Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: ZRfQraeQcC9KsahyymAbOlqyHgqQOToPj43Qr2U1Qnc=
Subject key identifier: 40:F0:E1:10:FA:34:B8:3D:3D:52:3E:1E:28:C2:7B:3F:6D:D0:F5:24
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 0197B5C4BB15F773DC331A0DFAB2C9FFD5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:00:58 +0000
Manifest this update: Sat 28 Jun 2025 09:00:58 +0000
Manifest next update: Sun 29 Jun 2025 09:00:58 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: ikLBD6viSjI41eW3NtHmoY/LOH9aF9GFuv17OvrbzCE=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:bb:15:f7:73:dc:33:1a:0d:fa:b2:c9:ff:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Jun 28 09:00:58 2025 GMT
Not After : Jun 29 09:00:58 2025 GMT
Subject: CN=40f0e110fa34b83d3d523e1e28c27b3f6dd0f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:a8:95:f3:03:03:eb:78:51:50:72:48:56:
47:3d:40:1a:4a:14:d0:d4:87:08:db:f3:d8:03:b8:
5c:e1:4c:28:cf:24:c7:d2:99:bc:08:c1:9e:80:f9:
66:0e:6d:4e:ff:b0:18:74:28:06:05:28:55:7e:0f:
45:28:d3:78:05:6c:23:76:72:f8:f1:65:55:68:e2:
fd:c2:52:6e:a1:06:c2:f6:b7:c2:00:f4:e9:7d:59:
d7:5e:d7:ce:ef:ef:65:d3:8f:03:b1:50:92:4c:89:
d4:5c:15:de:56:65:19:d2:52:47:23:83:db:26:1e:
d0:75:da:8e:e0:0c:99:8b:6b:26:f6:f2:2a:48:75:
86:7a:65:ce:f8:a4:29:93:32:77:43:fa:15:46:5d:
11:e8:be:bc:8b:8a:4b:32:a5:85:cc:98:ce:8c:a2:
ad:6b:81:86:5d:7a:d1:b5:98:34:c6:22:64:de:e7:
a1:ad:db:4d:3e:f8:32:08:16:89:25:03:55:ed:97:
22:ea:2e:91:8d:52:52:83:63:09:c1:61:d6:84:be:
bd:d6:82:28:6c:86:5b:24:f3:dc:b0:49:f0:30:f8:
3d:ba:ea:08:2b:3e:92:11:f3:f5:f7:34:65:d5:9c:
5f:4f:65:24:97:8b:19:51:e8:11:d9:61:77:64:26:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:E1:10:FA:34:B8:3D:3D:52:3E:1E:28:C2:7B:3F:6D:D0:F5:24
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:d8:dd:e7:04:1d:69:58:51:d1:48:c9:7d:f6:2a:a1:43:
a2:16:d6:29:0a:99:7d:f2:ff:3e:26:b7:0f:d3:25:32:82:f5:
9b:53:47:91:60:3d:a4:25:77:5c:62:c4:0f:20:f2:25:9a:73:
4d:01:1b:35:cf:31:3e:10:bd:86:22:3d:0b:44:ad:24:06:8c:
db:f1:1b:87:54:9c:38:b8:61:40:2c:c7:d8:5e:88:fa:e6:c8:
04:97:4b:f8:65:d8:ae:bf:d3:ba:57:97:21:8f:09:2c:7c:11:
ca:95:3f:38:ca:12:24:fa:7c:39:9f:64:66:af:f6:87:d2:fb:
28:2c:6f:3a:13:c0:8b:e6:ff:cb:da:d1:d4:61:b8:20:bc:43:
3d:91:d1:ac:02:5c:81:e3:9c:83:1e:56:42:d5:25:0a:5c:cf:
d3:74:84:19:32:e1:d1:98:29:51:53:72:b0:95:3a:a9:3f:77:
d8:85:7c:a1:ea:42:6e:8b:1c:fa:ef:c8:25:ce:5f:d1:bd:e0:
c5:ab:c1:8e:6e:26:97:5f:71:bc:a7:44:53:db:91:fc:33:59:
42:be:47:18:f2:da:e1:de:2e:26:50:ae:47:36:7d:f1:e6:89:
35:14:db:9e:bf:e1:60:22:52:2e:18:42:fe:86:2f:f6:f6:d0:
f7:5e:05:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xLsV93PcMxoN+rLJ/9XuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi
MjE2MWEwHhcNMjUwNjI4MDkwMDU4WhcNMjUwNjI5MDkwMDU4WjAzMTEwLwYDVQQD
Eyg0MGYwZTExMGZhMzRiODNkM2Q1MjNlMWUyOGMyN2IzZjZkZDBmNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/aolfMDA+t4UVBySFZHPUAaShTQ
1IcI2/PYA7hc4UwozyTH0pm8CMGegPlmDm1O/7AYdCgGBShVfg9FKNN4BWwjdnL4
8WVVaOL9wlJuoQbC9rfCAPTpfVnXXtfO7+9l048DsVCSTInUXBXeVmUZ0lJHI4Pb
Jh7QddqO4AyZi2sm9vIqSHWGemXO+KQpkzJ3Q/oVRl0R6L68i4pLMqWFzJjOjKKt
a4GGXXrRtZg0xiJk3uehrdtNPvgyCBaJJQNV7Zci6i6RjVJSg2MJwWHWhL691oIo
bIZbJPPcsEnwMPg9uuoIKz6SEfP19zRl1ZxfT2Ukl4sZUegR2WF3ZCY28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDw4RD6NLg9PVI+HijCez9t0PUkMB8GA1UdIwQY
MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt
ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0
LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdfY3ecE
HWlYUdFIyX32KqFDohbWKQqZffL/Pia3D9MlMoL1m1NHkWA9pCV3XGLEDyDyJZpz
TQEbNc8xPhC9hiI9C0StJAaM2/Ebh1ScOLhhQCzH2F6I+ubIBJdL+GXYrr/TuleX
IY8JLHwRypU/OMoSJPp8OZ9kZq/2h9L7KCxvOhPAi+b/y9rR1GG4ILxDPZHRrAJc
geOcgx5WQtUlClzP03SEGTLh0ZgpUVNysJU6qT932IV8oepCbosc+u/IJc5f0b3g
xavBjm4ml19xvKdEU9uR/DNZQr5HGPLa4d4uJlCuRzZ98eaJNRTbnr/hYCJSLhhC
/oYv9vbQ914FTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:01 2025 by rpki-client