Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: lXHCwOvMlpCHvr9n5vyv+Phdb0ZlZVwfXBW2VJhoSCM=
Subject key identifier: CF:E9:84:6F:3D:61:A7:6E:37:1D:E7:67:57:7D:CC:B5:B0:1F:5F:74
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019A4F997F68CF7DA867EE974EA3F0351A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1211
Signing time: Tue 04 Nov 2025 16:00:50 +0000
Manifest this update: Tue 04 Nov 2025 16:00:50 +0000
Manifest next update: Wed 05 Nov 2025 16:00:50 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: dGoMRqdLYNa5ppNnxvgpPfnH4X5R+b9p94f5tnViXKc=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7f:68:cf:7d:a8:67:ee:97:4e:a3:f0:35:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Nov 4 16:00:50 2025 GMT
Not After : Nov 5 16:00:50 2025 GMT
Subject: CN=cfe9846f3d61a76e371de767577dccb5b01f5f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:8a:f4:63:e7:eb:b9:b5:f2:1a:ce:16:b8:
76:c5:e5:f5:60:3f:05:8b:eb:6f:e3:cd:29:1d:10:
02:d2:2b:8d:c4:78:70:a6:55:43:63:be:4c:0b:5e:
f8:f2:b2:22:de:08:21:89:b5:37:e3:60:45:31:de:
f5:ff:3c:d5:3c:83:e0:fb:f7:e5:98:1a:12:a8:b3:
b1:00:f7:32:67:a0:cd:f9:18:19:03:05:a8:28:b4:
8d:27:c8:51:7f:19:08:dd:b6:dd:ae:93:86:20:55:
25:ac:69:d2:bd:3b:26:51:05:70:e0:fd:d1:b1:43:
99:a0:35:f1:35:e4:98:0c:d9:ee:fe:fd:6e:75:07:
48:60:f0:35:1f:0d:4c:db:1d:5c:09:da:61:7d:c1:
3f:25:2f:f7:af:58:74:e1:c7:26:ed:20:e9:78:09:
c6:10:30:8e:d3:d7:ee:e2:b5:48:64:f8:63:e6:23:
af:6c:0b:96:bc:fa:6b:0d:09:b5:6b:fa:e0:a8:42:
08:dd:2e:6b:22:a8:fb:7f:c7:83:48:30:55:45:34:
76:80:fc:3e:5f:c5:05:c6:dc:6f:60:03:dc:52:fc:
24:ff:60:06:94:38:cd:9d:24:5c:09:a2:70:4c:ea:
5a:7f:1f:ba:84:50:3e:bc:64:8a:4e:35:94:80:a5:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:84:6F:3D:61:A7:6E:37:1D:E7:67:57:7D:CC:B5:B0:1F:5F:74
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ec:8b:32:6b:eb:a0:b9:1a:54:d6:bc:74:0d:d6:10:04:6f:
61:14:40:67:af:7c:cf:6f:e1:9a:38:a5:9d:dc:dc:12:a5:0d:
5f:b2:05:c1:6a:f4:f6:2b:b9:a6:00:14:e0:40:e9:1f:82:16:
ea:32:46:75:aa:c7:83:4d:9d:a1:11:54:02:59:f4:af:79:1f:
fc:9d:a1:05:f5:40:48:0a:61:1d:b5:99:12:a3:92:1d:cf:43:
af:8e:10:ed:92:71:c2:91:5d:ad:1a:3c:9c:2e:d4:33:8d:0b:
b8:64:ee:97:ac:66:6b:3e:23:f2:9d:f3:b5:7d:53:c3:89:04:
00:3c:4a:08:ac:9b:e1:b8:10:a5:eb:14:f1:cd:43:0c:4d:f7:
ef:5f:23:da:69:c4:c8:fe:e8:f6:d4:74:b2:75:e9:5a:d7:2a:
c4:a5:55:87:f4:31:4c:e1:c3:4b:70:54:72:90:24:bd:bb:a5:
f4:ba:8e:61:4c:03:12:6d:b3:12:c0:75:68:02:7d:82:4d:27:
e7:fd:d0:46:7a:16:6b:27:36:c7:93:43:65:35:31:6f:1e:75:
c7:a9:95:2b:1a:7a:2c:f4:73:b2:f7:6d:ca:8c:f4:c6:8c:41:
fa:60:96:cf:17:4c:94:6a:90:0b:1d:99:af:f4:6b:16:fb:5c:
ab:63:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:48 2025 by rpki-client