Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
File: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft (raw, json)
Hash identifier: ymQCLuj7BkrJ7LFdgErpV6zxMRWwXSCvsc/4Z6fYaLA=
Subject key identifier: DC:16:C6:D9:FD:79:AC:C7:C8:E7:9C:88:3D:0C:D0:AA:76:43:17:E6
Authority key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
Certificate issuer: /CN=7668fe49ae9747257150015be43e29628c6316c4
Certificate serial: 0199FEEBA4C091F206D7F30EA097766AA39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:19 +0000
Manifest this update: Mon 20 Oct 2025 00:01:19 +0000
Manifest next update: Tue 21 Oct 2025 00:01:19 +0000
Files and hashes: 1: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl (hash: T3FiLCw3R1lv6wvduzBL9FNhnD9OYPKdAZQyivT+IAc=)
2: tTUbMusnQYjR8dloqUBDH5RJbJY.roa (hash: x4a6yPSN4IfbK/Lgl6LTelrziLDZIshNFyvd6MyXqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a4:c0:91:f2:06:d7:f3:0e:a0:97:76:6a:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7668fe49ae9747257150015be43e29628c6316c4
Validity
Not Before: Oct 20 00:01:19 2025 GMT
Not After : Oct 21 00:01:19 2025 GMT
Subject: CN=dc16c6d9fd79acc7c8e79c883d0cd0aa764317e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:79:24:17:21:3b:a8:a4:23:30:d2:14:1f:
bc:50:39:0d:43:4d:d5:22:ad:6d:8c:df:ec:62:c4:
75:40:8b:ef:79:cb:d8:1d:9e:d2:ea:dc:b3:81:4f:
79:65:75:01:10:3b:73:9c:dc:c2:1a:1a:64:58:e7:
eb:95:7c:7a:45:f2:5e:ca:26:6b:a4:b8:f1:4f:23:
66:ce:48:b1:a8:ef:b7:12:ef:89:ba:4f:bb:fa:c3:
8c:3f:d8:e8:74:18:b1:2f:ea:85:9d:e9:43:74:38:
08:bb:c8:bd:66:91:74:69:0b:98:99:fa:d2:70:43:
99:bf:45:28:f6:18:b5:80:5c:e3:26:d3:a0:31:e6:
53:bb:97:07:b5:66:c9:3f:38:07:59:37:62:f0:33:
d7:95:bb:c2:a7:9f:d0:48:da:d3:44:74:21:da:48:
71:85:05:06:1a:d4:9a:2b:ff:f1:b9:5d:a0:7a:44:
0f:90:fd:94:4d:0f:b6:d4:21:dc:7f:30:ca:82:be:
bf:da:a5:25:1e:95:9b:9c:e9:e9:14:f9:44:c2:c8:
4a:33:a8:a1:e9:ab:f8:02:04:f3:3b:b9:cd:41:a2:
e6:90:45:4d:bd:6e:f2:28:57:9c:52:76:35:f3:07:
de:13:38:5d:bc:5e:97:a8:2f:ab:f4:1c:5d:e8:20:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:C6:D9:FD:79:AC:C7:C8:E7:9C:88:3D:0C:D0:AA:76:43:17:E6
X509v3 Authority Key Identifier:
keyid:76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:eb:9e:89:45:51:ef:e8:b9:0e:12:28:32:4c:09:42:e2:
b9:29:5b:27:9c:b2:1e:c9:1b:f0:82:a0:44:32:92:73:9a:24:
79:26:78:0b:98:26:2c:41:91:e6:e2:5d:b2:1a:e0:76:db:ec:
c5:b9:1c:b8:e3:55:6a:ce:ac:eb:c2:08:39:be:44:1e:12:50:
fe:cd:c0:ae:77:22:f3:c2:72:9a:14:a5:db:ab:46:9b:ba:64:
36:5a:ec:98:b4:8d:f5:40:56:16:fc:fb:c7:0f:71:1d:9e:ea:
81:8c:db:72:b7:8b:7a:d7:5e:f7:35:5e:52:11:04:b6:4d:c9:
84:69:c4:1c:65:fb:1a:4b:98:dd:de:86:ed:19:5d:55:a4:97:
65:ee:3f:d8:b5:9d:74:ae:a3:ea:e4:05:d9:45:44:e8:9c:83:
4e:be:df:17:03:d8:93:9f:d4:42:c1:e2:45:79:4a:31:ee:19:
6b:5b:bb:12:72:ca:5c:2c:6a:52:dc:20:d0:a7:9e:cd:58:c8:
64:5d:0b:ee:e0:c2:3a:ae:b9:5b:2f:d8:a0:e6:be:9f:c5:f0:
b2:91:70:1a:af:03:89:be:7d:53:f8:76:df:a1:3a:4e:d3:8d:
eb:ed:57:91:4b:25:1f:41:84:92:15:c7:f7:0e:61:bf:93:f6:
68:8f:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:59 2025 by rpki-client