Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier: 43SbVLJJjClzYI0fdfIyyWBHF7lSkUqQPiTUo2HJWpA=
Subject key identifier: DF:8C:0C:E0:03:88:91:64:B2:BD:5E:89:66:BC:7B:BB:5C:DD:45:4E
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 019A4E4F5290F776DDDBC206F688544C9FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: 8zmPuyR0Me4xvE54k3ycQaN9Nc9rjmCa5QV/h/o++Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:52:90:f7:76:dd:db:c2:06:f6:88:54:4c:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=df8c0ce003889164b2bd5e8966bc7bbb5cdd454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:d8:f4:a6:23:7b:41:66:2c:9f:90:f1:2a:
1c:4f:51:b4:2f:dc:39:73:44:36:4b:34:bc:51:5c:
c1:88:4a:72:58:66:26:46:eb:67:cd:e6:34:a2:f3:
53:48:fd:db:d8:d0:f4:4a:4a:22:64:ac:05:12:a7:
4b:80:6c:6b:20:82:6d:a4:b0:7a:89:0f:17:d3:f4:
c2:2d:ac:8d:0e:2f:8f:ad:01:ae:34:c1:48:1a:61:
34:ca:8c:1e:bd:4a:89:6c:da:e4:5d:c4:7f:c7:46:
35:3c:20:fd:34:5f:e3:65:71:c7:b8:8c:a6:c1:97:
18:a3:2b:11:3a:a5:4b:bd:2f:fd:bb:66:99:56:2c:
25:18:ef:78:b3:bd:0e:72:25:58:4f:bf:db:83:ee:
f2:41:5d:28:82:58:97:c0:dd:1c:aa:0c:f1:42:95:
e0:0b:4f:fc:51:4c:e2:e4:44:62:65:cb:62:d4:d4:
de:b9:a8:97:2e:eb:e6:61:84:0e:a2:e6:5d:cf:10:
ef:20:87:8e:1e:98:ef:3e:d8:9c:22:0c:18:eb:e8:
b8:c2:06:84:7e:87:5d:4e:53:66:75:92:54:b9:1d:
9e:0a:43:19:d0:07:22:00:58:8a:61:55:81:b4:52:
10:bd:d8:15:6a:9e:7f:5d:b3:a5:bb:a4:c2:2b:c5:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:0C:E0:03:88:91:64:B2:BD:5E:89:66:BC:7B:BB:5C:DD:45:4E
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:38:33:50:86:91:91:ad:ee:0c:d1:4e:9b:6c:ba:40:f5:b6:
d6:62:12:cc:22:39:a6:e1:95:ec:77:97:b2:c4:c7:77:4e:58:
10:0e:5a:11:38:b8:5d:b5:f2:2b:18:d9:f3:ac:ce:9a:c8:0e:
cc:51:bf:ce:ef:c9:b8:04:33:56:cc:15:c2:0a:aa:57:5b:ca:
d9:67:86:ff:43:29:81:cc:05:80:ad:e7:bd:68:44:91:93:82:
9c:ec:b3:f2:e2:68:51:80:52:6d:47:d9:67:35:a7:db:47:64:
96:8d:87:3d:ab:c6:69:e2:46:8a:d6:b7:26:f0:b1:b9:bd:a1:
b7:e6:ab:4d:c0:8b:54:02:c1:de:a8:be:1a:ea:29:8f:8b:53:
bc:77:d4:3a:8a:57:45:15:44:4f:92:61:61:29:bb:0d:37:80:
26:99:60:1f:c6:4f:f7:82:25:eb:7c:b3:34:0b:90:ae:4b:b4:
d4:a5:aa:6d:09:9a:e1:40:05:7b:e2:4f:89:ba:8f:c3:6b:c9:
f7:dc:eb:f4:f1:57:11:ca:a5:5f:aa:0c:ef:9c:84:16:22:6a:
c1:eb:0f:0e:04:3a:b9:55:41:ae:68:19:7d:0b:1a:ba:f2:3e:
47:5a:d6:ad:a7:0a:b5:84:fa:99:4f:77:6f:97:7a:69:d7:43:
2a:ce:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:33 2025 by rpki-client