 06:00:21 2025 GMT
Subject: CN=faeee1a1b9d3e86892cf3aaaae04edb9290a9bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:e6:df:f9:4a:c0:70:50:21:95:69:f6:c5:
eb:ce:5e:42:82:bf:44:52:80:5a:3f:59:5f:cb:ed:
d1:e5:1c:5c:9b:76:c6:4a:1c:54:45:f1:1f:cd:f9:
8c:1e:67:6a:6f:e7:85:3b:84:f8:f0:79:8c:4a:f6:
3c:84:4d:11:0e:86:3b:95:71:d4:91:68:0e:e8:2d:
c3:e2:5d:6e:15:10:b1:e7:c1:9e:ef:be:3f:f0:92:
cf:5b:2b:16:16:79:67:d4:56:d2:ec:13:39:bf:d8:
cc:8e:b8:a3:07:c5:6f:84:e9:9e:25:8a:ee:c2:b0:
7c:58:da:49:c5:ae:ca:bf:65:8c:59:79:1e:bd:38:
1e:9f:11:df:d0:45:ca:47:cc:9b:11:02:c7:a3:a6:
16:d3:52:41:2f:55:7b:dd:49:69:45:f4:e0:01:05:
bd:43:4f:b9:e4:14:74:08:a5:b3:c9:55:40:d6:3c:
5d:15:f8:fd:e2:fe:fb:94:ab:67:47:13:82:cb:55:
6e:78:c4:52:6e:87:85:6b:53:e2:88:80:ef:4f:5b:
4b:dd:9f:7c:49:e6:70:66:34:e3:f5:fe:17:1b:3c:
86:39:e3:ac:99:0e:6e:11:97:c8:24:96:36:30:86:
ea:fb:f5:a7:f8:d3:48:c0:32:27:41:40:3c:79:9b:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:E1:A1:B9:D3:E8:68:92:CF:3A:AA:AE:04:ED:B9:29:0A:9B:D4
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:e1:2e:22:f8:4e:31:77:33:fd:e8:0f:08:a0:8f:c9:b3:
c0:f2:3c:53:66:b2:7a:94:b1:1f:50:2e:eb:e9:61:81:ea:50:
68:76:da:6d:52:3a:9f:cd:1d:5b:9a:d7:5e:0a:08:06:ce:ea:
43:f0:1d:46:40:d0:8b:42:1d:3e:22:bc:7c:4e:4f:20:5e:22:
d3:e8:17:fa:68:8c:76:8e:37:c0:d7:24:95:4f:57:73:ab:81:
44:1c:5f:a9:04:e4:dd:5c:bc:e0:37:de:14:ef:88:14:fb:69:
2b:0e:b7:88:ab:f7:8a:c9:36:7b:98:4e:93:f6:1f:88:b9:78:
f1:ac:cd:8a:6f:48:23:79:87:c8:6b:81:d3:0d:7b:c9:8e:e7:
0b:1f:ea:df:e7:2d:9e:b0:b7:e3:7d:63:ac:e8:52:58:53:67:
f1:fc:1b:46:58:9a:9e:38:da:fa:dc:1c:0d:17:2c:e7:e7:9d:
51:03:98:87:39:6a:3c:18:65:b9:e7:f1:cc:51:a4:3b:be:3b:
8d:91:1d:e0:2d:4e:b4:66:48:a4:dd:7e:f7:71:58:80:e1:28:
64:ec:4f:7e:73:72:75:08:5b:d2:dc:e3:b7:8b:91:4a:ea:ee:
63:4b:c5:f1:a4:d9:24:cc:cb:40:3c:14:64:66:65:17:46:15:
a3:78:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:49 2025 by rpki-client