Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: Or98Qyiytdn0sF5D1f25A1p6lgO6zbzlhQImzfp8Hsc=
Subject key identifier: 1D:D1:C5:AA:A5:81:C8:0B:85:FB:CC:F1:E6:8C:2D:7F:EE:71:73:22
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0199FC8F857028C8D6AD0C71B42344C9B72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 11E6
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: Sme4/RLfHze8LrpPkLKMpS9hoZvaNA4NG+0vkRY15u8=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:70:28:c8:d6:ad:0c:71:b4:23:44:c9:b7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=1dd1c5aaa581c80b85fbccf1e68c2d7fee717322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:c2:78:55:e8:26:7a:10:96:46:cb:67:3c:
8d:33:27:b3:9d:bf:d7:f8:56:d7:5a:f6:35:8d:bb:
38:31:f7:e6:72:bd:61:5e:46:f6:29:ed:b1:a6:0c:
7c:d6:b5:74:69:79:ed:6b:48:c2:b3:af:4e:cd:72:
ab:58:34:67:16:a5:8b:f9:8f:56:c0:71:2b:f5:a6:
2c:d7:18:a8:a6:c2:fe:1a:46:48:bb:bd:e6:8b:d3:
4c:fd:b0:e0:5a:25:04:bf:f5:6b:5c:0c:d2:16:38:
a1:a0:cd:a9:f3:b3:80:85:f2:f9:e6:ab:cc:17:a8:
dd:b9:e4:9b:98:59:46:94:52:79:e4:71:22:26:d6:
bf:28:31:c5:b3:e4:87:1a:52:87:50:ef:b1:bb:a9:
12:e7:12:6d:3c:6b:81:d9:df:56:8d:ca:ef:23:6b:
4c:25:60:f4:72:3f:32:ae:13:f0:46:d8:2d:66:53:
c7:95:f1:82:54:a8:33:fa:6b:52:c9:e4:02:ea:71:
66:db:d6:cb:25:80:29:04:dc:88:86:ec:06:d7:1c:
56:8f:71:40:bd:c9:c3:60:c6:c7:d4:47:13:80:bf:
c2:c0:b2:ae:e3:6e:fc:f3:41:55:18:97:ac:2e:20:
17:bb:db:a6:df:6d:7e:48:8d:24:74:d9:45:d0:1d:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:C5:AA:A5:81:C8:0B:85:FB:CC:F1:E6:8C:2D:7F:EE:71:73:22
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:d7:fb:05:4a:a3:4c:59:91:91:29:ab:7b:e2:db:42:58:
7f:e8:4d:70:77:15:ca:00:06:31:88:67:f3:77:d8:a2:f0:04:
f1:af:1f:56:7b:a6:cb:14:08:fa:3f:aa:16:bc:1b:f6:62:aa:
3d:99:cc:17:60:fa:89:a3:f7:5d:e0:3d:f7:41:ec:62:c7:2b:
ec:6c:e8:1a:38:8e:9d:1f:2a:d6:b3:d4:ff:c6:07:32:4b:95:
50:f8:53:3b:48:57:87:91:a5:f2:45:f8:b7:a4:b1:ca:94:d5:
2a:a2:56:7b:da:cb:5e:7c:af:24:cb:6b:c7:d4:54:9d:9b:18:
cb:15:67:ce:99:e7:06:e5:92:25:89:8b:f9:85:61:6a:72:0f:
4f:5d:4d:74:fb:d7:ae:c0:95:a7:d2:e7:8d:1f:41:36:6a:96:
dc:d2:92:4c:41:26:89:05:32:c8:73:34:76:07:79:e5:02:fb:
58:1c:d0:b7:49:ce:7c:92:12:6b:bb:5b:c2:a6:03:ec:c6:4e:
5d:35:62:0e:1e:d6:0a:c5:f0:e5:c6:92:60:ca:cb:4f:12:c5:
bb:ec:e8:30:88:91:7b:08:72:76:7b:e6:30:59:70:ba:0d:a6:
bb:df:c4:1a:94:d3:c4:63:3a:56:80:7c:49:dd:4f:14:f0:13:
ba:d6:94:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4VwKMjWrQxxtCNEybcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjUxMDE5MTMwMTI4WhcNMjUxMDIwMTMwMTI4WjAzMTEwLwYDVQQD
EygxZGQxYzVhYWE1ODFjODBiODVmYmNjZjFlNjhjMmQ3ZmVlNzE3MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5bCeFXoJnoQlkbLZzyNMyeznb/X
+FbXWvY1jbs4Mffmcr1hXkb2Ke2xpgx81rV0aXnta0jCs69OzXKrWDRnFqWL+Y9W
wHEr9aYs1xiopsL+GkZIu73mi9NM/bDgWiUEv/VrXAzSFjihoM2p87OAhfL55qvM
F6jdueSbmFlGlFJ55HEiJta/KDHFs+SHGlKHUO+xu6kS5xJtPGuB2d9WjcrvI2tM
JWD0cj8yrhPwRtgtZlPHlfGCVKgz+mtSyeQC6nFm29bLJYApBNyIhuwG1xxWj3FA
vcnDYMbH1EcTgL/CwLKu427880FVGJesLiAXu9um321+SI0kdNlF0B1U3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3RxaqlgcgLhfvM8eaMLX/ucXMiMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoLX+wVK
o0xZkZEpq3vi20JYf+hNcHcVygAGMYhn83fYovAE8a8fVnumyxQI+j+qFrwb9mKq
PZnMF2D6iaP3XeA990HsYscr7GzoGjiOnR8q1rPU/8YHMkuVUPhTO0hXh5Gl8kX4
t6SxypTVKqJWe9rLXnyvJMtrx9RUnZsYyxVnzpnnBuWSJYmL+YVhanIPT11NdPvX
rsCVp9LnjR9BNmqW3NKSTEEmiQUyyHM0dgd55QL7WBzQt0nOfJISa7tbwqYD7MZO
XTViDh7WCsXw5caSYMrLTxLFu+zoMIiRewhydnvmMFlwug2mu9/EGpTTxGM6VoB8
Sd1PFPATutaUTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:42 2025 by rpki-client