Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier: aBtI4U+bnILKEAr9oj25FUd8JOByEGJl+5nMHDXY4Bc=
Subject key identifier: 25:EA:9B:1A:2E:E9:2F:C9:63:4F:7E:E2:AB:88:1C:03:4E:64:7B:4A
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 0199FD3460AF9BA202F11E0B9E7BBB568CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: 3zo3YsZee9Khis1JTVDzWfxmgqLArtpIOV4/acCj+XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:60:af:9b:a2:02:f1:1e:0b:9e:7b:bb:56:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=25ea9b1a2ee92fc9634f7ee2ab881c034e647b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:e1:80:4f:44:7c:88:54:b4:1b:52:55:3b:
83:07:89:50:4c:88:3f:46:76:f0:5c:3f:d1:c9:85:
ba:be:b4:f8:4c:fb:7f:ad:8c:03:35:b7:a3:98:16:
f8:f7:1f:63:7b:39:b5:04:ad:96:d3:18:47:1b:bf:
f2:7c:d8:0e:df:47:41:36:ac:24:f4:ad:cb:c2:5a:
54:4c:a4:23:06:42:21:20:a3:29:30:2b:bf:6d:f3:
a2:1d:41:80:56:01:c8:30:27:34:58:7f:5f:61:f6:
dd:ae:67:08:6e:96:96:49:64:3b:7d:51:89:87:ce:
2f:3c:9b:f7:bd:3d:73:30:e1:76:e2:62:29:09:49:
8c:af:3c:75:74:c1:a3:9e:83:a2:aa:8c:3f:4b:03:
85:22:73:e9:58:2e:e5:ae:2c:28:74:dc:24:cd:d0:
40:22:d7:30:7f:ab:10:20:44:3c:13:09:27:6c:3e:
bf:81:59:cd:3c:d6:1f:75:12:66:c8:a3:26:cc:37:
45:95:50:f4:e0:08:9d:4c:ae:b4:b7:87:9c:69:2c:
68:63:3f:d8:ad:d5:28:72:dd:77:2a:e3:c3:7b:e0:
1e:2e:77:4c:3b:65:8d:9c:0c:94:19:6f:25:9b:42:
82:3d:8e:39:e2:df:83:80:08:45:75:ca:8b:11:d6:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EA:9B:1A:2E:E9:2F:C9:63:4F:7E:E2:AB:88:1C:03:4E:64:7B:4A
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9a:81:00:7d:46:91:55:5d:ad:76:ab:15:d3:14:a8:19:1e:
d0:5c:54:b0:c1:53:0b:cc:28:33:aa:1a:49:af:7c:9a:82:50:
c7:9e:fd:76:e0:c7:c4:c2:23:31:39:8b:9d:93:b6:dc:f0:7c:
23:6f:77:fb:86:98:3b:0c:a2:ac:33:24:60:65:c6:d0:5c:5e:
65:81:66:0d:2c:dc:b4:01:e6:52:c8:91:a0:02:c1:85:cb:44:
39:72:4f:40:4e:32:5b:22:2d:f6:04:8a:bd:38:1d:37:0d:6a:
85:d6:d0:e5:df:06:57:7b:95:f3:4b:cb:0b:8b:bd:27:9a:a8:
79:a0:b1:d0:6a:4d:a3:28:ee:f0:16:0f:ec:35:35:89:db:61:
63:0b:66:ae:39:20:6b:04:d1:77:52:18:41:fd:98:f3:e3:b7:
55:7f:f7:7d:8b:e8:7b:ea:e0:82:06:63:15:eb:da:e5:c0:d2:
93:ef:a9:67:22:d5:28:8b:17:92:1f:b0:c8:cf:ea:1e:11:e9:
b9:15:ce:d2:34:7b:8e:74:fa:19:92:fa:b4:c9:5b:db:54:dc:
8e:0e:52:ec:72:50:43:4a:74:ff:9b:b7:6b:79:73:3f:93:48:
87:da:d0:64:d5:b4:85:82:56:3c:22:0f:ae:e1:0e:b1:28:df:
1d:be:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:42 2025 by rpki-client