Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier: XlNdUPPwJFAx65z45t/BH5HKbIwumB7aVOGH5igWIA4=
Subject key identifier: E0:78:EF:50:56:B0:D1:9F:BA:3E:6D:E4:10:1A:26:7C:2B:44:0C:F4
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 0199FCC61A7005333F7A8E8136D859710C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: 1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (hash: FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=)
2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: QNsFNC/VDdhavipN2QBYFeAmT9/RKPxDSZFOg6/L8KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1a:70:05:33:3f:7a:8e:81:36:d8:59:71:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=e078ef5056b0d19fba3e6de4101a267c2b440cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:54:0d:35:70:84:30:ec:97:68:3f:0f:95:
2a:da:8c:a4:33:0e:17:21:66:ef:40:28:aa:43:b9:
f7:fb:4c:88:70:b5:73:21:d8:dc:d8:ab:40:78:d8:
50:80:d4:da:24:85:96:61:3c:1d:16:07:5d:eb:e7:
95:63:ec:ef:4d:e9:7f:0c:e6:4a:f4:a1:7d:23:56:
c1:90:02:bd:00:cd:5e:5c:3d:33:41:52:a1:02:e9:
ec:1d:d5:06:57:0a:f9:a6:f7:96:37:e4:58:78:29:
a6:96:d1:bc:d9:5f:e0:0a:da:2b:8a:df:d2:6c:88:
47:0f:20:fc:38:93:89:d5:94:1a:a4:be:f0:ff:a4:
fe:18:b8:5e:7b:23:8a:ff:b5:ff:9a:2f:52:d2:a6:
50:54:34:3a:8f:e8:36:31:cc:dd:77:fc:f8:3a:25:
0a:74:9d:1c:c7:04:de:e2:50:ed:61:bc:f1:3c:27:
44:52:d0:c1:54:be:f8:95:fe:35:34:d3:ac:6f:84:
a4:a4:96:12:cf:3a:ca:78:74:b8:17:4b:e6:35:d6:
9a:96:ea:4d:9b:5a:13:27:91:0c:53:16:cc:2b:0d:
2c:d6:f8:e0:8b:fd:40:b8:1f:ec:61:7e:65:b0:e3:
a0:7b:a0:a7:cd:45:0e:d7:4e:85:e1:5b:1e:7b:23:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:78:EF:50:56:B0:D1:9F:BA:3E:6D:E4:10:1A:26:7C:2B:44:0C:F4
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:22:03:40:f0:44:f1:77:ba:92:81:ca:28:85:15:84:84:
7a:32:b3:e1:ab:49:f6:19:09:e4:ac:41:8d:81:41:85:be:c4:
ae:31:af:9b:07:5e:c2:3a:c8:92:c2:57:09:f9:ab:1f:17:31:
98:e0:6b:00:27:0c:07:4a:ae:33:e2:2f:a8:75:b8:c7:26:84:
9a:cb:55:ac:98:17:2f:14:87:9c:72:af:b4:24:d5:8e:23:4f:
a0:33:b7:83:a4:c0:3c:db:5d:05:84:51:ee:4b:5a:93:5b:db:
e6:b6:fa:df:51:ed:e8:c9:b7:d7:9a:62:61:23:30:6f:01:1e:
38:33:62:d3:07:84:c3:32:e0:b3:93:ae:42:79:3f:c2:ea:19:
03:e3:00:44:70:11:ad:1a:e0:80:d2:20:cc:47:7c:24:5b:63:
e3:1e:3a:f1:34:b6:a1:e7:51:ee:b4:62:72:85:de:98:39:4a:
00:e7:0a:53:57:92:37:44:d8:4f:69:7d:d5:3a:7b:3d:6d:c4:
26:76:65:a6:c1:90:0b:30:fa:fc:ac:67:16:77:f0:c1:30:09:
6a:17:9b:21:26:87:57:64:f2:85:e5:79:4c:1c:00:f4:53:5c:
2f:43:bc:7e:f4:45:26:51:1a:ba:61:34:0c:a0:eb:df:e0:ac:
68:b2:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:07 2025 by rpki-client