Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: ThA17W1nSknJdrT/FOenJ2CGHqTpSvRtMRRrzqiRGDU=
Subject key identifier: AC:4B:4E:AD:CD:C8:F3:35:13:BF:B5:89:25:87:6E:EC:89:D7:3E:6C
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0196C013991D3DD899B3A147D845AC2D8601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1039
Signing time: Sun 11 May 2025 16:00:31 +0000
Manifest this update: Sun 11 May 2025 16:00:31 +0000
Manifest next update: Mon 12 May 2025 16:00:31 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: yMhy13uXvEQEh84lTip9SlMzZMwLw+gsntk7b6U+U8s=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:99:1d:3d:d8:99:b3:a1:47:d8:45:ac:2d:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: May 11 16:00:31 2025 GMT
Not After : May 12 16:00:31 2025 GMT
Subject: CN=ac4b4eadcdc8f33513bfb58925876eec89d73e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:dd:0c:6c:fd:69:2b:b9:5f:c6:e7:ea:37:
b5:1f:e3:17:81:4a:5e:4d:14:d1:22:68:22:94:c2:
e5:5b:f0:72:9e:23:9f:d5:24:70:34:f0:f9:2c:b5:
0c:ab:94:8f:ae:a4:d2:ea:0c:14:85:44:21:ea:d7:
12:fb:20:53:cc:bb:8a:b6:fa:be:00:27:d9:1a:2e:
0e:51:31:59:1b:09:6d:f4:a9:cf:3e:65:bc:69:ec:
81:05:4d:a0:f4:2b:b7:e9:bd:56:6a:5a:b3:a6:69:
e1:7a:59:d3:49:7e:ab:94:f9:62:1b:7b:ab:73:c5:
cb:c7:ca:72:bd:c2:72:db:d8:bb:9a:7c:18:30:d7:
60:34:d9:9e:8f:db:74:09:39:ed:ff:77:99:96:9d:
4d:72:65:00:36:5e:82:92:a2:01:d7:46:e7:80:16:
24:bb:ca:3e:c8:58:93:f9:65:91:da:e8:27:a2:a5:
44:0e:8d:2a:34:5b:d8:7c:82:a5:1a:1a:bb:0b:b3:
f6:36:e7:0b:8c:2c:3e:94:90:8d:76:f1:4d:7b:8a:
eb:ae:81:b2:45:72:76:db:4f:2d:bd:2f:fb:7c:16:
d2:8f:4b:1d:89:d9:9f:4a:ca:5a:72:ad:98:ea:7b:
a7:b6:32:e7:1b:82:fa:88:4d:54:e8:1f:fa:33:a4:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:4E:AD:CD:C8:F3:35:13:BF:B5:89:25:87:6E:EC:89:D7:3E:6C
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a0:c6:aa:9b:04:00:1c:6a:1f:1c:1c:f0:68:78:73:d3:98:
12:d4:71:67:ea:3b:32:09:1c:20:c8:a0:41:d4:42:4a:d7:10:
9e:f4:d4:c1:fb:c7:80:94:5e:cb:ac:c2:fe:9f:0c:72:07:39:
40:c5:5b:17:0a:9e:29:10:8e:1f:d2:b8:de:aa:a1:94:59:8d:
ff:87:1b:e9:9d:d5:14:2f:47:68:5c:90:4a:de:e9:01:0c:d7:
1f:7d:36:74:7e:4a:a7:65:b2:d7:6d:cf:9c:58:d6:42:27:48:
bd:bd:a5:71:d6:3f:1e:a8:b8:44:9c:35:1e:86:6b:12:c5:95:
ca:35:12:56:3d:97:ee:2d:bd:df:e5:10:e7:cc:7b:c2:77:5f:
31:18:b2:84:b2:cc:7d:eb:88:bb:fe:d5:20:d7:52:59:a2:e1:
f7:3e:92:c5:7a:7e:e3:be:2a:ca:19:9b:6a:dd:60:f2:19:7b:
55:ba:b5:27:90:9b:4e:47:e4:e6:88:73:b7:13:2e:2a:b4:1b:
5c:aa:b7:49:1c:7b:88:79:6a:1a:3b:3a:c4:65:1b:10:f1:28:
cc:9b:24:42:24:dd:73:11:18:45:a1:05:94:7c:35:01:f1:5e:
73:cd:71:f6:10:0c:10:bd:8c:d4:9f:05:92:ae:7c:8e:6b:aa:
bd:30:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:02 2025 by rpki-client