Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: MJGPrHx2rMQIff1Cuefw1J9uNWeb39bN6BJ/qUQHR0k=
Subject key identifier: FF:CB:6F:1D:6B:EE:14:F6:92:71:17:0B:60:FE:2D:E8:75:8B:BB:C1
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 01976FD0AE52D6046501E49123319FECF977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1094
Signing time: Sat 14 Jun 2025 19:00:36 +0000
Manifest this update: Sat 14 Jun 2025 19:00:36 +0000
Manifest next update: Sun 15 Jun 2025 19:00:36 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: JnJV3C3ckxubvseCuOnu10Wt8RvSQRx9SP3yqZWzEmk=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:ae:52:d6:04:65:01:e4:91:23:31:9f:ec:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jun 14 19:00:36 2025 GMT
Not After : Jun 15 19:00:36 2025 GMT
Subject: CN=ffcb6f1d6bee14f69271170b60fe2de8758bbbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:6f:3f:11:00:58:a2:01:03:ac:b8:1c:b7:
9f:57:7d:73:a7:ee:26:24:5f:fc:cd:0f:5a:28:84:
74:31:42:a3:8f:cd:37:5a:fe:29:bb:8c:1f:90:61:
7c:21:df:ec:a6:7b:1e:54:d6:e5:0d:c6:44:cd:28:
a7:aa:66:27:d7:c4:16:e1:cc:ac:8e:3f:7b:60:f2:
cf:1f:9e:32:63:77:1e:59:a4:39:97:f7:b3:05:e9:
22:ef:2b:2f:da:2f:a3:b3:76:68:31:d6:43:ee:72:
2b:e5:1e:1d:9d:04:9e:ca:b0:d4:10:03:54:eb:cf:
15:d7:23:15:08:3e:aa:03:5b:ae:61:1c:9d:c2:5a:
23:39:91:34:44:a4:05:db:cc:f0:f6:2a:47:11:7e:
82:0a:bf:09:35:6a:e7:8f:2f:0e:8c:db:bc:a2:a8:
db:ec:ce:8c:55:a4:41:22:2f:8e:c9:4b:7c:f6:88:
c1:ed:98:4c:26:43:f6:4d:95:6d:93:36:70:fe:c8:
a2:50:db:c4:15:56:3e:30:ed:16:75:4a:af:51:5b:
7c:20:f1:ef:4c:48:3e:12:62:51:36:8e:4a:87:cf:
b2:e2:f5:40:c5:e6:2a:36:56:76:5c:b5:d9:7b:19:
c3:d5:99:c8:c3:35:64:b6:3b:74:60:39:07:a0:95:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CB:6F:1D:6B:EE:14:F6:92:71:17:0B:60:FE:2D:E8:75:8B:BB:C1
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:88:81:e4:48:51:e9:69:1e:b5:13:fe:77:dc:05:89:cb:9c:
d5:3e:fe:7f:38:71:bc:13:90:aa:80:ae:25:f2:f8:27:65:ed:
70:a8:b8:2a:dc:e6:ac:4a:4d:6d:41:21:bf:38:06:ff:f0:f9:
6f:18:a8:6c:d1:29:9f:73:98:8c:78:bd:87:ac:6d:3f:f1:07:
04:fc:d0:c6:72:6c:96:67:ae:0b:6a:a0:15:9e:4c:ea:51:30:
d7:70:df:d4:e6:80:6b:99:67:73:3d:1c:3b:7c:9b:54:52:81:
e9:1f:a6:1b:a8:76:c7:13:0a:55:5b:ee:46:f8:51:aa:b2:33:
c7:63:5e:f6:50:72:76:0f:5a:53:d9:cd:35:42:2d:f5:6f:a2:
2c:cf:b0:43:22:25:1b:67:d7:34:f9:de:b0:19:c6:36:f6:a8:
78:3b:4a:7c:22:a1:1b:61:1b:5a:06:da:2c:52:b9:08:01:d0:
01:82:26:36:78:80:7a:b4:fe:6d:68:dc:0b:d4:e6:00:a0:c9:
27:24:10:4c:c6:9a:dd:b6:1d:e7:6b:00:f6:80:cc:9f:e3:6c:
8d:d2:0c:98:4c:4c:5f:54:e7:a3:e1:61:1c:a4:83:a5:cd:c1:
15:25:42:8b:50:8c:48:81:66:a2:ea:cf:a7:b4:b4:38:31:13:
a5:7d:84:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0K5S1gRlAeSRIzGf7Pl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjUwNjE0MTkwMDM2WhcNMjUwNjE1MTkwMDM2WjAzMTEwLwYDVQQD
EyhmZmNiNmYxZDZiZWUxNGY2OTI3MTE3MGI2MGZlMmRlODc1OGJiYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GZvPxEAWKIBA6y4HLefV31zp+4m
JF/8zQ9aKIR0MUKjj803Wv4pu4wfkGF8Id/spnseVNblDcZEzSinqmYn18QW4cys
jj97YPLPH54yY3ceWaQ5l/ezBeki7ysv2i+js3ZoMdZD7nIr5R4dnQSeyrDUEANU
688V1yMVCD6qA1uuYRydwlojOZE0RKQF28zw9ipHEX6CCr8JNWrnjy8OjNu8oqjb
7M6MVaRBIi+OyUt89ojB7ZhMJkP2TZVtkzZw/siiUNvEFVY+MO0WdUqvUVt8IPHv
TEg+EmJRNo5Kh8+y4vVAxeYqNlZ2XLXZexnD1ZnIwzVktjt0YDkHoJWelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Lbx1r7hT2knEXC2D+Leh1i7vBMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIiB5EhR
6WketRP+d9wFicuc1T7+fzhxvBOQqoCuJfL4J2XtcKi4KtzmrEpNbUEhvzgG//D5
bxiobNEpn3OYjHi9h6xtP/EHBPzQxnJslmeuC2qgFZ5M6lEw13Df1OaAa5lncz0c
O3ybVFKB6R+mG6h2xxMKVVvuRvhRqrIzx2Ne9lBydg9aU9nNNUIt9W+iLM+wQyIl
G2fXNPnesBnGNvaoeDtKfCKhG2EbWgbaLFK5CAHQAYImNniAerT+bWjcC9TmAKDJ
JyQQTMaa3bYd52sA9oDMn+NsjdIMmExMX1Tno+FhHKSDpc3BFSVCi1CMSIFmourP
p7S0ODETpX2EUg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:59 2025 by rpki-client