Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier: 9jKxJwzFFmuQPyJZ7vVcj53DlWOYsREOto3vhXrGJr8=
Subject key identifier: 59:90:70:16:70:F3:75:8C:67:B7:F0:9B:6F:87:C7:82:82:09:C2:67
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 019A2E2095CFB35FC6886265DADF8B515182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number: 0BB3
Signing time: Wed 29 Oct 2025 04:01:18 +0000
Manifest this update: Wed 29 Oct 2025 04:01:18 +0000
Manifest next update: Thu 30 Oct 2025 04:01:18 +0000
Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: OIk/LC07tXzRDBetkVlKLXlM+S2v+54LyuwQat52lgU=)
2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:95:cf:b3:5f:c6:88:62:65:da:df:8b:51:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Oct 29 04:01:18 2025 GMT
Not After : Oct 30 04:01:18 2025 GMT
Subject: CN=5990701670f3758c67b7f09b6f87c7828209c267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:ab:75:4a:f0:ce:8a:4d:a4:ed:21:fc:6b:
fd:33:ea:74:d2:6a:10:93:ee:f4:dd:c8:da:7c:2d:
07:11:ce:a4:d6:e8:b0:ac:e1:9d:c5:24:47:7a:d3:
53:d1:85:3d:44:13:fc:ed:10:ca:22:76:97:ba:fa:
c4:ac:d9:a8:9a:8c:2f:f3:77:b2:15:3b:d6:c9:9c:
85:95:a8:1a:6e:15:e4:a9:2d:49:0c:b1:3d:18:5f:
4e:a7:46:4d:c7:27:68:91:3a:0f:52:99:5f:50:6f:
cf:d6:bf:53:2f:68:64:de:db:55:9a:18:a1:0b:67:
bd:c2:a3:a4:39:f7:b1:8d:4a:1c:40:ec:a8:dc:9e:
39:db:c7:ad:a0:7d:8a:2d:34:b6:32:fb:7a:06:68:
33:0a:cf:93:c7:10:13:e3:92:9a:e0:0c:d7:2d:07:
dd:84:0a:78:6b:d4:a6:ea:ef:b9:0c:89:be:71:a9:
41:20:0c:26:9d:2e:0e:de:7d:b3:e7:3d:43:52:d6:
d5:d1:3f:52:4b:4e:44:42:f1:1f:5c:b8:b2:69:37:
3e:09:04:fb:f9:41:59:65:36:0d:0a:ff:30:0f:e5:
a1:16:bb:8f:f7:20:3a:7b:a6:2f:2f:2a:19:cf:ea:
20:a4:c4:71:74:90:a3:27:ae:2c:fb:f0:fd:33:62:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:70:16:70:F3:75:8C:67:B7:F0:9B:6F:87:C7:82:82:09:C2:67
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:67:39:52:79:b3:5a:5a:04:64:26:bf:a5:d6:a6:a3:21:e9:
1f:66:8c:e5:2b:2a:22:4b:0b:d2:45:71:a8:1b:a0:37:ef:0f:
24:b6:8f:78:5f:30:90:63:67:32:fb:22:8d:aa:3d:61:69:6c:
6d:4a:ba:58:44:69:b2:a7:e7:6c:80:d3:3e:bf:62:4c:68:15:
11:dd:ef:a6:39:16:91:8b:59:7e:8d:82:d8:27:0a:7c:d5:9f:
81:f3:2b:25:8f:ae:19:8e:35:91:32:39:30:3b:56:c6:8f:13:
06:25:7a:96:c6:3b:30:af:bf:4f:34:02:c8:5f:72:53:e3:d6:
6c:54:41:62:2c:ba:81:86:6d:94:64:81:e2:d1:bc:f9:a7:45:
53:b1:a4:e9:8c:57:ef:eb:ed:0f:ed:ea:4b:a8:2b:d2:4a:55:
d1:5a:d6:db:e7:f3:c1:f1:ad:76:09:8e:2b:8e:86:29:e5:3a:
81:54:4b:26:44:12:81:af:1c:36:13:88:cd:1a:75:29:5d:3b:
e4:ba:11:7d:d2:04:69:30:60:3d:c9:27:65:1a:09:09:ba:7a:
35:d1:3d:80:82:c7:63:82:08:59:d0:3a:01:66:1c:b0:4c:8f:
90:57:60:b0:6e:19:d3:97:f3:ac:87:13:ad:d0:3a:ec:cc:3e:
30:71:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:31:15 2025 by rpki-client