Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: SY6nYfnJST5I1X49wWPe4HxyIWDgb2HDE25h412ad9k=
Subject key identifier: 14:CB:EA:81:A4:E6:50:D4:52:67:A1:D9:BB:E3:48:35:D1:32:04:A6
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 0198481BC3A7A2BB3096268FDB28C0E53D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1104
Signing time: Sat 26 Jul 2025 19:00:35 +0000
Manifest this update: Sat 26 Jul 2025 19:00:35 +0000
Manifest next update: Sun 27 Jul 2025 19:00:35 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: uCqZGjqDWuqFzdZeXD7co93+g03ff8OVgtD3qOtU1Z4=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:c3:a7:a2:bb:30:96:26:8f:db:28:c0:e5:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jul 26 19:00:35 2025 GMT
Not After : Jul 27 19:00:35 2025 GMT
Subject: CN=14cbea81a4e650d45267a1d9bbe34835d13204a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:74:3f:a1:f1:81:b3:32:62:fa:1a:1a:e8:
5f:5b:66:bc:3b:23:f0:b1:c2:01:ce:5a:63:7c:41:
e7:d5:d8:b9:bc:cc:2d:b1:98:fc:35:00:f4:f4:4d:
b3:cf:c2:40:51:85:af:f9:f3:0c:90:bc:cc:ed:10:
d9:5a:a8:ef:2e:ec:aa:39:a0:96:ab:9f:05:ab:6a:
1e:3a:c1:91:4c:2f:1d:85:b8:45:73:cf:c3:60:b2:
d9:ed:fb:61:5e:49:7c:44:bd:de:8b:40:d8:be:fb:
6d:55:00:77:fe:d1:cb:2e:59:cf:f2:8e:63:7c:78:
46:3c:82:43:11:e0:4c:c7:5e:00:11:d6:6e:ae:74:
36:78:bc:b9:b5:af:67:b8:51:c4:60:2b:7b:05:19:
59:c9:b4:5f:55:ce:76:29:b5:79:3b:a4:72:f8:06:
78:b6:5d:41:95:55:4a:a5:b1:83:58:72:72:90:fe:
80:1f:65:93:78:e2:ad:80:02:24:2d:96:d4:35:db:
d1:e0:f3:73:03:ae:e8:3e:90:fe:f8:b2:a2:0a:b5:
db:ae:3d:56:58:af:94:03:6c:60:ea:8b:92:3e:b8:
af:17:76:f9:49:25:dd:cf:40:9a:55:7b:fc:7a:0d:
54:f0:c2:af:70:55:0b:24:64:6d:c6:fd:5b:57:38:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:EA:81:A4:E6:50:D4:52:67:A1:D9:BB:E3:48:35:D1:32:04:A6
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0b:2c:ca:59:2d:cd:98:cc:3b:5e:52:15:0a:59:c9:02:4c:
73:77:44:a5:93:e0:25:20:13:2b:92:8d:6b:f2:d2:aa:8b:20:
7b:d1:d1:74:73:9b:15:e1:30:97:db:44:34:c2:a9:9c:f0:5d:
10:d9:48:94:0b:ac:e8:1f:d8:93:5b:f8:bb:f5:88:49:a6:c6:
df:52:78:11:d7:7e:f4:e3:a2:28:af:ac:0b:81:5e:94:84:c6:
fd:0f:f5:ae:d0:e4:2e:60:bf:4e:92:56:4f:d0:8f:8e:a9:da:
df:8b:01:ad:4f:45:db:18:d6:66:db:24:45:da:f0:4e:05:7f:
21:44:ee:2c:be:36:9c:c7:bc:ed:25:a8:89:1c:9f:a2:ef:8a:
24:49:0e:e0:18:29:5c:f4:17:39:0a:cc:ef:64:40:0c:a7:f8:
1c:39:da:34:17:88:21:d2:af:f0:84:41:03:07:d4:6a:8d:59:
10:b4:d4:75:46:f4:99:fa:04:14:92:19:14:1d:5e:13:f8:f4:
b2:1e:57:71:07:5c:01:2e:7a:6d:b1:ae:1c:09:f9:f2:0a:82:
cd:54:4d:ab:0b:83:2b:18:fd:5e:85:44:ac:e2:5d:86:57:9f:
59:68:75:17:c2:fe:e7:d3:2d:ba:c0:03:3a:d5:61:a9:91:40:
a3:3b:be:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG8OnorswliaP2yjA5T1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjUwNzI2MTkwMDM1WhcNMjUwNzI3MTkwMDM1WjAzMTEwLwYDVQQD
EygxNGNiZWE4MWE0ZTY1MGQ0NTI2N2ExZDliYmUzNDgzNWQxMzIwNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2710P6HxgbMyYvoaGuhfW2a8OyPw
scIBzlpjfEHn1di5vMwtsZj8NQD09E2zz8JAUYWv+fMMkLzM7RDZWqjvLuyqOaCW
q58Fq2oeOsGRTC8dhbhFc8/DYLLZ7fthXkl8RL3ei0DYvvttVQB3/tHLLlnP8o5j
fHhGPIJDEeBMx14AEdZurnQ2eLy5ta9nuFHEYCt7BRlZybRfVc52KbV5O6Ry+AZ4
tl1BlVVKpbGDWHJykP6AH2WTeOKtgAIkLZbUNdvR4PNzA67oPpD++LKiCrXbrj1W
WK+UA2xg6ouSPrivF3b5SSXdz0CaVXv8eg1U8MKvcFULJGRtxv1bVziKTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTL6oGk5lDUUmeh2bvjSDXRMgSmMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgssylkt
zZjMO15SFQpZyQJMc3dEpZPgJSATK5KNa/LSqosge9HRdHObFeEwl9tENMKpnPBd
ENlIlAus6B/Yk1v4u/WISabG31J4Edd+9OOiKK+sC4FelITG/Q/1rtDkLmC/TpJW
T9CPjqna34sBrU9F2xjWZtskRdrwTgV/IUTuLL42nMe87SWoiRyfou+KJEkO4Bgp
XPQXOQrM72RADKf4HDnaNBeIIdKv8IRBAwfUao1ZELTUdUb0mfoEFJIZFB1eE/j0
sh5XcQdcAS56bbGuHAn58gqCzVRNqwuDKxj9XoVErOJdhlefWWh1F8L+59MtusAD
OtVhqZFAozu+TA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:38 2025 by rpki-client