Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: 6bX5KHQ7rrAkTEwiiPY7hBTjC0+oZwhsFmECpfeT9L4=
Subject key identifier: 28:91:A5:2F:5F:1B:3D:AD:70:FD:E4:1E:07:CA:A9:57:A1:9B:30:51
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 019A72CAD5EE9BD7F7AE4F1AFB1985AF6839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:26 +0000
Manifest this update: Tue 11 Nov 2025 12:01:26 +0000
Manifest next update: Wed 12 Nov 2025 12:01:26 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: LdnoDEPajmFCtfCnCOx87COoBUGYTE4uB4ESvX3EK8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:d5:ee:9b:d7:f7:ae:4f:1a:fb:19:85:af:68:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Nov 11 12:01:26 2025 GMT
Not After : Nov 12 12:01:26 2025 GMT
Subject: CN=2891a52f5f1b3dad70fde41e07caa957a19b3051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:e5:ad:2f:38:35:5e:0a:f5:eb:a7:66:30:
b9:57:cb:c2:ca:de:e3:5e:d3:af:d3:00:a5:44:c9:
56:6f:8e:1e:bd:f7:4c:6d:f3:b3:13:75:90:34:79:
d4:80:bd:5a:2b:ba:3e:81:f6:ef:ef:8b:3f:cd:12:
dd:c1:72:b3:37:45:de:98:ea:00:9c:67:43:75:58:
0e:6f:09:d9:44:21:95:65:85:09:5a:9a:93:99:67:
d0:e4:a7:cc:79:e6:94:8a:8f:6b:83:d0:9b:94:ef:
9a:e7:a6:6f:64:7b:60:ac:61:46:8a:fe:49:35:e6:
30:af:51:de:1d:d5:f2:ae:05:15:55:55:a5:b7:1b:
b0:51:41:83:8a:08:34:5c:b5:ca:39:f7:a0:9e:99:
8b:03:28:d7:38:0e:f1:a1:7d:73:b5:cb:49:da:25:
a1:53:b0:f8:41:75:99:e3:c3:1a:f9:61:b2:6f:b7:
aa:96:96:e1:0e:00:fb:4a:b5:5a:0f:78:1f:49:fb:
74:b5:62:be:65:a6:8c:09:c7:ed:8d:56:5f:07:19:
11:6a:58:22:53:a9:e5:91:72:9b:7c:0d:c7:3c:61:
f1:30:77:91:3a:ca:da:8b:23:20:bd:6e:db:96:c1:
49:62:16:0d:a7:b2:1d:b2:60:35:90:25:fb:ce:7e:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:A5:2F:5F:1B:3D:AD:70:FD:E4:1E:07:CA:A9:57:A1:9B:30:51
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:5c:1f:7f:7d:b3:b4:0c:36:6b:28:a0:eb:bc:0e:41:86:
1b:f6:96:64:9b:6f:ed:4a:a5:61:1a:bb:57:0e:22:9b:c3:9c:
36:55:99:5b:71:e0:a5:6f:e3:a0:22:76:fc:c6:fd:6c:87:2b:
e7:a8:42:44:0b:a9:3e:05:07:97:a4:11:09:40:40:1d:67:90:
34:02:06:36:36:70:db:1d:3e:95:cf:8c:c9:9c:fd:e9:de:63:
9c:d9:c7:db:39:10:99:42:88:49:85:75:3b:75:85:9b:b8:76:
f7:dd:85:6a:ce:7f:a4:55:27:b4:f8:eb:f6:0e:d4:c8:86:5c:
fa:ac:db:d1:79:63:ab:61:d0:01:b6:ad:ad:22:8a:b5:96:7d:
99:c0:18:d0:7d:83:84:6d:05:a7:f1:f8:bd:42:2b:f4:70:81:
33:42:a4:ef:8a:e5:98:57:a4:c5:e9:73:1d:81:d6:19:8a:a3:
ed:08:ec:3f:e3:3f:7e:c3:ab:8e:cd:79:8d:76:55:b6:4c:89:
9b:97:f3:b9:37:1f:06:ff:f5:c3:77:e0:a6:5d:23:cf:62:da:
77:03:26:52:5f:65:7e:1f:12:f3:f7:25:5e:38:ae:52:a3:40:
7f:8a:8c:29:93:66:dd:4b:2b:28:ae:1d:45:c4:74:9a:35:38:
bb:be:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:18:05 2025 by rpki-client