Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: 0+mAUcFyq6HoOPEvUrZBY8H+XHO6IUCOItDWJajoMLI=
Subject key identifier: FC:30:81:33:45:C8:5A:4A:E7:4C:BD:DF:C3:C3:E6:FC:76:31:5C:7D
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 0199FD3406317CABAE2CD095687775903F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 0158
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: eKdBtc+9bLSGkSAAFcC4DJYn28tzseL53jTkcQceLkc=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:06:31:7c:ab:ae:2c:d0:95:68:77:75:90:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=fc30813345c85a4ae74cbddfc3c3e6fc76315c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:65:e6:39:0d:bc:b8:7b:12:40:d7:cc:5d:
67:33:47:5f:c1:c3:97:f5:ba:90:09:08:a1:d8:ba:
7d:98:f0:5a:7a:ea:a9:62:9d:8f:09:13:e2:89:71:
31:e2:fb:08:cf:81:49:70:7a:fc:47:2c:70:50:e5:
1e:dd:db:2c:e9:d0:dc:69:a1:36:dd:48:82:7b:49:
13:01:cf:11:f5:4f:a4:52:1e:f8:0a:2b:67:31:6c:
83:99:e8:2c:74:58:d9:61:f1:d3:53:f0:e7:d4:c6:
80:12:93:08:1f:b7:6d:27:d4:ee:d3:09:09:09:f3:
b1:bd:e8:1a:a1:d7:a4:e0:b5:05:9e:2e:6c:0f:ae:
f1:33:28:98:55:43:56:d5:8f:fa:85:dc:37:97:56:
fb:5f:0a:79:f4:aa:fb:24:0a:19:a0:8e:be:84:85:
b0:50:6c:2a:87:98:43:cb:db:b8:5b:f7:f2:89:ff:
7a:e7:01:da:31:aa:0d:4d:3b:2d:f2:f9:5a:9d:38:
e6:51:03:6c:89:76:cc:5a:9c:f0:df:25:e4:86:40:
43:1b:9f:e9:27:a3:c7:ee:1a:23:60:2a:33:ff:d6:
a2:a2:bf:d4:9e:7b:3b:b2:e1:15:74:5a:af:c5:e5:
3b:cd:09:ed:e7:4b:80:c0:30:07:4c:fa:09:98:b6:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:81:33:45:C8:5A:4A:E7:4C:BD:DF:C3:C3:E6:FC:76:31:5C:7D
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:c9:b4:ae:2b:9d:c9:37:97:ce:b6:75:57:e6:5b:6d:ba:
1f:67:6b:b4:5f:da:ad:fd:f1:e1:ae:f1:ac:51:a7:74:96:3e:
3b:b5:d4:e5:13:ec:de:8e:73:51:cb:14:a6:3c:b1:51:c3:c4:
d3:c8:6b:3c:8d:e3:a9:41:d7:2b:e4:c4:ff:30:95:dc:4e:9a:
d0:bd:37:c7:4e:0b:ae:1b:68:ac:94:7f:5c:89:71:1c:94:27:
3e:7c:eb:72:4e:3e:e9:ef:5e:4c:1f:cb:cc:7e:14:b3:17:5f:
24:57:ac:43:db:ad:72:d6:8e:83:17:57:71:b1:7f:a2:47:43:
d9:29:c9:30:e0:1a:24:95:85:21:47:47:a8:ab:66:5e:1b:21:
58:d6:53:00:f8:de:ff:72:b2:79:f9:d2:9a:1a:40:1a:5f:5c:
74:7e:07:3f:b8:0b:e6:86:8c:4a:f5:4f:81:55:8b:52:7e:b4:
f6:29:37:02:36:ab:a5:7d:56:a7:74:aa:d2:95:c1:8a:6a:1e:
5a:a8:f4:b5:88:0d:28:48:12:aa:db:17:5d:4c:8b:28:7d:32:
e1:71:a6:fb:45:dc:1d:64:ba:53:97:89:cd:b7:17:55:8f:fb:
4d:b5:bf:23:39:d8:7a:ed:6f:f4:a2:35:f0:62:b4:65:5d:07:
f3:e8:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:04 2025 by rpki-client