Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier: 1GWnJ7PseEHuKNGhUhdsvy3y5Br70k5KqkZbp8N9BYo=
Subject key identifier: 7B:D1:E7:09:CD:6F:35:ED:57:2A:ED:AE:65:F6:AC:CF:F2:4C:48:05
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial: 019A7112FB1EAEE0AFE108A0FF4047A6A67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number: 12EE
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: aqi4aEDajwHCxdRrfeGeGz97N44mRmrk3AJ53s0iJ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fb:1e:ae:e0:af:e1:08:a0:ff:40:47:a6:a6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=7bd1e709cd6f35ed572aedae65f6accff24c4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:55:73:f2:7a:31:bb:ee:34:48:00:99:10:
c0:fe:e0:bd:ea:42:c8:31:49:8c:52:9e:d5:33:ae:
a6:41:a3:ac:f4:b8:18:87:e4:c0:e3:f7:c4:b8:27:
f3:c2:94:2a:76:17:8f:c5:18:0e:a8:10:be:02:d3:
69:2c:62:1a:98:15:b5:53:5f:d5:97:e5:1f:05:ce:
fb:40:99:8d:41:ae:2f:b7:cb:18:01:83:49:29:e7:
60:76:0b:fa:67:04:6e:a3:6f:70:d6:23:7b:2a:52:
ed:ab:41:e4:fc:e8:22:90:07:85:af:b6:d1:56:b0:
4e:f4:1b:54:14:11:81:75:92:29:bf:b4:df:6a:ef:
a7:ac:24:16:58:e6:d2:07:9c:a7:8f:23:2d:29:c5:
d7:56:8a:61:33:22:c4:6e:04:58:61:fb:09:41:b2:
28:2a:5c:ad:4d:61:86:b9:74:c7:95:71:31:c0:8f:
b6:49:63:97:82:bb:34:50:88:91:23:21:61:0e:97:
1d:38:a9:00:23:67:82:15:e1:e5:c4:82:89:41:ef:
c4:6d:1c:c9:37:ad:b5:20:c1:38:61:25:50:e6:76:
1d:d6:c3:24:56:56:9d:a7:93:4f:1d:e5:ce:17:1a:
50:64:5e:fc:c0:ea:0f:85:ad:93:c3:e0:c5:d2:2a:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:E7:09:CD:6F:35:ED:57:2A:ED:AE:65:F6:AC:CF:F2:4C:48:05
X509v3 Authority Key Identifier:
keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5e:8e:dc:eb:a7:30:bd:63:08:c9:40:9e:d9:c1:56:27:74:
59:4c:9c:6c:0d:78:0a:59:ac:a7:58:6c:2b:28:00:15:26:6e:
a1:55:b1:87:cd:50:d7:4f:bd:dc:de:c2:28:39:e3:57:4a:a3:
2c:df:85:8b:a0:5c:7d:1b:98:17:43:2d:e2:cd:b4:ec:0f:f4:
2f:44:43:8c:aa:ff:ee:7c:a5:2e:3a:a8:e1:a4:32:dc:4a:a1:
39:43:a7:ec:40:36:5f:85:db:0d:e9:bb:98:81:07:4e:ec:92:
04:c4:d3:fd:b2:e1:62:a5:4d:21:64:fd:a8:1a:dc:a1:4e:57:
b3:c6:f9:a0:72:df:68:93:5a:06:1f:ce:2b:17:b0:f7:43:d1:
79:3d:7a:10:8e:24:c7:e5:d1:1b:fa:cf:e5:d9:69:c8:ea:81:
21:29:58:98:d1:fd:86:9a:6d:fc:3e:96:f3:b6:0a:ab:9d:3f:
d9:58:39:2f:c3:ab:48:ac:db:d3:f8:e2:0a:9c:da:13:23:de:
93:81:91:17:c9:4d:b3:c0:51:bd:d0:32:a4:16:59:f6:76:30:
f4:77:51:27:88:1a:0b:25:28:31:01:a0:54:b2:1e:08:ce:a8:
e2:50:f8:29:8f:fb:8e:09:86:34:5d:67:96:be:8b:af:57:15:
5f:1b:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:42 2025 by rpki-client