Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: 4vvDL6kaWq7BMHwN83nh5RcewY6zsAwJ0A4dhVn+anA=
Subject key identifier: D0:C8:7D:46:00:A0:13:C9:FC:2A:3F:FF:06:9F:6F:21:31:12:D8:3B
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019A251D100CA80E923BA4C4E0361F50916B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 11FB
Signing time: Mon 27 Oct 2025 10:00:52 +0000
Manifest this update: Mon 27 Oct 2025 10:00:52 +0000
Manifest next update: Tue 28 Oct 2025 10:00:52 +0000
Files and hashes: 1: AiN7Ez2w_b0YE1rusXobhUE3Svs.roa (hash: ZSIj8QVrkX7C1hvAMfX1/++sMORTKY7694MSitrCN1I=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: WaiN09S+8kQuLJy1WvNRo6hGUDDMLBluGAmjn3ukMt4=)
3: YA4coPbjcwqSnvPjF4zJfKILsGk.roa (hash: k8y/R8lkcGetmx+8pflXY4l14HDBBXn9CJweDPgs5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1d:10:0c:a8:0e:92:3b:a4:c4:e0:36:1f:50:91:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Oct 27 10:00:52 2025 GMT
Not After : Oct 28 10:00:52 2025 GMT
Subject: CN=d0c87d4600a013c9fc2a3fff069f6f213112d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:a4:d1:e0:b3:24:34:b0:82:8e:ac:0b:3e:
71:33:d6:d1:f9:b9:82:06:3c:61:22:a6:9f:02:d7:
ef:55:64:cf:02:67:ca:80:68:1c:81:84:ca:06:86:
9e:0a:df:87:04:69:76:62:a5:08:38:a7:59:fb:b8:
d9:9b:ee:a8:13:f1:ac:0a:fe:61:8c:63:5b:d5:42:
74:9d:30:7e:17:de:76:ad:be:21:1e:3b:99:9f:5b:
87:ed:3d:25:01:5c:9e:69:e1:79:66:b8:9f:68:bb:
5f:3f:f3:2a:a2:8c:d2:ed:47:52:53:4c:0c:6d:ca:
c4:66:c2:e7:be:3b:d4:3e:ae:07:81:a0:4c:90:88:
ab:52:42:eb:02:c7:fd:8b:4e:53:15:42:7e:c3:19:
06:06:37:ff:c9:cf:0b:99:e4:7d:70:87:e2:cb:ed:
58:5a:54:1f:51:56:a2:4b:1c:a9:ea:6c:57:9a:1d:
ab:f4:55:b7:cd:7b:8f:59:26:33:9e:c2:9a:fd:e3:
47:ec:67:c7:58:c5:d2:fc:af:fb:68:c2:97:9a:0c:
99:3a:17:a7:23:4f:16:75:c4:a9:65:6e:d4:e2:58:
d9:8f:4b:ba:9e:59:da:94:51:bc:69:8f:78:1d:41:
e1:20:3d:c6:fd:a5:8a:a6:db:c8:2a:da:33:38:da:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:7D:46:00:A0:13:C9:FC:2A:3F:FF:06:9F:6F:21:31:12:D8:3B
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:77:fb:f2:bc:16:dc:48:11:dd:87:cd:3e:f7:f7:6f:5c:
38:8e:79:e3:09:e9:10:d5:31:49:94:54:14:1b:e7:64:82:9f:
97:30:9a:3e:a8:74:2f:6a:6f:79:69:77:97:2a:09:80:af:62:
fd:17:24:eb:27:e2:9e:10:2b:da:30:84:ea:5a:3b:05:d7:fd:
8b:69:3e:81:e3:b3:85:37:5c:3f:27:bb:ff:74:20:66:48:68:
1d:05:cc:f9:48:03:00:d9:32:ac:27:3c:6e:b3:04:0c:00:25:
9d:77:63:d0:38:c1:2a:27:46:c8:d0:0b:d5:99:88:55:58:4d:
b5:4b:90:03:bf:59:18:b9:b3:e8:1b:df:2a:d9:54:5d:f6:87:
bd:59:3c:78:01:5a:0e:32:00:a1:c3:4b:31:36:c5:a1:27:5d:
7f:36:d3:7a:e6:35:5b:7c:3a:6b:0d:fd:ae:45:e9:f4:55:ea:
fb:30:aa:9d:55:c3:a2:38:ca:c9:4d:dd:00:bf:67:42:bd:20:
95:97:08:22:26:23:2b:39:34:f6:ca:d0:c6:62:2d:c5:eb:2f:
e8:28:85:54:6d:a6:c8:f4:6f:b1:5b:21:9d:c2:42:bd:fc:44:
13:9f:d7:91:6a:82:fe:e1:8f:8d:ae:2a:72:6d:44:b0:1b:84:
7f:13:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:18 2025 by rpki-client