Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: az1sxlNXzpXcBo0xx8KrzYu3rHDQcDBJtdGZK/I1MvA=
Subject key identifier: D9:42:96:B6:93:35:58:4A:4D:8A:88:52:E6:47:49:B4:EA:65:A3:72
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 01987E9C85477EB84722073C0154DD396605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 09:00:43 +0000
Manifest this update: Wed 06 Aug 2025 09:00:43 +0000
Manifest next update: Thu 07 Aug 2025 09:00:43 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: vBTsd9IxYtIFII8qUIWm9UqWFVHbRsNZrNeezylRALM=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:85:47:7e:b8:47:22:07:3c:01:54:dd:39:66:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Aug 6 09:00:43 2025 GMT
Not After : Aug 7 09:00:43 2025 GMT
Subject: CN=d94296b69335584a4d8a8852e64749b4ea65a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:79:f9:4f:d3:c7:7b:e4:b6:85:f3:2a:5c:
6e:f9:5b:87:96:c3:d1:36:0f:ca:08:71:12:bd:00:
31:3d:36:43:0d:00:e8:13:d1:da:69:f7:e5:a6:db:
47:c1:84:51:cd:ce:09:db:ba:8f:09:16:1a:5d:08:
d7:b0:87:2a:8a:c4:4b:f3:0d:6b:52:79:09:38:5a:
c7:24:fe:c1:76:c4:ae:37:6a:27:82:cf:70:e5:c2:
f2:29:84:c5:94:9b:d4:4d:a4:a1:cf:19:5b:cd:b1:
1f:15:f1:8c:4d:bb:52:0e:51:37:ca:27:0f:06:65:
68:e7:01:fd:e8:ce:53:44:63:7a:68:fc:b6:0c:6b:
c4:a0:04:35:19:8b:6e:d7:3b:e0:a8:84:3c:e0:85:
e6:39:9a:c2:f5:5f:e5:95:bf:4f:1b:ed:9f:ca:49:
56:58:e7:5e:2b:45:98:3b:57:c0:2a:7a:5d:4c:12:
f7:82:67:2f:7d:6b:77:6c:e4:3a:97:86:8c:55:a6:
49:2c:81:0e:dc:29:a7:59:62:1c:b5:8f:a4:9d:1f:
7b:54:30:9d:3d:d1:ce:34:d1:6f:aa:8b:ee:8d:3c:
f9:0d:f5:53:57:f2:ea:68:09:c3:96:50:15:da:e3:
29:69:53:3c:60:8e:24:c9:52:31:b9:ea:4e:90:d5:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:96:B6:93:35:58:4A:4D:8A:88:52:E6:47:49:B4:EA:65:A3:72
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:f3:50:a0:43:fb:74:27:85:7d:f5:d7:8a:36:e3:56:44:
f9:07:c4:68:2a:c6:ca:4b:27:04:0f:ea:d7:ed:09:de:fc:88:
00:6f:f5:f0:01:ab:78:be:1d:74:cb:d8:1d:7a:59:3d:0b:7a:
9b:0a:9e:e2:a2:dc:48:93:c5:77:ed:3f:0b:75:2f:90:d6:fe:
11:07:eb:4d:aa:b4:dc:ca:bd:97:c9:e7:8d:64:29:cb:06:f0:
d1:ad:35:27:9d:5f:ef:a4:86:d4:03:bd:be:2d:9e:72:cb:d3:
31:e7:1e:e1:f7:28:2c:68:be:ac:b5:51:e8:53:30:33:7c:c5:
5a:1b:20:e7:3e:b1:7e:5a:5b:83:39:42:fa:b1:0b:f4:4e:0a:
fc:14:11:e3:e2:13:f5:83:4e:8f:65:f4:bd:38:fb:82:31:d4:
6e:92:a5:99:7b:54:8e:98:e9:45:75:a3:c2:16:ae:d3:d7:54:
86:ae:51:3f:98:6a:d0:91:ad:7b:98:44:4f:06:79:30:5b:70:
dd:34:31:c2:43:e0:77:a7:ed:97:6d:15:48:f2:a7:c5:66:62:
e2:3e:18:52:6e:a5:1a:35:d0:fe:ed:f7:6c:19:d5:ff:0c:6f:
3b:cf:d8:47:61:56:32:19:5c:ac:9f:57:ee:51:48:bb:9c:50:
bf:df:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:48 2025 by rpki-client