Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier: lCXR36KLBFylKCP/eyGqmlx5UnLRGYDjaBJmyPJQ8F4=
Subject key identifier: CC:C1:24:7B:16:91:01:C9:F6:0F:5B:0C:25:AC:26:D4:18:62:4A:CF
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0198C6106088875AB4369E6449DB84EF692D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number: 15F9
Signing time: Wed 20 Aug 2025 06:00:18 +0000
Manifest this update: Wed 20 Aug 2025 06:00:18 +0000
Manifest next update: Thu 21 Aug 2025 06:00:18 +0000
Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: 5P9WMEFBUNonb7OkeswrUZtVqDVv+WqqNAr8U3Xa8u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:60:88:87:5a:b4:36:9e:64:49:db:84:ef:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Aug 20 06:00:18 2025 GMT
Not After : Aug 21 06:00:18 2025 GMT
Subject: CN=ccc1247b169101c9f60f5b0c25ac26d418624acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:e6:13:6e:67:a9:f6:1e:e3:e7:8a:5d:d6:
30:7e:b2:16:c3:68:79:95:56:4e:f4:3b:93:de:68:
be:9b:df:44:2a:b9:a3:f5:f4:55:f3:fc:95:14:e2:
35:63:58:dd:d9:ea:70:9f:9e:57:45:09:5c:b6:fa:
e3:c5:56:99:24:1c:be:1b:c9:e3:43:06:4c:cb:07:
60:d9:07:7f:e9:6f:1c:be:41:e6:ea:6f:7b:ad:32:
89:98:06:a9:87:bb:75:dd:d7:60:4c:3d:0c:25:c5:
14:3b:81:5c:d6:94:4e:1c:c3:5b:83:f6:87:de:b6:
ff:3c:3c:84:95:02:b9:ca:23:5c:83:89:e8:72:a1:
a4:65:2f:4b:ec:b7:05:90:74:b5:ec:e7:a1:84:0a:
0f:8f:d0:b8:ef:eb:67:25:05:08:1a:2e:3e:3f:8f:
b8:25:d7:de:c4:56:20:e7:6c:01:c7:38:73:4a:8c:
3c:c4:fd:36:73:cc:9d:a5:47:32:17:8f:29:5c:d4:
06:34:fe:72:50:20:e1:1d:b3:ca:b3:37:b0:89:f4:
0f:aa:a6:17:21:4f:03:d1:61:f5:fe:11:f9:16:5e:
8e:28:7f:cd:00:9a:4a:26:16:03:d8:b9:1e:f8:f1:
51:ad:55:6b:a1:f4:c9:73:ab:ab:0c:7c:3b:26:fd:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:24:7B:16:91:01:C9:F6:0F:5B:0C:25:AC:26:D4:18:62:4A:CF
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:99:4f:8d:94:2e:46:59:54:35:a6:15:45:aa:b5:9b:1f:79:
6a:70:60:f2:f7:33:74:b8:0c:0c:c9:57:3b:e0:93:ba:5d:8e:
bc:a0:00:39:6e:fa:dc:75:75:51:37:67:c0:8a:3c:2f:fb:ec:
7c:e9:c7:f7:d1:24:a3:7e:84:bf:1a:50:a0:39:58:62:35:20:
e7:6d:b9:5f:e4:61:9c:47:ee:1b:c5:21:2d:19:43:4f:e5:ff:
bd:be:a2:b1:fc:7b:c4:c0:ab:8a:a9:0a:10:0f:bc:35:fd:0d:
40:09:2f:23:d6:aa:6b:bd:bb:6a:c0:07:78:68:1a:e6:96:55:
c6:6e:fa:bb:c9:b2:90:42:14:3a:7c:9b:d6:29:e6:f4:27:7c:
0e:f4:2b:ff:50:b2:ab:bd:f5:14:a6:6e:9a:17:38:ca:7a:01:
ab:05:95:db:ff:e8:46:40:ab:4b:7b:57:99:ef:b9:bc:ce:20:
ba:5c:5c:b5:5c:fa:68:9f:c0:2b:b9:f1:8c:7d:00:eb:f8:48:
07:b2:19:da:ef:95:d7:7c:f3:c2:09:97:02:4b:50:90:1c:49:
2f:3b:58:81:b8:f8:a2:e7:1e:25:c7:59:47:75:7b:57:db:2d:
13:38:bd:c8:b9:f1:7f:c7:d3:c8:73:5e:e0:30:00:c7:19:a1:
c9:94:72:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGEGCIh1q0Np5kSduE72ktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk
ZGY0YjAwHhcNMjUwODIwMDYwMDE4WhcNMjUwODIxMDYwMDE4WjAzMTEwLwYDVQQD
EyhjY2MxMjQ3YjE2OTEwMWM5ZjYwZjViMGMyNWFjMjZkNDE4NjI0YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6PmE25nqfYe4+eKXdYwfrIWw2h5
lVZO9DuT3mi+m99EKrmj9fRV8/yVFOI1Y1jd2epwn55XRQlctvrjxVaZJBy+G8nj
QwZMywdg2Qd/6W8cvkHm6m97rTKJmAaph7t13ddgTD0MJcUUO4Fc1pROHMNbg/aH
3rb/PDyElQK5yiNcg4nocqGkZS9L7LcFkHS17OehhAoPj9C47+tnJQUIGi4+P4+4
JdfexFYg52wBxzhzSow8xP02c8ydpUcyF48pXNQGNP5yUCDhHbPKszewifQPqqYX
IU8D0WH1/hH5Fl6OKH/NAJpKJhYD2Lke+PFRrVVrofTJc6urDHw7Jv1q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzBJHsWkQHJ9g9bDCWsJtQYYkrPMB8GA1UdIwQY
MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt
OWVlMDA2OTQyYjRiLzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi
LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZlPjZQu
RllUNaYVRaq1mx95anBg8vczdLgMDMlXO+CTul2OvKAAOW763HV1UTdnwIo8L/vs
fOnH99Eko36EvxpQoDlYYjUg5225X+RhnEfuG8UhLRlDT+X/vb6isfx7xMCriqkK
EA+8Nf0NQAkvI9aqa727asAHeGga5pZVxm76u8mykEIUOnyb1inm9Cd8DvQr/1Cy
q731FKZumhc4ynoBqwWV2//oRkCrS3tXme+5vM4gulxctVz6aJ/AK7nxjH0A6/hI
B7IZ2u+V13zzwgmXAktQkBxJLztYgbj4ouceJcdZR3V7V9stEzi9yLnxf8fTyHNe
4DAAxxmhyZRyQg==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:02 2025 by rpki-client