Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: S5KZfgpGIylFI1zqDNT+akuDkE40kNmbQ5H+M0WEi+w=
Subject key identifier: 13:B9:E9:22:BE:F4:C6:27:13:D4:9B:25:C2:40:E1:D6:B7:6F:FA:9B
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019A2D44023A9D3777AA962352B0D4CF6EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 00:00:22 +0000
Manifest this update: Wed 29 Oct 2025 00:00:22 +0000
Manifest next update: Thu 30 Oct 2025 00:00:22 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: qeR6dJzJiQTtqZ1elFSu1Okd2vjq75ue4yhC8yS4IwY=)
2: y_bNAAFyln0l2OAbHxvZF5RByIA.roa (hash: V4mHpVmDU1it/2lH0Vz4ctCIXcFfTQBDa792VzELUIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:02:3a:9d:37:77:aa:96:23:52:b0:d4:cf:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Oct 29 00:00:22 2025 GMT
Not After : Oct 30 00:00:22 2025 GMT
Subject: CN=13b9e922bef4c62713d49b25c240e1d6b76ffa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e7:10:ed:12:77:bd:bd:14:1d:56:2f:63:ae:
e8:bf:03:fc:e8:61:85:56:c8:2d:9c:48:73:88:fe:
0e:be:2b:ce:08:64:8f:94:7c:b1:9c:40:72:fb:da:
81:25:74:04:cb:29:08:7c:d5:ba:25:29:e2:1b:9a:
93:8c:b0:f4:d1:fa:70:32:73:a9:6b:3c:58:dc:31:
90:6a:ef:d3:73:c7:a7:5f:44:2c:f1:a0:83:a7:bc:
f6:95:db:95:69:3d:e6:36:6e:bd:fc:d4:bc:e4:a4:
35:c5:b7:af:16:31:7d:e8:df:2f:25:17:63:57:e2:
83:32:d6:db:be:87:a8:f2:5e:0f:80:69:35:ce:57:
70:4b:47:ad:49:35:2e:27:fe:60:a1:06:66:0b:53:
80:c2:2b:ba:dc:7a:6c:10:f3:95:67:cc:13:47:06:
bd:ed:a7:ad:03:86:3f:ea:5b:ba:dc:40:bb:b6:e8:
ba:a9:ac:b0:7f:16:f5:cf:7b:6f:92:81:5b:07:8c:
25:ef:e1:9f:36:e0:ff:a0:5d:fc:4d:ed:69:b9:b8:
a8:ee:9a:6d:fd:89:af:bd:e8:4d:ef:b4:af:a4:46:
e2:e3:37:5e:2e:38:e6:8b:3d:74:30:72:8c:8b:e0:
44:c6:a2:7d:38:b9:18:5c:54:d1:4b:58:ce:66:68:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:E9:22:BE:F4:C6:27:13:D4:9B:25:C2:40:E1:D6:B7:6F:FA:9B
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:2a:f6:7d:ca:48:ef:96:15:57:f7:a5:b0:ae:75:a5:8b:
17:16:b7:78:ff:d1:54:6d:57:36:00:e7:a5:9d:38:11:8c:3a:
ae:16:8d:ee:9a:7f:f4:9c:72:d5:2a:fd:42:02:3f:51:f1:4c:
d7:25:21:b6:14:c0:e2:51:5b:f2:ba:46:39:dc:47:50:18:85:
20:92:41:94:ff:3a:e7:65:ea:cd:18:a7:63:e3:85:8a:11:ae:
90:39:0f:be:9c:dc:8e:66:72:c7:cd:45:4b:7e:ce:35:59:3d:
db:9a:47:35:bd:05:85:f2:62:b8:41:28:6e:71:14:da:d1:68:
75:4c:92:e3:f7:de:3e:f7:32:a3:ef:ff:e9:b3:b9:52:68:ec:
34:26:a4:53:d0:0a:5d:bb:57:b4:db:1b:45:87:a7:8f:27:7e:
33:48:8b:b7:83:f3:cf:7b:d3:e3:8d:1c:f0:55:e4:78:8e:bd:
b2:73:d3:b5:61:be:10:91:d2:8c:ec:ec:87:28:d1:76:05:0d:
18:c9:e6:a3:1c:5e:49:ed:a0:c8:04:c7:06:15:a7:86:86:79:
1c:f8:2a:27:33:2f:a5:8f:2c:b4:70:79:ee:06:ac:aa:61:af:
a0:b7:70:c3:1e:48:77:58:39:83:4c:62:65:c9:db:db:17:84:
5c:5f:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:25:12 2025 by rpki-client