Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: I+MYjowNEEWG3L59nDgycS1cQCt3mfcADJG5RhoJzY8=
Subject key identifier: A6:D4:46:73:77:82:19:17:49:E7:D2:DC:48:74:64:65:F4:EE:91:9B
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 019A4EF45B4F6C84FFC3446AB63ED6536B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 0F40
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: nwGiG1caVSbERmiZBJuDl5AGBclvx4yPQR4GYuIJwdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:4f:6c:84:ff:c3:44:6a:b6:3e:d6:53:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=a6d446737782191749e7d2dc48746465f4ee919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:7c:2a:c8:a4:86:65:ae:5c:2b:b5:b6:f2:
41:fa:64:a0:ba:bd:91:1f:16:52:ec:cd:c4:0f:73:
f9:a8:e9:df:1f:61:7f:a0:0a:6e:52:79:ff:fe:d4:
49:d4:8e:3d:3c:6f:b2:91:be:63:76:06:17:b4:39:
e3:71:89:98:31:0b:b3:3b:9e:69:57:e9:36:0d:49:
89:4d:f3:b5:31:70:ad:3e:0c:a3:df:81:28:aa:5c:
b2:2d:ca:25:65:75:b6:7c:58:31:af:f4:5f:8f:a0:
f0:b2:38:66:21:aa:a9:05:8d:ea:49:ab:11:ef:72:
8b:da:23:28:bc:c1:5c:c4:6b:36:b7:8c:e6:d6:de:
c3:68:44:83:22:7f:74:90:d1:52:4c:03:25:fb:01:
9a:52:e3:2b:34:e4:1c:76:60:54:69:58:8b:02:19:
bf:6b:30:a8:a5:eb:d6:3d:14:e0:1e:44:68:9f:6e:
e7:0d:ee:66:ce:7f:de:7f:d2:1b:b9:c4:d9:e5:31:
a3:34:9b:b4:7a:99:b4:ce:a9:b1:d3:42:7d:b0:35:
b0:db:bb:4c:10:2a:48:b7:8a:92:45:a8:a1:3f:02:
19:7e:d1:f8:fe:75:bf:a0:7f:cb:9d:d6:aa:ed:27:
56:58:dc:b2:85:62:61:2f:21:55:2b:9a:78:37:e8:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:46:73:77:82:19:17:49:E7:D2:DC:48:74:64:65:F4:EE:91:9B
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:55:36:35:3b:ee:09:29:ba:41:45:36:b5:15:db:03:8e:
9d:1e:35:f8:9c:a7:e9:1f:7c:c2:c9:79:bd:70:0f:a8:16:be:
70:34:01:2e:4b:c5:25:e7:67:f5:ce:d9:e3:39:9e:af:dd:0f:
d0:df:87:27:02:4e:3d:ef:0a:3f:6b:ca:49:6b:46:41:70:78:
e0:33:bd:8e:c0:06:c4:ef:72:d9:03:32:fc:d2:06:9c:b9:1e:
e2:90:a0:ac:64:91:08:f3:bb:cd:10:f2:28:f8:03:fa:62:83:
bb:79:bb:0d:ae:49:c9:81:2d:b6:dc:42:36:95:22:52:67:36:
54:20:fb:d7:b8:b6:86:5c:cc:55:7e:c2:98:ca:d1:a5:6d:54:
df:1b:66:06:6a:01:99:fc:11:46:c7:f1:b2:b5:ab:83:61:d6:
5c:18:84:0b:0a:f6:9f:87:5f:f2:27:7a:71:74:e0:fa:a6:0c:
95:a8:d8:94:bf:ec:85:c0:af:e2:61:20:6b:1f:5c:fa:4f:c3:
65:a1:6d:9c:a9:c8:d2:21:4a:b5:e3:13:13:53:3b:76:72:57:
e7:71:e1:f7:c3:d4:f9:65:96:b4:ea:9d:22:98:55:42:39:76:
e1:67:74:d0:62:fb:89:4e:3b:49:9c:a0:2b:c7:14:15:cb:1d:
c2:49:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:20 2025 by rpki-client