Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: iSjayxHM9enGs5hrEnyA2ghyyjQ3pOFwNlDJm+cQQJI=
Subject key identifier: 95:F0:5A:40:6D:BF:73:68:86:66:FB:44:FB:1D:26:E2:E2:9E:F9:31
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019844E3BDA39A85B8DE6DEF52467CAEA3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 11CE
Signing time: Sat 26 Jul 2025 04:00:32 +0000
Manifest this update: Sat 26 Jul 2025 04:00:32 +0000
Manifest next update: Sun 27 Jul 2025 04:00:32 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: 9bN0llTQAmX23e+u/SpRInwPKiZzOHk+ezQ70E1fAZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:bd:a3:9a:85:b8:de:6d:ef:52:46:7c:ae:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Jul 26 04:00:32 2025 GMT
Not After : Jul 27 04:00:32 2025 GMT
Subject: CN=95f05a406dbf73688666fb44fb1d26e2e29ef931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:8a:a5:02:a9:05:af:6a:87:a4:1d:cb:94:
6d:e6:f3:10:12:38:4b:15:ab:af:47:a6:fb:c4:d8:
57:61:f6:32:dc:2b:85:db:72:d3:73:b2:34:76:28:
f5:6b:1c:41:9d:ef:4f:de:dd:19:30:b7:5a:ce:c2:
c8:92:0d:16:78:59:05:29:ee:b2:6d:80:48:c6:3a:
d0:dd:75:8b:d5:ad:4c:7d:a2:f3:3f:8c:94:e5:2b:
f8:ee:1e:08:a5:68:e5:16:e8:18:e1:8f:62:5b:af:
70:8b:e6:97:ea:4e:ef:63:92:fd:e9:b8:41:95:d2:
aa:5f:0c:38:2e:73:ce:22:0c:16:f7:cc:92:56:63:
85:be:28:0f:f7:16:e5:45:72:d5:99:08:7e:ad:86:
da:b3:9a:7c:fa:07:6e:ca:c4:7b:b0:4f:f6:23:16:
f9:11:e2:20:83:60:5d:e6:88:cb:59:14:e3:13:ef:
af:ba:da:2b:9a:e9:bd:27:f5:56:ad:12:9c:15:e4:
0a:6d:df:5d:53:08:ca:05:7d:a3:19:95:8c:6a:f2:
14:87:bf:b1:2b:3c:88:03:98:b4:3f:34:3f:0b:d2:
34:7a:ac:ee:e7:68:26:44:8e:45:b5:3f:f0:47:63:
61:c7:4b:69:07:bc:84:3c:32:17:41:a6:54:1b:6a:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:5A:40:6D:BF:73:68:86:66:FB:44:FB:1D:26:E2:E2:9E:F9:31
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:36:46:d1:0f:f3:f4:dc:8a:b8:20:d5:a7:65:5d:ec:05:ff:
20:8a:76:51:f8:1c:9d:7b:8c:dd:96:2d:43:3e:29:d2:db:72:
6d:fa:6f:7d:df:80:ba:be:d5:24:44:00:b4:20:da:51:40:5a:
f7:07:26:35:1c:12:7e:1b:21:05:45:53:89:88:1e:3b:13:f6:
ec:8b:3d:49:18:f0:e6:61:16:f8:a7:11:df:5d:6c:cc:1f:e4:
c6:62:3c:07:48:f5:08:c6:b4:5b:ee:34:71:12:de:4b:ca:7d:
e9:99:7f:f8:37:f7:90:27:08:06:d0:05:63:ce:09:75:f5:cb:
df:90:43:a8:c5:12:bc:79:bb:94:4e:ad:66:d3:3e:3e:4a:1d:
0b:00:9d:1a:65:e1:90:df:07:0d:0f:d4:72:78:7b:57:5b:0b:
b7:6f:0d:44:5f:3d:3b:06:4b:10:63:e7:de:cf:67:75:31:9c:
9c:43:91:df:c2:f0:7a:90:92:60:0e:13:49:86:eb:1d:64:0a:
b4:2f:d3:fd:d1:75:35:0b:5d:85:64:53:cc:43:6b:61:15:a7:
ce:66:68:a5:93:0e:10:c6:7c:a8:6b:17:96:a6:b5:b4:42:1f:
02:b8:80:8d:a4:a1:28:4b:55:5e:d6:e9:95:f4:07:7c:7f:30:
ea:d1:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:14 2025 by rpki-client