Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: iHoEGwkIKPWq7YRE5fAqtVtUBOnN9OMWpLXYG69eUto=
Subject key identifier: 7D:09:05:30:E4:17:25:15:69:20:C6:88:4F:A4:65:EA:C1:48:92:E4
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 0199FBEB201917B50631D191FAC6801E1A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 0F15
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: v5eZiWZvLlPa53PQHLYTJWueSuo61IxJQFWQuSsKjCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:20:19:17:b5:06:31:d1:91:fa:c6:80:1e:1a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=7d090530e41725156920c6884fa465eac14892e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:2c:3c:29:bb:92:1e:6e:6c:f3:3d:11:73:
a2:fc:39:21:52:74:b9:22:d2:54:f1:c2:32:ac:1f:
2b:7e:96:91:e8:20:88:e1:56:f7:44:b0:15:a9:7c:
7f:e3:d4:8f:ba:de:40:ab:5a:a2:77:c3:a1:a4:67:
07:36:af:4e:a6:eb:e6:cb:b0:4f:1d:93:f1:af:92:
11:6c:90:04:fc:60:70:37:ce:e5:9b:56:08:83:e4:
64:a9:c3:4a:03:ec:93:19:b3:0f:84:4f:4c:4a:b0:
4f:dd:8a:6e:fa:a5:16:b6:96:01:7f:b5:c3:96:ff:
3f:2d:55:45:03:72:1f:78:19:d1:3f:7b:be:95:a1:
5a:56:70:d0:85:db:d1:aa:af:ee:24:8b:5c:8c:50:
63:85:b2:32:b3:02:34:0f:b0:c1:1b:cd:71:a4:48:
b4:0f:89:16:fc:4f:60:9a:e1:44:21:0b:00:52:9c:
b2:a8:b8:43:43:ba:92:46:fd:da:53:d3:d0:97:03:
c4:84:1c:c8:95:32:d7:21:7f:9f:1f:66:bd:2e:aa:
40:63:53:28:f9:61:4c:ea:f1:64:d6:e6:32:8c:6a:
b7:90:d0:1a:3e:c1:94:f2:2e:3a:54:86:35:7a:26:
a9:28:35:ce:cd:eb:cf:fc:50:88:51:34:a3:6f:7b:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:05:30:E4:17:25:15:69:20:C6:88:4F:A4:65:EA:C1:48:92:E4
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6a:fc:31:2d:28:c4:1a:75:c4:be:b5:e2:f0:4a:dd:93:d8:
8d:45:5b:bc:77:cb:c0:03:b1:18:eb:25:3d:07:ba:08:2c:d8:
b7:2e:6c:58:a3:c7:36:31:80:1e:dc:65:02:59:f4:fa:d5:f4:
2f:e2:8d:e3:32:78:92:d1:02:06:51:3b:14:39:38:a9:d6:e5:
3c:cc:fa:e3:fc:62:9c:e9:08:5c:6f:36:40:82:e7:9a:22:ee:
20:2f:18:fe:be:68:d4:79:fe:f0:ac:e7:5e:4d:2b:1c:6b:42:
0d:dc:c8:ac:30:0c:a2:61:a9:02:6d:4b:d1:bd:29:8d:aa:d7:
db:94:9c:2e:a0:a1:51:42:4f:2d:98:c6:eb:b3:dd:a4:b5:74:
a6:6e:fb:97:1f:5d:ab:1e:be:00:ad:12:7c:bf:17:a8:a4:61:
1d:74:17:e4:3b:fb:ba:e6:c3:f4:18:2e:7f:58:1e:f4:3a:c9:
eb:19:1a:01:61:69:9a:5e:8d:8c:cd:66:22:f1:88:51:75:fc:
4f:d1:ef:55:a0:56:6d:1e:a4:0c:c9:74:d6:1e:e7:a8:9c:65:
0e:80:f2:24:a8:ba:b6:17:6e:2e:67:21:27:d4:02:b1:86:73:
33:ba:0f:1c:ab:e2:1b:e2:e0:a4:9b:22:69:e5:1c:42:3a:9f:
11:91:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:38 2025 by rpki-client