Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: crwJSkr6NPG7loqfiN+NblHTx7+34Pdka/w3Bp8ET5s=
Subject key identifier: 39:14:93:7B:7C:AD:48:64:71:AD:0B:AB:AC:43:D4:34:04:58:1A:38
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 0198729866C19052B6CEE44BA3A79B3F3CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 0837
Signing time: Mon 04 Aug 2025 01:00:46 +0000
Manifest this update: Mon 04 Aug 2025 01:00:46 +0000
Manifest next update: Tue 05 Aug 2025 01:00:46 +0000
Files and hashes: 1: 5n6-nw8FoTNYcZ9aENZQUU_ruI0.roa (hash: g9NrBLOfxYZz72cswyRQrtWjdRUQegpck7SaMHmrvjs=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: DmUcSAgNEpQ52FCzTvRj3QL5Vyw9bcWxaZNyYOTNCKI=)
3: O4fx24MkcOun7eOMuF45FXz1Rp4.roa (hash: Oql3zSLN2xRRYzfupmVInGA+80An5sqYygQF4rxwNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:66:c1:90:52:b6:ce:e4:4b:a3:a7:9b:3f:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Aug 4 01:00:46 2025 GMT
Not After : Aug 5 01:00:46 2025 GMT
Subject: CN=3914937b7cad486471ad0babac43d43404581a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:58:c1:20:13:ef:49:bf:24:f4:f2:8f:d7:
f1:0a:d1:c9:af:59:ea:49:e1:13:ac:06:71:0b:59:
6e:d6:b3:6c:4f:2e:c0:81:61:84:7a:d8:31:b0:f1:
da:dc:9d:c0:e9:6c:6f:df:24:9e:10:2a:e2:8f:7f:
bd:85:ba:67:1f:ea:1b:94:7b:fb:a3:a4:bc:73:1c:
05:6b:a4:6f:82:d0:f1:a1:88:45:e2:89:77:bd:8b:
b4:a9:76:95:52:79:4b:5e:a4:fa:c6:d3:6d:7f:18:
71:56:82:79:35:09:cb:4b:e9:b3:86:ee:cf:75:53:
ef:8f:67:f4:47:42:97:e7:21:2d:2e:40:7f:b8:78:
d8:3d:e3:83:a0:76:1d:9c:4d:2f:8b:65:a8:fb:35:
8d:bf:31:de:f3:3e:50:88:0e:74:67:24:7c:31:cb:
d1:33:6e:9a:69:33:0f:3b:45:28:7a:8f:9a:e4:11:
5a:0f:bb:d4:7e:53:3f:f8:5a:f6:de:f4:a1:28:f7:
f8:fc:f2:5d:c5:b0:b4:47:d9:aa:47:53:7a:52:0b:
4e:07:c8:f4:ed:f4:3f:47:02:d9:b6:55:8c:b0:c4:
32:19:ff:3d:8f:8f:02:e6:6c:78:fc:21:35:a4:99:
b2:d7:a2:12:a1:c1:0d:91:a1:f2:14:45:6f:be:d3:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:93:7B:7C:AD:48:64:71:AD:0B:AB:AC:43:D4:34:04:58:1A:38
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d5:99:61:64:fd:47:cb:80:7d:c5:04:70:15:e6:32:0b:66:
f3:8c:7d:e5:bd:26:15:68:04:8c:b4:c1:f6:5e:70:36:bc:70:
20:8b:0e:4e:89:3a:47:0b:3e:fb:d6:52:31:54:3c:89:75:ef:
07:90:39:6c:af:a9:32:6e:96:2d:2b:99:35:96:61:a0:51:d8:
25:c8:20:d0:7c:4e:24:2c:4d:03:fb:a9:d0:2b:de:94:ba:5c:
03:5d:9f:db:b3:75:4c:d9:7e:9b:7e:24:26:8c:0f:40:f0:85:
46:da:7c:f8:f4:ae:ce:0b:78:de:94:62:f1:a9:f7:25:04:90:
d2:e8:3b:7b:92:4a:2b:e2:ac:8c:13:9a:2c:15:b1:08:c6:14:
a3:f2:2c:b4:d8:3f:d1:06:5d:38:e7:e5:13:90:d5:d4:7b:04:
64:f6:e3:68:e6:23:6c:0b:48:69:f7:99:4f:90:61:a2:3f:58:
f7:0d:ee:87:25:22:03:15:1a:02:77:4d:bb:a9:f8:f0:16:ce:
d1:8f:92:5c:16:0e:66:4a:4c:bd:e2:08:4c:41:21:a6:c4:18:
32:62:6e:62:57:b9:1d:47:27:96:2b:b9:b7:91:71:87:d8:b4:
f9:3a:04:a3:8c:eb:81:c0:74:3a:41:cf:a0:64:78:34:d4:16:
4c:0f:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:38 2025 by rpki-client