Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier: HFSoUIsgJp9LjADsFCGw+P81PCZ+q2BRt5vc64rrXPI=
Subject key identifier: 14:FC:5D:8C:EA:95:F8:57:F8:B9:C5:70:46:C9:B1:ED:D5:70:25:C1
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 019A0E950C90EEC788E90A8F7C9138713097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number: 16EB
Signing time: Thu 23 Oct 2025 01:00:40 +0000
Manifest this update: Thu 23 Oct 2025 01:00:40 +0000
Manifest next update: Fri 24 Oct 2025 01:00:40 +0000
Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: JJCcvK7XWHCku03S/rKjwLjI0iDbPvCqdMc5AHwIIMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:95:0c:90:ee:c7:88:e9:0a:8f:7c:91:38:71:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Oct 23 01:00:40 2025 GMT
Not After : Oct 24 01:00:40 2025 GMT
Subject: CN=14fc5d8cea95f857f8b9c57046c9b1edd57025c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:8a:93:d9:b5:7f:d6:5d:d7:3e:3f:6b:82:
11:ea:c9:1d:ee:2e:3a:14:3d:0d:22:ab:8a:df:52:
2b:5b:7a:1a:b1:cb:38:55:30:de:8b:3a:c7:ac:b8:
1a:bd:0e:5a:01:73:5d:b5:78:61:1d:2f:30:a4:75:
71:c3:39:cc:09:53:06:6c:6a:18:f1:1a:f0:a3:74:
74:02:e8:e0:de:22:be:53:39:c0:aa:92:2e:fe:4a:
b2:41:51:b1:6a:eb:d9:a6:d4:b1:58:38:f1:e2:58:
5f:9e:0c:01:45:f7:48:ff:3b:e2:61:3f:be:87:34:
d5:2f:87:64:29:35:9d:ff:9e:ae:23:9a:dd:f6:20:
7c:55:47:4b:6a:73:e4:92:46:78:d8:dd:d8:63:ed:
ec:9b:a7:cb:f9:2c:55:72:a0:0c:8b:3a:57:c2:a0:
7e:14:11:9c:d7:00:17:f8:6e:6c:dc:d8:2e:97:28:
c7:b9:a2:ae:b0:9b:1c:e2:16:c1:7c:2b:a0:6c:a5:
11:39:23:e1:3b:59:60:9a:80:c3:f6:0b:46:99:21:
9f:10:ec:85:a4:a3:66:1f:fc:a6:7e:0d:67:ec:5d:
b3:56:5e:f4:1b:95:52:20:9f:61:70:c8:c1:04:21:
e0:bf:0a:a1:ed:71:3b:52:bc:08:f5:87:34:21:fd:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:5D:8C:EA:95:F8:57:F8:B9:C5:70:46:C9:B1:ED:D5:70:25:C1
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:b5:fe:ed:dc:44:54:d6:22:5d:fd:84:c9:67:8e:0f:de:
93:ea:d7:13:cb:b9:17:11:1a:69:ef:22:79:05:4a:9b:e0:4e:
5e:2f:bc:d5:de:cc:66:bd:38:fc:83:cb:df:e2:e8:64:7d:d1:
a2:5c:b9:b9:46:f6:bf:51:91:b2:b3:c7:2e:1f:f3:95:4a:ee:
aa:5d:ef:3e:49:cb:7a:51:8c:13:0c:c4:f7:02:7a:bb:f2:da:
e3:71:06:23:e8:47:b2:99:83:ca:a3:4c:34:0f:7f:ab:b5:a0:
d0:d8:f7:41:51:ed:66:f3:7c:60:4e:86:6b:f8:e9:4f:e9:a3:
89:88:8b:34:9f:6d:e0:08:1c:9f:89:58:5d:f2:f2:01:b9:35:
ac:a6:51:5a:76:53:6c:4f:dc:a2:f5:99:1b:c3:44:22:40:6e:
5d:80:e4:09:33:15:f7:79:cb:fa:fe:e4:e2:b8:93:cf:b9:df:
7f:f4:9e:7d:fb:5f:a1:77:2b:c2:f0:7b:03:d5:ee:90:50:a2:
15:61:69:ae:ec:48:48:e5:0e:ee:9b:82:f7:4e:fc:2d:e9:3d:
2e:5e:5d:19:4e:2f:97:30:e4:b4:fb:22:86:ec:a8:ae:8f:b5:
40:cb:ec:98:cc:ea:35:22:c4:26:9a:6d:31:00:50:11:f2:c7:
07:f2:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:12:52 2025 by rpki-client