Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: CjCwSpJzw+2KuiTl3rJ0uPJfAdu/y+UFklhrrgqBgqA=
Subject key identifier: 5B:D6:70:DF:BD:B9:96:2E:9E:56:75:B3:50:7C:6B:0D:96:6D:66:3D
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0199C4FC019A276B58743399D9268BA51831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 167D
Signing time: Wed 08 Oct 2025 18:01:13 +0000
Manifest this update: Wed 08 Oct 2025 18:01:13 +0000
Manifest next update: Thu 09 Oct 2025 18:01:13 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: l12qd03ecp6feiAky/Ts22pA0dvuVqaduMr56rdciOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:01:9a:27:6b:58:74:33:99:d9:26:8b:a5:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Oct 8 18:01:13 2025 GMT
Not After : Oct 9 18:01:13 2025 GMT
Subject: CN=5bd670dfbdb9962e9e5675b3507c6b0d966d663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:89:17:8b:8f:29:a8:35:09:60:84:c1:09:
d6:7e:38:c7:6a:e7:59:8a:af:8b:8e:e0:42:6d:87:
0e:14:63:cf:e1:ab:5b:30:73:0c:fb:ef:63:87:bb:
2b:08:a2:3b:f6:4c:26:3c:84:bc:a9:eb:21:de:04:
c8:40:b3:0f:43:12:99:7f:f2:94:7b:10:89:23:7b:
cc:c3:b8:51:92:cd:cf:60:00:a5:e3:a4:74:b4:c3:
bd:60:03:6b:a4:e7:7e:20:32:88:de:ab:90:57:a9:
9e:5e:73:d2:58:de:b7:55:14:80:25:07:9f:c9:2f:
c0:82:35:e2:78:50:6a:a7:d9:7c:3f:57:99:9e:6c:
04:43:cd:b7:dd:eb:b4:35:7f:cd:66:f2:6b:6f:f1:
0b:6e:fc:c8:d2:5e:98:f8:0b:e0:36:f2:1f:8e:83:
ac:a7:6e:79:51:0a:99:ca:d1:6f:87:5e:f3:e1:9e:
99:8c:e8:8c:c9:a0:6d:51:25:91:7e:20:6b:1c:78:
9b:fb:d0:1d:7f:a6:58:15:15:66:49:ff:0f:6e:e4:
88:a0:26:68:43:1b:83:7e:01:1d:15:42:93:c9:cd:
af:f1:fd:f7:3e:1c:19:3a:d3:3c:cf:cd:12:2b:2f:
d3:19:c6:74:07:78:cf:b6:14:a8:b1:43:75:0b:4d:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:70:DF:BD:B9:96:2E:9E:56:75:B3:50:7C:6B:0D:96:6D:66:3D
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a0:ff:d5:97:2a:3b:a1:3d:85:45:27:f8:0e:a9:0f:3a:f3:
bd:1f:3b:19:c8:25:71:91:b1:ba:1a:b1:06:e2:ed:73:1e:20:
e0:34:d7:07:f3:d7:41:f0:b3:03:48:c0:cd:af:0a:e8:84:58:
24:56:50:85:96:1a:c9:17:34:3b:f9:2a:7d:77:80:38:dd:30:
fe:6c:a8:05:d2:3b:dd:3e:32:bd:1e:69:64:76:52:7f:f6:07:
64:52:a4:a4:23:37:82:d9:7d:a0:2a:9b:8f:96:33:e1:bf:aa:
b1:0e:95:c4:af:5d:b7:8c:1d:5c:bc:0c:97:2e:9c:79:ba:c8:
e4:73:5f:58:04:ed:17:6a:3d:25:a8:6e:09:6e:df:7f:2f:33:
56:98:33:7d:20:b8:98:1e:eb:64:b3:1e:2d:0a:7e:cb:45:0b:
d2:69:8b:d0:dc:38:58:15:75:ac:36:eb:02:a7:4e:76:34:11:
88:d5:d6:63:e3:af:bc:1b:d8:02:d1:61:3d:0c:db:26:f2:e4:
74:44:c6:51:8d:b3:4d:94:c1:7f:07:d0:b4:63:05:18:f5:07:
1b:79:54:d6:be:63:7b:23:20:d8:52:26:67:e0:66:f0:8c:17:
e3:52:2e:bc:df:01:d2:a4:d0:22:41:87:dd:60:a5:6c:b3:58:
53:d2:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:49 2025 by rpki-client