Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: urKq+vZi/VW84vFbdQMXVaKBPy8ejRFCdLffGhCUOek=
Subject key identifier: 95:30:70:C1:74:CB:CD:15:39:64:59:95:8E:B8:BB:6B:18:71:04:12
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019A500768A8844EFDA7D91CDCF9644CE841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: rwx1cGrIwRwu+m1IR2fnCcH8pmbj6jvKyuncrDt8vVU=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:68:a8:84:4e:fd:a7:d9:1c:dc:f9:64:4c:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=953070c174cbcd15396459958eb8bb6b18710412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:50:8c:a3:f8:21:fc:0e:7d:19:7f:6e:9f:
15:68:7a:30:bf:c2:ca:2c:90:1b:30:24:da:4d:f9:
9c:f1:c1:90:6f:22:42:8c:76:7f:cf:97:0a:31:ba:
1e:35:87:cb:de:4e:66:3c:f1:8e:b6:05:9d:7a:68:
3d:91:6b:ed:10:6e:21:ce:b2:45:9f:10:f0:2e:9b:
0c:75:e1:c0:a3:5c:2f:22:98:82:fe:ab:1f:ab:ef:
76:16:22:f7:46:ee:17:1e:a3:47:d8:0d:e5:20:3c:
86:88:cc:46:f8:f8:8e:52:c9:15:21:51:ca:95:36:
b2:c6:c4:3b:3b:c1:31:5a:7a:ab:31:f8:3e:6e:63:
20:f2:b3:f3:d1:48:7e:a8:8e:92:49:23:29:41:b2:
4b:7b:b0:4b:2b:cc:46:3c:3f:a1:ad:28:a6:d0:90:
20:49:d7:e0:30:94:be:54:ab:3d:ae:c2:01:70:b4:
77:4d:3b:03:78:a9:be:59:01:b0:14:12:5b:7b:8e:
ec:dc:61:bf:06:78:37:5d:52:44:f0:27:ff:0f:49:
1a:ae:de:88:8e:fe:ca:a6:29:40:47:87:51:58:db:
84:7d:73:76:a6:42:c3:af:72:66:e4:a1:df:3c:87:
7d:fa:4c:2e:29:ef:4a:5c:ec:40:e2:b4:cb:d7:c2:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:70:C1:74:CB:CD:15:39:64:59:95:8E:B8:BB:6B:18:71:04:12
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:5b:fb:38:c5:1d:f7:a2:93:cc:a1:fb:08:46:5a:ca:ae:
f4:0b:9c:89:47:7c:50:80:9e:8c:10:e2:dc:c5:c2:a8:79:6e:
b3:91:6d:06:53:17:85:ca:5e:ba:8a:72:6f:74:55:ca:00:b6:
63:07:e2:0f:2c:01:58:cc:40:f2:f0:2b:e8:06:5d:75:c1:98:
58:87:6f:78:ce:a7:89:c7:08:5e:9a:93:1a:a5:bb:f9:80:d9:
4e:d7:84:a0:f0:20:44:24:09:a9:c6:a8:a8:52:f6:d4:02:3a:
0b:97:26:05:e5:85:6e:95:ba:1e:60:24:98:ef:5d:8b:99:59:
cb:0a:86:e4:76:e4:c8:7a:4c:ff:2c:85:dc:f4:f8:6d:bf:6e:
2a:c8:dd:dc:47:9f:2b:27:5e:77:5f:70:20:1b:52:51:73:f2:
17:10:42:24:33:bf:a9:ae:fd:ee:ee:23:e4:6b:5a:c4:a2:f1:
59:4e:ee:fa:ee:18:28:9a:2b:ed:58:0e:01:dc:41:e5:01:c4:
1d:dd:9b:9d:c6:7d:46:6c:e1:95:6a:aa:ef:e4:84:41:de:c4:
49:04:93:fd:63:c8:3a:e1:01:5b:4f:3b:3f:7e:57:83:30:a6:
8e:93:3b:97:d8:c9:65:fb:ae:bc:4e:7f:fa:74:d9:06:06:53:
00:24:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:24 2025 by rpki-client