Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: 5skqp67LbwQBiFvrQqv+2uMRFJ7tOv8+WLE5n77yvJc=
Subject key identifier: 7B:62:35:33:A1:75:6D:B6:B0:4A:E4:ED:7F:C0:9E:25:93:2A:F7:43
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 0199FC216B86E29211B359FB465AA8A6F8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: iXRz1VbOYFV4fQHdZVNaA56hB1F9R5vZbaXX0MvnFC8=)
2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6b:86:e2:92:11:b3:59:fb:46:5a:a8:a6:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=7b623533a1756db6b04ae4ed7fc09e25932af743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:45:62:ba:56:5a:f9:17:dd:9f:fd:22:5b:
95:e3:6c:89:52:ac:cf:51:99:0d:82:ec:7a:38:f4:
78:93:4d:57:2a:5e:e4:2d:e2:f7:ae:91:5c:3c:ea:
4b:8a:13:08:91:68:ec:a2:e2:e3:c9:80:f7:2d:d4:
1e:00:81:b3:01:f7:ce:fd:11:62:d4:88:07:07:89:
7c:40:05:ba:f2:a5:37:dc:38:67:6e:4f:72:ad:4b:
d6:98:e2:e6:99:01:ed:b2:25:73:72:bd:49:53:5f:
89:cd:29:1e:8c:c7:d2:ec:6c:82:73:fb:f5:2a:96:
3e:ff:c0:4e:83:fe:21:5d:98:ff:5c:ab:ca:ad:53:
8e:aa:c4:b0:6d:40:c1:a3:a4:29:37:b8:01:b0:5a:
74:e0:5b:0f:39:7b:75:8e:82:a4:c5:18:f2:4c:bf:
5d:0f:64:33:44:8a:ac:7a:b0:eb:8b:96:2c:cb:40:
57:23:78:a1:ff:02:9c:96:d0:80:31:40:c1:40:48:
e7:10:66:ac:f2:f8:8c:76:bc:6d:d1:68:6d:d6:2d:
6c:c7:f5:1e:02:f8:9c:82:11:44:49:91:01:91:a6:
1f:28:f4:4a:a7:50:c4:5b:cd:62:a3:49:48:ed:52:
7c:32:ce:46:ac:53:0a:69:a3:27:80:8c:7c:50:c4:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:35:33:A1:75:6D:B6:B0:4A:E4:ED:7F:C0:9E:25:93:2A:F7:43
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:ce:a9:f6:7e:20:24:86:10:e9:b7:24:38:d7:7e:63:2a:
86:3e:c5:84:34:fc:bf:a9:03:5e:14:a1:67:ed:c6:aa:82:c8:
25:71:a7:f7:c6:54:03:b2:3d:f4:53:74:3c:c4:51:10:6b:ce:
35:17:16:cb:8a:9e:01:f0:3b:eb:39:ef:c5:5e:c2:50:f8:a6:
82:08:d5:27:4e:85:16:93:b7:ea:a5:fb:15:c8:73:83:bc:a7:
1d:ba:bd:c3:d4:62:cf:92:ec:ce:08:2b:09:0a:b3:61:86:c1:
69:85:af:f0:bc:26:6a:e4:c9:a1:96:c5:9c:c0:50:54:39:9f:
f8:56:83:f3:72:fa:e4:48:7e:1a:a1:bc:65:41:16:8a:45:b0:
c2:6c:5d:04:1f:e7:20:30:4f:e9:15:e4:65:0f:2c:cc:da:1a:
4c:5a:6f:b8:da:2c:94:e4:27:91:91:a5:e4:d2:99:31:bc:38:
c4:40:82:46:ca:a9:38:da:c9:8b:48:38:3b:b9:67:72:ec:f6:
b7:6b:7d:84:2e:d0:16:b1:7e:4d:12:d6:be:70:cf:19:68:46:
c9:67:7c:37:11:b9:b5:c0:23:9d:6b:bf:7f:fa:bd:b2:e0:5f:
48:a0:ff:c3:0b:29:61:79:b3:09:c3:0c:a4:0d:1d:34:bf:82:
74:ef:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:10 2025 by rpki-client