Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: NcdrWEfIIWPp0IsoaF4OTqSQP72gpai3E4SjyVLEeDc=
Subject key identifier: AD:2D:68:F1:18:07:DF:52:03:48:61:C2:A8:C6:93:DC:F5:5E:E5:DE
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 0198D7A8E3782E52C26010F8649E013E0246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: C0
Signing time: Sat 23 Aug 2025 16:00:26 +0000
Manifest this update: Sat 23 Aug 2025 16:00:26 +0000
Manifest next update: Sun 24 Aug 2025 16:00:26 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: DUwNNoeMwUzTrhcDqLO2RQk1l5eowTF8nqp61O/b2vQ=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e3:78:2e:52:c2:60:10:f8:64:9e:01:3e:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Aug 23 16:00:26 2025 GMT
Not After : Aug 24 16:00:26 2025 GMT
Subject: CN=ad2d68f11807df52034861c2a8c693dcf55ee5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:eb:90:57:00:6b:aa:c9:30:17:8c:0e:08:4e:
e7:7e:22:ce:00:2a:9d:51:f2:76:e6:83:a5:22:06:
8b:fa:ea:23:6c:57:eb:ae:77:ef:80:f4:df:d0:20:
c4:88:7f:a1:12:7e:a1:9c:60:c1:3b:4f:a1:1a:f7:
34:7d:0c:dd:e4:8f:d9:d5:08:60:68:3f:75:3c:fc:
58:f7:21:82:39:0f:49:b6:db:c5:03:0e:97:c4:f7:
e6:e7:55:7f:e0:a9:ef:13:a7:39:fa:1b:d3:e8:ea:
c4:5c:d1:99:ce:9b:10:ad:ae:46:d6:ec:dd:bd:f5:
a7:c1:43:21:47:da:f9:0c:45:87:f8:29:51:52:c4:
50:62:46:cd:d3:c7:3b:b0:e3:60:99:d9:20:a2:70:
33:19:67:5a:f4:a7:1d:34:4d:a1:78:92:f8:71:d0:
c6:8d:04:bd:c3:ff:2f:5c:7f:ce:af:16:a5:7f:6f:
35:58:9d:e1:10:ed:e0:cb:1a:a7:82:75:e2:c6:a8:
02:50:40:d8:df:00:ee:75:72:ff:cf:7b:87:20:88:
92:fe:5e:b0:31:f7:91:9f:7e:d3:26:fa:47:46:05:
7c:68:06:2b:6c:d4:d3:7a:41:51:71:00:ee:68:91:
cd:fa:ee:00:ab:ae:28:01:20:60:95:ae:56:02:44:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2D:68:F1:18:07:DF:52:03:48:61:C2:A8:C6:93:DC:F5:5E:E5:DE
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:39:05:00:84:4f:bf:a0:8c:03:53:4d:c1:24:5b:a9:d5:44:
8a:85:7e:b7:86:3b:1e:00:82:b8:7c:01:66:88:52:84:e6:97:
ab:a3:64:34:55:df:ad:ca:e7:bc:87:97:57:03:8b:d2:3b:11:
d4:b3:20:36:dc:bf:5f:c5:42:cc:4c:eb:7d:69:c7:fb:20:18:
00:8b:8d:90:79:4c:92:19:6b:55:3c:ca:e6:e0:22:c3:bd:a5:
a4:fa:03:9c:3b:2a:11:7f:81:a5:f2:a4:87:9f:50:33:86:65:
f3:ea:4e:51:c6:bd:e1:d3:56:d4:73:9e:26:e2:2c:e4:8b:01:
a8:ad:83:4e:9d:b2:b8:95:3f:7a:0e:13:a2:ae:74:a1:11:75:
c8:b9:4c:7f:f4:a0:f3:4c:cc:4f:b7:e8:d5:d9:28:20:4f:4a:
da:1a:d1:fa:c5:87:c1:fb:3d:a3:bd:bb:5b:75:73:56:c2:aa:
82:97:d4:b0:04:ef:13:27:7a:83:36:0d:77:96:44:6b:b8:3a:
6e:71:a5:72:6d:b8:4b:52:21:42:e7:2a:0e:17:c7:56:d6:15:
7f:77:ce:a6:97:1f:30:7b:e9:ce:a6:23:d8:3f:a9:76:c7:1b:
06:12:02:b6:68:c0:43:fd:40:16:21:e3:fa:81:dd:f7:8c:35:
ab:99:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:04 2025 by rpki-client