Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: rvp/l+Ndqt1zPEU5baHHOWJMUVmPi7YcomWp7KEyhgs=
Subject key identifier: AC:DD:1B:6A:E2:97:DA:77:07:12:25:16:8D:F1:92:2F:1E:8A:E2:BC
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 0199FB0F2DB94617061DACD2AAF8162D1953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: ZEcFnneZSX0/WZafbtQ6wU97AdyEq9B3QuhNR3vy8Yc=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2d:b9:46:17:06:1d:ac:d2:aa:f8:16:2d:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=acdd1b6ae297da77071225168df1922f1e8ae2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:54:22:55:15:53:4b:ef:a5:f5:fd:90:15:
a1:ca:e0:e4:f8:e2:d8:2e:e2:4b:fe:33:7e:f3:06:
c5:72:3b:ef:0c:56:61:4a:e9:c3:09:0d:ae:0f:9d:
ab:4c:27:54:ee:4e:54:0d:ef:f0:ec:d6:99:24:28:
53:39:6e:72:b9:d4:f5:9c:1a:c2:37:65:f6:96:c3:
5b:d9:ac:bf:2e:8b:5f:2c:8b:57:d1:4a:9a:d9:0b:
d7:0f:4a:1f:95:9d:0f:e9:e2:41:72:c7:d9:69:97:
70:a4:4a:54:a4:19:d1:be:a9:9b:87:6c:ba:df:a2:
88:49:fa:44:d3:76:9e:9f:17:19:9d:52:8f:94:a6:
f8:78:73:45:1f:67:30:49:f6:7b:33:0c:a7:7a:24:
95:1b:f4:29:ce:db:4c:82:d2:02:9b:f1:fe:f4:ed:
41:4b:08:17:fc:62:28:52:cc:3a:3d:61:80:a8:a8:
78:02:e5:27:4b:b9:43:57:de:99:70:10:7d:9a:e8:
15:47:7b:a5:77:98:61:0a:93:dc:46:b7:c7:24:37:
d3:64:11:82:72:ea:31:c1:f2:0f:92:3b:66:0d:bf:
d9:10:65:3b:d0:b9:37:62:2d:e3:be:bb:41:88:c8:
b3:be:e5:f5:5e:b9:cb:ff:24:84:f7:e6:35:23:db:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:1B:6A:E2:97:DA:77:07:12:25:16:8D:F1:92:2F:1E:8A:E2:BC
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8c:d2:36:65:5c:13:89:88:9b:02:b3:88:16:b8:e3:a1:27:
04:34:4a:24:3e:bd:98:86:83:f8:df:a9:7f:89:84:df:0c:50:
d5:b4:08:e1:3d:74:d7:e3:8b:91:84:6d:9f:eb:ba:ea:a1:8c:
1e:c5:70:49:be:ba:0e:45:94:d1:4e:9d:dc:25:fd:29:18:b2:
4d:48:78:66:47:70:f0:eb:ab:42:9f:e2:2c:3b:41:85:65:00:
13:7a:ca:b4:13:16:50:34:fa:8d:80:d1:34:9b:25:0d:35:8b:
88:86:12:ad:d0:19:98:ee:5a:7e:9b:80:af:28:6e:c9:2f:00:
c7:79:03:06:8e:d5:e0:19:05:51:98:63:bc:5a:80:2e:f0:53:
02:37:8c:0a:ab:18:e4:fd:9d:59:44:0b:96:c6:25:21:f6:64:
42:e3:55:cf:1d:aa:9d:6b:0e:72:69:65:35:d7:ec:21:21:e5:
41:6f:38:09:0a:62:6f:4c:df:12:f3:de:3b:8c:2f:29:34:63:
f0:52:ba:85:40:36:43:81:3a:f3:82:ae:3b:ae:17:cd:d8:16:
ac:32:e7:49:c8:76:24:49:00:4f:df:87:2a:91:41:de:0b:00:
60:d0:76:28:bf:30:74:24:6d:10:40:2d:b4:af:63:55:23:da:
18:31:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:24 2025 by rpki-client