Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: 6c41V1Aim7pId0nXKoqncn73UqnO2jnGXYjfyfZY8LU=
Subject key identifier: 25:1C:08:46:2F:EA:0A:DE:E8:C4:94:34:09:7C:4F:60:DA:D4:64:18
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0198917EDA5F12B0594A5CEAF67AC15F0AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 112A
Signing time: Sun 10 Aug 2025 01:01:06 +0000
Manifest this update: Sun 10 Aug 2025 01:01:06 +0000
Manifest next update: Mon 11 Aug 2025 01:01:06 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: dGF510M7b+cFWD0GhY4hdaXtcOa61mh8wkFzjLxnhQQ=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:da:5f:12:b0:59:4a:5c:ea:f6:7a:c1:5f:0a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Aug 10 01:01:06 2025 GMT
Not After : Aug 11 01:01:06 2025 GMT
Subject: CN=251c08462fea0adee8c49434097c4f60dad46418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:b0:10:f6:18:92:0a:dd:93:37:9d:a2:3b:
92:91:8b:59:12:2d:51:f3:7f:aa:28:54:90:be:37:
29:b0:8f:6b:34:a8:67:b3:6b:84:b3:fc:d3:07:4b:
bd:c9:f2:64:bc:d1:e4:2d:92:cd:ca:64:29:f3:2b:
13:e6:d5:9d:29:00:6a:e2:00:73:ed:e3:7b:f6:7b:
0e:b8:7e:42:ad:a6:d8:e1:92:07:eb:f5:39:43:6e:
cb:bc:42:dd:4f:76:1c:fa:ed:94:d3:a2:e6:9f:7f:
39:3a:8b:1e:ac:c6:75:35:64:36:d4:42:05:32:92:
e2:22:8f:31:76:42:c6:b9:e3:df:89:c8:37:7a:a4:
bc:54:cd:9e:65:c4:c8:02:33:3e:5b:76:be:21:40:
19:07:55:75:54:0d:27:3b:27:2f:ef:66:ce:f4:1c:
c4:a4:f9:13:5d:6d:75:9d:ae:34:65:60:22:18:6a:
17:46:ea:7c:f6:05:18:b0:0a:47:23:12:69:35:97:
47:16:07:a0:74:42:74:22:ba:41:16:5e:16:32:ab:
2c:eb:22:48:98:7c:8a:e3:4e:c5:82:10:dc:f8:ce:
58:57:1c:8d:0c:23:ce:ba:e3:b3:c4:10:87:9d:bf:
e5:21:fc:29:cc:51:28:85:24:39:8c:e7:db:19:1d:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:08:46:2F:EA:0A:DE:E8:C4:94:34:09:7C:4F:60:DA:D4:64:18
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:c2:aa:8c:aa:ca:2d:31:b9:6a:d2:96:7b:6a:22:02:43:
a7:33:50:cd:8d:dc:d4:9b:ef:5a:0b:68:bf:50:8c:6f:89:43:
67:c6:4e:5d:58:f5:88:0e:0c:bf:6e:93:1e:f2:a3:80:53:fd:
4f:a8:b2:c2:e6:9a:21:fa:71:9b:90:f8:81:79:8f:70:80:4b:
b9:3f:b6:8f:19:32:26:89:4a:58:05:97:d9:78:7c:eb:25:ed:
ec:09:d1:39:d5:8a:83:f1:b5:43:d7:c8:39:92:04:66:c8:8c:
65:0e:4a:f3:cf:8f:06:da:e5:a4:5b:c1:e3:16:92:5b:72:04:
4d:a7:6a:82:e8:81:28:33:81:61:2d:37:49:d4:50:79:1b:fc:
bc:df:7b:fe:72:73:c7:8d:b8:49:f2:96:24:d8:77:8d:21:58:
3a:6a:a0:e4:39:a5:6f:5b:ab:0f:23:46:2c:f5:1b:5a:72:7c:
60:89:df:c2:b1:1f:73:8a:55:1f:b7:a3:ee:64:7c:01:52:d6:
b8:77:91:60:04:e0:a9:ba:ae:cb:6a:5c:c1:ab:cf:7f:f1:1b:
e1:f5:eb:9d:98:b0:8a:68:e5:cd:c1:71:ba:8b:d0:d1:92:a4:
ae:7c:82:4c:3f:df:15:09:53:77:41:40:f4:f8:7f:63:db:3d:
53:41:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:24 2025 by rpki-client