Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: ynhgLc67ZKhqdgRxMjlWoKy/Jp/RGKq4V76Ua0s7E3c=
Subject key identifier: 3B:FD:A8:2B:CD:96:86:A6:43:4D:FA:88:2D:05:26:C6:81:6A:4A:54
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0197C6B85F5767BFFCA206213B8A68F0F158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 10C1
Signing time: Tue 01 Jul 2025 16:01:01 +0000
Manifest this update: Tue 01 Jul 2025 16:01:01 +0000
Manifest next update: Wed 02 Jul 2025 16:01:01 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: F6FAOwTnC5AOJ+9ujPLVehvSMIlUNi4oS50QFBa+L74=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:5f:57:67:bf:fc:a2:06:21:3b:8a:68:f0:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jul 1 16:01:01 2025 GMT
Not After : Jul 2 16:01:01 2025 GMT
Subject: CN=3bfda82bcd9686a6434dfa882d0526c6816a4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:ed:22:b7:72:37:d7:28:91:5d:e4:96:ef:
8e:14:47:2c:2a:2e:1c:c7:d5:39:2c:ee:14:7a:3a:
aa:75:1d:4a:2b:5d:e0:53:e1:98:b2:e7:99:54:4d:
fe:e2:40:02:e7:d5:bb:fb:cb:68:38:be:46:a8:a2:
9a:fa:b6:04:95:24:65:94:54:2d:e0:2b:6e:da:95:
c1:93:c0:a9:ed:da:43:db:fd:e0:cb:bf:07:31:40:
ec:fd:3f:05:45:a4:b0:92:d2:af:be:fe:38:ac:f0:
f5:23:4e:1d:60:ed:00:19:b8:6e:b9:a7:76:65:57:
d0:25:b0:51:98:9b:9b:94:40:9e:f8:94:b9:8e:60:
75:8a:71:8d:bb:3c:af:83:1d:c6:2e:9c:ac:9c:0b:
21:05:33:b6:52:2b:3a:b4:de:19:70:7b:6a:a7:c1:
02:a9:9e:f8:00:7d:05:ee:66:fc:d0:65:ba:cd:4d:
d4:b9:f9:57:35:66:b3:79:cc:92:85:03:51:a3:e0:
6b:39:c0:d5:c1:ed:e0:6b:d7:c3:0a:43:9d:ee:93:
99:eb:0c:52:38:46:c5:8a:c4:da:8f:47:e5:7f:84:
36:92:52:a9:ec:ee:3b:f6:51:b5:be:3e:14:96:ca:
2a:7b:56:b9:0d:53:8f:d7:20:65:56:b7:a7:03:cf:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:A8:2B:CD:96:86:A6:43:4D:FA:88:2D:05:26:C6:81:6A:4A:54
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ee:33:69:e1:3d:2b:17:e1:cc:38:ba:0e:0e:2a:4e:fb:00:
d6:7b:4e:dc:a6:eb:47:14:23:89:03:82:e0:b5:d2:de:f0:50:
11:36:4d:82:e5:8c:86:30:c5:74:53:86:8c:2a:7c:e6:71:38:
77:33:02:c2:86:54:58:e9:25:f4:2c:2f:af:24:52:50:98:1f:
19:b1:fa:50:f3:15:44:73:6d:3c:7e:18:6d:ac:05:4c:47:82:
13:48:e0:e5:39:34:19:7c:d1:16:7d:92:74:cc:4b:57:92:18:
7c:51:01:a2:8e:85:db:b2:28:98:fa:8f:b9:42:b5:ec:9b:b6:
fa:12:be:79:9f:fa:d4:53:e4:9e:0a:d1:51:05:0e:64:ac:db:
d8:3b:23:35:81:64:4a:fa:72:a7:42:9c:c6:13:7f:03:44:31:
fc:53:7a:75:e4:0a:98:bd:2d:c4:7f:5d:6c:a7:37:64:11:b1:
91:59:e5:d2:3c:f4:0f:a7:67:5f:fa:65:9c:63:50:38:cb:cc:
fe:d9:bf:d3:13:b9:f9:50:63:77:0d:37:8d:99:52:2e:00:7b:
91:a3:d9:fc:72:9c:6b:a7:21:2a:05:3a:c2:b8:39:e1:68:7d:
eb:20:7b:51:26:af:87:69:ba:32:85:f4:40:c0:d9:13:ec:48:
78:bb:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:31:20 2025 by rpki-client