Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: 5PQPQ7CHKkk7UnUWX+9/K0sQyAV/cP1rr1Zd9Np8dms=
Subject key identifier: 46:E5:10:A6:81:73:32:D3:65:56:DA:78:FF:D1:E0:9C:C1:C2:9A:DE
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 01968058E8E41CD774AFBEA0AF5171ECB615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1018
Signing time: Tue 29 Apr 2025 07:00:32 +0000
Manifest this update: Tue 29 Apr 2025 07:00:32 +0000
Manifest next update: Wed 30 Apr 2025 07:00:32 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: +i5FhWkG3+mwJ12KUOQGQQmWjxkKZTzKGX4VBcO3Ic8=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:e8:e4:1c:d7:74:af:be:a0:af:51:71:ec:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Apr 29 07:00:32 2025 GMT
Not After : Apr 30 07:00:32 2025 GMT
Subject: CN=46e510a6817332d36556da78ffd1e09cc1c29ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:40:46:f0:2d:1a:30:e0:56:aa:62:bb:21:
6a:c1:44:9a:79:4c:81:ec:44:28:f7:bc:8f:80:e9:
e6:63:bc:38:a8:f5:08:b2:94:4d:d0:2a:a5:11:12:
d0:b1:2d:79:55:37:32:df:43:ea:a6:5c:90:ed:8d:
48:cf:91:39:4d:5b:af:05:f6:09:71:12:d9:57:8d:
7d:6b:c3:f3:30:9d:a1:9d:a4:cd:cf:11:89:e7:60:
ab:44:a5:1b:5e:16:af:d6:24:0f:00:63:c4:72:cb:
90:5c:d7:93:4f:ec:eb:04:71:e7:14:6b:a8:19:e3:
9d:d1:1b:77:b7:bd:c6:5f:41:90:28:bd:bb:2c:b7:
34:1a:f1:ed:75:a8:f2:75:b7:5e:d3:3c:82:cb:3c:
85:3e:10:02:c8:f1:f5:3f:52:13:b1:15:59:ce:5e:
29:3b:6d:34:35:a6:54:a4:63:da:99:de:8a:90:8f:
ff:c1:1e:55:41:32:ec:93:2c:d5:44:28:7a:0b:e4:
ea:1a:8e:6d:90:b7:da:5e:2e:c9:23:ed:75:4c:ad:
71:c4:f5:f8:18:fb:55:bc:34:b4:27:79:fa:57:95:
d1:e4:2e:97:a7:b2:7c:92:43:a1:f1:a7:c3:f9:51:
b3:90:64:b6:7a:fd:b8:5e:d2:ea:75:62:2a:40:fa:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:10:A6:81:73:32:D3:65:56:DA:78:FF:D1:E0:9C:C1:C2:9A:DE
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:20:c2:8c:c1:58:35:92:42:f2:63:99:56:c6:00:c8:29:29:
93:ea:95:64:67:69:86:46:2c:80:54:41:42:d1:f1:6e:73:7b:
f7:83:fa:05:76:5d:1d:12:b8:b6:e9:6b:4e:9d:f1:3a:59:00:
b3:3e:0a:b0:3b:52:11:6b:80:40:21:ad:61:d8:ed:ac:eb:f4:
59:9a:91:8b:e8:c3:af:94:1e:51:0e:16:2e:1d:6f:89:c0:01:
e0:52:ee:07:6a:70:5d:ae:ec:07:14:bc:84:58:4f:f2:0a:8d:
78:bd:bb:6c:4a:04:0a:43:72:c7:df:3e:8d:7c:5b:fa:e4:f9:
99:ab:1e:d5:d6:97:1a:40:91:6b:e8:7a:03:af:57:b0:bb:a6:
47:6e:5e:00:cd:8b:47:46:5b:b5:1d:c4:8a:8e:cb:ac:de:a1:
8c:ac:ae:7c:d6:07:0a:8e:e2:dc:6a:ca:39:5d:62:89:f0:0f:
46:20:50:51:ad:eb:e3:ef:d7:4a:22:70:33:1e:26:8a:aa:52:
1e:62:7c:3d:83:06:6b:34:31:af:eb:6c:4c:32:a7:d2:84:84:
77:b8:bd:7b:07:c5:f0:40:f5:06:df:26:76:43:03:7c:a4:5b:
d8:df:f9:7e:56:c4:eb:80:34:0d:04:81:16:9e:fa:d4:61:e9:
1f:4a:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:20 2025 by rpki-client