Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: XRJtVqkdd/lj7NZE2b2IcyDO1xs3bK3deVahUBsztWY=
Subject key identifier: 28:41:31:FE:F7:C2:E3:C6:C7:53:93:D5:6D:97:BE:8B:3B:0C:72:20
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0198D515D7D1528ED59193BC0152A25D5656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 114D
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: 2K0msWDJNbeVzRAlvNYZiR9xs9JdsTJLihR+XhAFehU=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d7:d1:52:8e:d5:91:93:bc:01:52:a2:5d:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=284131fef7c2e3c6c75393d56d97be8b3b0c7220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:a8:13:cd:b5:ee:63:79:46:55:b5:a4:31:
47:01:68:83:3e:43:a6:71:74:15:4b:6e:78:c0:6a:
dd:bb:a5:ba:b9:0c:8f:60:4b:18:f0:61:25:e0:ed:
7a:ec:ad:86:5d:68:7b:73:60:3f:82:3d:a2:7f:29:
93:71:df:f1:c5:f7:28:f1:8b:af:0a:d9:43:9c:8a:
0e:63:4b:bf:54:8c:21:c2:a5:2e:02:c2:dc:b3:f1:
10:3d:6c:51:62:46:64:54:f9:99:75:6e:33:c5:28:
1b:92:7a:1c:01:6d:f4:2f:87:ed:67:ec:78:ac:e1:
42:03:f4:8e:6b:75:5b:e7:48:51:56:4c:56:4d:d6:
f1:ca:0a:39:04:6c:ba:b5:07:a8:b7:4e:b8:8b:f2:
fd:79:df:e2:9b:89:b0:a6:37:fb:09:bf:08:5e:bf:
7d:6f:91:d2:bf:41:ee:7e:1f:a3:88:39:ef:90:c1:
60:35:10:c8:6e:46:9d:0f:78:09:f1:70:15:7f:d4:
68:1a:23:ad:7e:82:03:ad:da:a6:27:3d:ac:fb:2c:
be:f3:85:cb:59:67:6e:46:43:3c:7d:da:f0:bf:41:
6b:f2:b8:58:2b:4c:3d:05:15:55:e5:12:ba:15:3e:
38:0d:5f:7a:d3:67:e5:4a:53:f5:70:35:c1:c2:f8:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:31:FE:F7:C2:E3:C6:C7:53:93:D5:6D:97:BE:8B:3B:0C:72:20
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:bc:5e:8c:5d:7d:81:17:6a:23:6f:63:9b:e3:6b:f7:b3:
6e:2b:af:39:0c:0e:6a:59:6f:86:c0:1e:11:8d:38:a0:d6:4a:
e9:a1:08:5e:d4:65:d8:8a:85:86:f7:c0:b4:d9:f7:d2:55:4d:
d6:3d:c4:55:e0:46:87:12:f0:60:54:2c:98:9d:ee:65:16:a0:
57:d4:f0:eb:d9:47:db:59:5c:35:cf:c3:23:b1:ef:58:9b:57:
cf:27:9f:a5:7d:97:8d:8b:2d:93:b6:c6:37:5d:98:f0:6f:df:
3c:58:21:b2:db:67:c7:5f:6a:c9:5f:47:4a:b3:a2:46:da:95:
42:b6:44:74:ed:e2:98:fd:cb:3f:84:2a:71:c8:72:83:06:4b:
e5:16:4f:56:3e:0c:88:bb:6a:1f:25:01:70:1a:df:a4:fe:02:
ed:0e:dc:83:78:71:f3:aa:dc:4b:ee:ed:91:78:a9:5c:4f:eb:
c8:1b:48:c9:5a:c2:df:99:e3:ce:b2:b4:2f:ed:c7:93:fd:57:
39:4e:30:3a:cc:47:4e:09:40:46:a7:a7:eb:08:70:a4:ab:bf:
44:5e:05:7a:ab:d1:0a:ef:52:90:ea:27:94:39:ad:bf:30:33:
4b:99:d5:fe:4b:e3:f4:76:c5:ad:05:6f:52:77:5a:f5:79:32:
99:07:d7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:47 2025 by rpki-client