Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier: GlrD9LA7oG29LPowwh1IhAIfLf2l7VckfEfLl2RoSaI=
Subject key identifier: 43:B0:D6:B9:7C:36:93:CE:E2:19:F5:7C:C3:DD:D5:73:7D:74:E7:A9
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 019895FFF9FAD439E0FED94BA7C42DB972CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 22:00:37 +0000
Manifest this update: Sun 10 Aug 2025 22:00:37 +0000
Manifest next update: Mon 11 Aug 2025 22:00:37 +0000
Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: +KFTWvR8kdKrvrxf9qhxQJBWyz72Ab8pznlB4SeHEV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:f9:fa:d4:39:e0:fe:d9:4b:a7:c4:2d:b9:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Aug 10 22:00:37 2025 GMT
Not After : Aug 11 22:00:37 2025 GMT
Subject: CN=43b0d6b97c3693cee219f57cc3ddd5737d74e7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:42:0c:7c:01:7f:45:fd:a6:e8:60:fa:4e:
e0:ac:1f:46:15:d3:d0:42:f6:56:93:1f:33:ae:53:
8a:b0:d4:e6:40:7d:c5:71:2b:7e:ce:2d:c5:ea:ec:
eb:5b:39:59:da:ff:b7:58:af:92:93:cd:74:92:bc:
3d:fc:6d:5d:cd:37:14:6e:ac:41:69:e1:36:e2:75:
31:fe:f6:d8:ad:2d:d1:6b:c5:4f:df:91:3e:96:3d:
e8:61:ec:9d:11:6e:03:5c:a3:6b:18:b6:fd:17:ca:
4e:e0:09:31:e1:4c:f4:dc:0e:1c:f3:9a:8a:d8:0a:
bf:7d:ef:96:87:b4:f1:17:f4:16:b5:9f:ac:44:04:
b2:37:40:e4:78:98:c0:23:07:49:29:55:34:ca:33:
fd:ca:b0:f3:2a:21:a1:6b:31:a5:89:83:b8:26:0b:
18:df:24:7f:f5:3a:df:25:10:c7:9b:e1:3d:ae:6a:
9f:f9:a9:15:fa:f0:e0:67:67:ff:bd:fe:d4:fa:f6:
d9:27:68:83:e2:33:58:d3:29:df:45:e3:04:3d:ac:
bb:9c:e3:92:20:97:37:dc:39:65:c8:a6:03:53:9e:
21:7f:b9:63:53:a0:b0:99:b7:99:1f:05:05:bd:b0:
02:9b:22:9a:5a:5f:1e:21:60:36:a7:7c:48:49:27:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:D6:B9:7C:36:93:CE:E2:19:F5:7C:C3:DD:D5:73:7D:74:E7:A9
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:65:53:46:4f:04:99:37:f4:c7:c7:1b:4c:43:08:0f:cb:a9:
58:71:4b:d5:9c:ab:a3:5f:f7:10:13:83:ac:84:2d:21:5f:fa:
b5:5c:54:56:12:82:60:3c:eb:91:65:03:f6:82:e2:67:80:d6:
40:f8:f7:db:e4:27:86:50:bf:69:19:29:21:a7:86:bd:5e:e7:
67:a0:44:71:ae:62:64:46:2b:29:0f:09:bd:b8:37:82:0f:7e:
c2:2f:b5:67:3e:22:a7:25:c8:d0:58:7a:83:99:5c:66:c3:3b:
9b:a9:84:28:26:f9:94:00:02:67:c0:86:41:5b:00:37:3a:52:
bf:de:00:8d:c5:e7:65:9c:b1:93:0c:65:be:00:1b:2e:57:a0:
91:2a:0d:42:3f:46:8d:d3:9f:c0:93:82:11:a8:15:e7:e4:b7:
0c:a6:76:6a:24:c8:63:c1:42:e4:4d:96:c6:bb:da:22:cf:81:
6e:17:dd:fa:16:c1:67:40:39:d5:8c:18:6a:a6:bc:13:31:4f:
30:dc:21:00:d2:4a:15:4f:c3:03:b7:2d:42:97:19:fb:2f:d7:
4a:24:f1:cb:ef:2c:8f:6a:f4:46:4a:1a:e1:94:03:44:8e:12:
37:1b:2f:15:36:a1:fe:59:04:42:d4:96:73:62:36:af:63:c7:
5d:a2:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:53 2025 by rpki-client