Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: qP6xqQ1W8gdoLDmurUY8S5bW7ONVodKsh4JRT656tWE=
Subject key identifier: F9:E0:0C:A4:7D:33:6F:C2:5C:4C:3F:AA:FE:06:AF:91:3D:1B:D5:D0
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 0198D84FDD9A9D7EB87100B4DDB8B9347892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 0E7E
Signing time: Sat 23 Aug 2025 19:02:49 +0000
Manifest this update: Sat 23 Aug 2025 19:02:49 +0000
Manifest next update: Sun 24 Aug 2025 19:02:49 +0000
Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: J+XUDBWcbvcTldzvbtOFu0PdRDCMtfl2bogJJ6W8ItI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:dd:9a:9d:7e:b8:71:00:b4:dd:b8:b9:34:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Aug 23 19:02:49 2025 GMT
Not After : Aug 24 19:02:49 2025 GMT
Subject: CN=f9e00ca47d336fc25c4c3faafe06af913d1bd5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:69:2c:3c:32:89:8c:4c:e1:91:de:38:57:
c8:1a:d7:62:61:3e:6c:96:ad:ad:48:66:3b:ed:81:
70:23:e4:14:c6:da:9a:84:00:d7:f2:e7:f0:aa:4b:
81:99:2a:0c:75:17:87:43:96:8f:98:56:5e:9a:4b:
9a:ee:b0:d9:1e:35:35:82:7a:da:64:1d:e9:a5:12:
3a:b1:b2:c3:4e:51:7a:97:7c:54:7c:8f:61:81:a8:
37:27:40:4d:f2:fa:9e:6a:b8:4c:5e:b2:c9:c6:2c:
cf:f4:78:85:21:a9:2d:01:f4:21:56:50:05:91:14:
34:e9:54:95:97:74:38:e2:82:3f:4a:98:11:67:c9:
57:dc:73:3c:7e:d5:c4:ad:df:a8:31:47:c5:f8:85:
00:3d:f1:50:6f:8d:ec:c1:03:15:63:45:47:bb:f4:
78:69:c5:4f:16:03:b1:97:16:31:1c:5e:1d:dd:68:
6c:be:1f:e6:a0:c5:30:51:cc:96:41:38:c3:3e:05:
42:7f:5d:3e:74:ea:db:fe:f5:9f:44:3c:2b:cc:f2:
74:f2:1f:db:80:a2:41:1c:7d:fa:a8:b0:5b:fd:97:
d4:cf:89:b7:68:48:00:53:8e:97:61:01:6e:04:e3:
9c:95:3a:8f:3a:e6:e5:6f:22:bf:40:e1:86:9c:3b:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:0C:A4:7D:33:6F:C2:5C:4C:3F:AA:FE:06:AF:91:3D:1B:D5:D0
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e2:d9:30:8b:49:02:dc:db:47:13:6f:76:f3:fb:d8:8d:ca:
37:34:b6:5d:66:7b:2a:27:73:80:2d:b7:fc:9e:03:c6:c1:ce:
c9:af:52:db:7a:0f:31:92:fa:01:e5:5b:b2:b9:b4:35:03:e5:
18:b7:11:d1:ab:e7:34:a8:78:75:d4:b5:00:0d:2f:89:b6:88:
70:5e:50:58:11:68:b4:78:e0:d0:4d:db:f3:89:8c:d3:3f:eb:
66:d2:8f:33:1f:c6:2b:a6:c4:30:f6:0e:34:89:1a:a1:56:40:
a8:c2:49:fd:b1:a2:ba:64:d2:87:78:d4:62:2a:08:25:2f:55:
12:94:f8:bb:1b:9c:45:54:45:ba:77:44:e7:5e:51:99:c6:41:
94:34:41:68:49:cf:12:fc:bd:11:50:18:75:d5:8b:c9:06:87:
2d:9c:c7:f9:c9:88:2b:ff:88:9e:06:d1:3b:b2:3a:c5:e1:d0:
40:10:1a:51:ff:0e:c8:b8:0e:76:6a:c9:39:c8:34:cf:7b:22:
a2:27:97:57:b0:41:d6:12:7c:ae:8e:69:80:9c:4b:ae:06:35:
19:0a:77:85:f4:70:ca:47:58:33:44:75:a0:66:67:52:11:a0:
3f:f9:4d:6f:f7:ec:93:be:43:4d:ab:ea:fa:74:0e:2c:97:c8:
ff:05:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:22 2025 by rpki-client