Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier: 5WKpJlBgmkZTIMjnCODDGihy+4BYZxAPAubPHf2Ou5U=
Subject key identifier: B0:66:2B:39:4D:0D:F6:87:14:F3:85:DB:10:67:17:D5:A5:24:5A:04
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial: 01976D06DDC3CC047F1FA3DCFE75893AC134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number: 0DC2
Signing time: Sat 14 Jun 2025 06:00:55 +0000
Manifest this update: Sat 14 Jun 2025 06:00:55 +0000
Manifest next update: Sun 15 Jun 2025 06:00:55 +0000
Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=)
2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: rfJadULEZntbqUqgbOHhJGKERgyu3gvhAp/DGF6EhX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:dd:c3:cc:04:7f:1f:a3:dc:fe:75:89:3a:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
Validity
Not Before: Jun 14 06:00:55 2025 GMT
Not After : Jun 15 06:00:55 2025 GMT
Subject: CN=b0662b394d0df68714f385db106717d5a5245a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:1c:d1:df:ae:a1:9b:5d:7f:61:84:6a:2e:
25:45:65:94:38:bf:df:80:b8:fe:1d:11:66:e9:1a:
d2:ab:a5:1f:5f:f2:8c:f2:88:ac:1f:cf:c6:7f:67:
14:6b:12:be:27:34:ea:ce:2f:59:c1:9c:61:c8:d7:
31:2e:cb:d0:4a:37:3d:6b:71:65:d6:b1:38:8d:bc:
4c:fd:f6:d6:ba:41:84:ae:76:97:eb:4e:50:dc:98:
79:f7:97:18:d4:ae:20:98:d7:16:2a:05:67:fa:4c:
77:1b:35:13:d7:1f:5e:ef:e4:2d:d2:99:00:7c:ef:
58:94:d0:7f:dc:c8:69:57:83:96:37:3c:79:73:0b:
97:6a:61:72:35:f6:71:62:31:c1:cb:05:0b:d4:41:
8c:cf:43:7c:63:ec:1f:42:bc:be:4f:41:10:e4:38:
77:09:6e:10:ec:bd:6b:60:60:f4:da:a0:ce:b4:ee:
63:39:7f:8a:dc:d0:bc:c6:4a:c7:8b:1e:0b:ea:a7:
3f:37:0b:2f:38:99:d8:60:38:91:87:f8:69:1b:1e:
c0:b6:fb:14:2d:6d:8b:86:0d:c8:85:bf:fc:0f:39:
2e:3d:ff:f2:2e:d2:81:c5:ae:bb:92:6e:17:89:7e:
18:f3:83:1c:db:5c:08:af:d7:95:84:f3:42:7c:87:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:2B:39:4D:0D:F6:87:14:F3:85:DB:10:67:17:D5:A5:24:5A:04
X509v3 Authority Key Identifier:
keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:1e:3b:65:3d:3f:31:b7:c0:93:64:8f:d8:5f:26:a4:3d:
42:19:21:46:80:0a:ec:36:22:7e:b1:de:81:51:a3:19:69:b7:
dd:ce:a4:80:c0:59:77:85:ca:34:6e:8a:7f:21:e8:8d:7d:25:
e0:16:fa:25:6e:86:32:51:e8:cb:5c:70:20:21:34:fa:ce:02:
cf:cb:58:a9:a0:a5:9f:58:6c:a0:49:3e:e9:d3:81:67:5a:bd:
50:8d:2e:3c:83:57:17:f8:7c:d9:b5:42:10:11:70:68:88:cf:
84:8a:ce:bf:27:7a:1b:a3:be:6b:c7:8b:31:de:6c:b0:c3:3a:
b6:7f:12:f8:f2:cc:54:b7:97:5a:90:c0:ba:3f:63:15:11:1b:
5a:72:a8:80:2d:41:91:37:c9:43:27:8f:68:b9:dc:57:fd:9a:
64:27:d3:fa:1b:24:ae:ba:c6:a4:14:6e:36:ba:68:cd:e9:cf:
91:6b:95:1c:bd:2a:f0:2a:14:84:80:88:91:b3:c3:99:11:31:
dc:64:b2:42:77:cf:5f:67:02:e8:4c:92:7f:0b:aa:3c:76:a2:
26:79:60:62:fe:13:f7:ab:3c:2c:d0:66:b8:37:e5:d9:59:e8:
5f:18:ef:c1:22:9f:0b:67:b7:59:86:73:6f:48:e6:07:e7:2b:
4f:8e:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:52 2025 by rpki-client