Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: EZnEQysqzMaQzi+9mOx31+ehRxrMZc5fPB5HFOeoPCs=
Subject key identifier: 2E:27:C7:1B:F9:92:F3:E5:77:51:45:E2:2A:29:1F:BB:44:23:A4:CB
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 01974931665F8AB8379742CCE96799ECE751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1080
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: U4tgYN2AWVp5FAwHeLfzVbTw9EvFVL4cmMhOdZ/9EZg=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:66:5f:8a:b8:37:97:42:cc:e9:67:99:ec:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=2e27c71bf992f3e5775145e22a291fbb4423a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:ee:d2:66:42:6d:ba:5f:c2:34:d4:01:b9:
83:50:19:ad:bd:b1:12:ff:75:71:11:71:30:03:e6:
df:8b:e7:b8:09:64:34:f9:97:a0:62:65:02:b4:e3:
1c:fc:66:d9:85:73:d1:7e:c7:cc:34:74:8a:0f:f0:
51:ad:22:66:fe:82:de:ce:61:21:00:0f:2f:f5:95:
5b:0d:f1:db:c0:90:48:21:70:73:12:e2:19:07:a2:
9a:0a:60:50:16:2e:8d:f3:cd:76:71:61:d0:9b:1d:
34:de:92:0e:fa:c2:e9:ff:30:cc:42:c1:da:8f:47:
9b:ad:13:36:95:de:06:55:20:00:6a:09:cc:67:d7:
cb:da:aa:ff:de:c5:24:57:8e:ac:0f:30:8e:cd:74:
f0:9c:eb:73:cc:c4:64:72:39:46:a5:40:be:8a:8b:
09:d9:bc:39:1b:a4:b5:d6:02:5b:2f:7c:fd:df:e8:
04:3c:51:d2:e1:f5:87:25:f1:92:ea:eb:61:2f:0e:
66:33:6c:4c:33:ce:71:f9:71:b9:f2:24:5b:6a:1b:
5a:72:08:b1:6b:93:55:58:d3:4c:70:f8:56:92:d3:
61:08:13:31:0f:e6:cb:00:7c:fc:3c:d7:63:77:71:
09:79:55:f0:0e:9a:7c:d5:0d:a0:0f:95:94:14:d3:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:27:C7:1B:F9:92:F3:E5:77:51:45:E2:2A:29:1F:BB:44:23:A4:CB
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:55:5d:43:40:d0:7a:3b:57:91:76:18:59:ff:07:b9:0d:
c8:d1:1c:5f:0c:b5:35:1b:54:bd:86:25:e2:5d:42:f9:e1:9a:
27:8a:a1:c1:1a:b7:b1:bf:33:f4:85:3a:4f:c0:e9:e7:70:f7:
f4:86:71:73:db:30:4d:14:17:29:86:8c:29:16:1a:81:47:22:
62:67:bf:92:7a:70:aa:3d:2e:da:30:c7:4f:f0:e3:1c:74:7d:
50:dd:f5:ca:21:86:f6:52:32:19:bf:25:11:ce:e2:4e:de:0a:
67:c9:ec:f8:70:d6:2f:4a:6f:4c:78:7f:ec:c9:01:da:6e:24:
22:79:3a:2d:53:a0:4f:68:6a:15:f8:22:0a:bc:97:ed:fa:c7:
81:c0:5b:6f:57:b1:af:9e:89:e8:a1:9a:35:bd:e8:d6:87:09:
a7:1e:8e:fe:0c:3d:af:b3:a2:b4:31:6c:25:0d:f6:f2:8a:0e:
6e:1e:3b:ba:2c:22:f9:8a:cc:00:2b:54:ad:df:c8:d1:9b:8b:
a3:e9:31:b9:4b:b2:79:b2:6b:d4:04:c2:1d:bd:96:eb:22:e5:
d3:1e:9c:0c:fb:3b:cb:da:cc:e6:e6:ae:03:c2:1b:5c:0f:7b:
f2:16:79:e5:2f:89:e8:e9:1f:1e:ad:ed:0e:ba:ec:9e:03:b3:
25:48:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:42:51 2025 by rpki-client