Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: YbxWNdlxSf159BB9+0JPld8fb+P2TP9bHllytc9zHwc=
Subject key identifier: 13:AB:71:D4:CD:EE:83:87:D6:55:A3:6D:D6:80:B0:C0:FE:BD:8A:94
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019745F951EB953A84B930A02A95A496A8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 114A
Signing time: Fri 06 Jun 2025 16:00:56 +0000
Manifest this update: Fri 06 Jun 2025 16:00:56 +0000
Manifest next update: Sat 07 Jun 2025 16:00:56 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: 7JXtmcB4kbY3GSUiiiHSvfCfYrB7YUSCegOehwWANLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:51:eb:95:3a:84:b9:30:a0:2a:95:a4:96:a8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Jun 6 16:00:56 2025 GMT
Not After : Jun 7 16:00:56 2025 GMT
Subject: CN=13ab71d4cdee8387d655a36dd680b0c0febd8a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:41:86:9b:fb:41:a1:93:b2:b0:07:94:52:
ef:1f:3d:74:4f:73:25:08:78:b8:a2:cb:83:58:b8:
d4:a7:3d:81:ec:34:c4:bd:2f:d1:13:2d:28:ab:15:
cd:ac:98:2f:b3:ca:5c:c0:2c:c7:ce:0a:fd:c1:47:
f0:db:11:cd:c2:62:f5:84:d1:82:cf:1b:76:2c:bb:
a5:2d:f3:49:9a:f2:98:d9:ed:dc:ef:ce:c3:cc:a5:
55:f0:d8:66:21:30:aa:01:4e:5a:06:ed:3b:32:d4:
0c:6b:1b:00:57:58:94:f4:93:00:fc:7e:5c:5e:b9:
69:43:84:97:bb:d0:34:32:28:d7:8a:01:45:e2:88:
fc:bd:2d:ce:88:2c:58:7c:49:2d:bc:9d:8a:fb:9d:
db:f4:da:c5:4e:e9:11:5a:b8:73:56:d8:7e:a7:f7:
13:ef:18:bb:fc:e3:8d:44:80:4d:b1:c2:e1:02:14:
6d:c5:aa:f3:da:d9:01:9f:e6:1a:35:97:e0:b5:51:
7f:bb:71:74:27:ea:d6:60:e7:13:1c:58:48:e6:af:
6d:40:a1:e3:9f:c6:9a:94:a7:4f:93:0f:da:1e:b2:
9f:be:0d:34:94:53:86:e7:b0:f3:fe:f7:76:3f:57:
1e:7a:09:04:c8:9d:37:8f:a6:65:d1:c7:c6:77:13:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:71:D4:CD:EE:83:87:D6:55:A3:6D:D6:80:B0:C0:FE:BD:8A:94
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:74:69:50:f4:b0:cd:b3:a8:8b:c6:76:54:1b:6f:2b:12:d2:
e4:5b:e5:1f:45:a5:9e:40:b6:f3:bf:27:59:09:2f:d2:71:8e:
77:3f:14:42:2e:98:c5:b1:1a:0f:40:02:47:5f:36:e8:39:fc:
14:3c:27:e9:a7:7c:50:68:b9:14:38:a9:bd:fd:b7:68:b9:80:
ad:6c:64:fe:6c:39:9b:2a:7a:59:93:c0:b9:02:23:2b:b7:23:
47:c7:64:bf:67:0e:51:da:d1:5e:8e:70:28:06:ea:de:9c:dd:
12:28:e6:d2:d9:3e:8b:52:19:42:6b:d7:ac:9b:5c:2e:cb:54:
20:c0:06:1a:63:4d:fb:27:dc:5c:0b:82:82:f8:53:24:f6:88:
1f:f0:2d:28:b7:dd:a9:a0:92:27:83:b5:b9:bb:41:48:2f:95:
83:ed:ec:f2:55:99:ad:82:14:d7:63:f8:da:25:d7:59:5d:3d:
e3:33:3f:12:b5:d7:12:c9:a3:db:ff:07:07:1d:d8:a2:e7:87:
43:d1:41:f7:c6:1f:38:63:97:7b:ac:8b:6e:a8:b5:0e:08:b2:
59:50:c0:18:a2:b9:2b:5d:2c:82:ea:55:0c:17:b0:36:2d:7c:
6f:5b:a9:e1:e9:da:aa:ef:82:ea:54:b3:5f:0a:d9:74:b6:df:
34:b3:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:25 2025 by rpki-client