Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: exNsmmkiq0ui5SuhN9vJsXE/HnRIf52Nq1IO51Vdc8Y=
Subject key identifier: 72:0D:56:57:31:5C:43:64:B6:3A:9E:3B:64:8C:8F:AB:85:24:35:C3
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 019935A50E2FCE05730FB4B09AA54D436CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 089C
Signing time: Wed 10 Sep 2025 22:00:33 +0000
Manifest this update: Wed 10 Sep 2025 22:00:33 +0000
Manifest next update: Thu 11 Sep 2025 22:00:33 +0000
Files and hashes: 1: 5n6-nw8FoTNYcZ9aENZQUU_ruI0.roa (hash: g9NrBLOfxYZz72cswyRQrtWjdRUQegpck7SaMHmrvjs=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: 5WltwqphTDx/Vn6syI3jT0GsKFOTyAeZEoBtK3qBkDs=)
3: O4fx24MkcOun7eOMuF45FXz1Rp4.roa (hash: Oql3zSLN2xRRYzfupmVInGA+80An5sqYygQF4rxwNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:0e:2f:ce:05:73:0f:b4:b0:9a:a5:4d:43:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Sep 10 22:00:33 2025 GMT
Not After : Sep 11 22:00:33 2025 GMT
Subject: CN=720d5657315c4364b63a9e3b648c8fab852435c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:90:0c:20:75:42:39:cf:55:a0:2b:8b:16:
9e:78:e3:f1:30:66:d6:a2:11:7e:1a:3b:3e:83:66:
df:58:2d:90:0e:0b:b8:0a:51:38:91:5a:d8:b2:b7:
e4:25:17:95:d8:35:fc:33:55:74:90:23:d8:fc:74:
19:6f:4c:6b:e9:ee:53:a6:e9:16:e2:53:05:eb:c0:
23:31:85:81:0c:03:95:a6:76:db:c7:ef:8a:b7:a6:
ab:94:8f:e6:79:38:e5:4e:80:ff:e3:5d:cf:2d:ec:
d7:e6:07:d2:05:4d:1c:20:bf:0b:07:14:c9:9d:37:
42:bc:2d:9d:0b:3d:1a:b1:3e:e2:1a:89:57:0e:74:
7a:8a:f5:c1:f4:b1:ec:bc:f9:cf:0d:26:ea:fc:3b:
4f:42:0c:1b:3f:94:c0:43:24:27:3a:46:35:18:ac:
02:e9:d5:5a:99:fa:e3:24:05:42:8b:dd:a4:35:4d:
d0:8c:3a:a1:ce:d4:3a:a7:a6:ac:e1:76:54:89:dc:
47:7e:71:18:49:55:d8:44:e8:eb:bd:a6:20:49:97:
35:0d:20:e6:22:1c:ed:d4:eb:8f:81:75:d1:8c:a9:
be:5f:be:11:92:70:29:df:33:77:5e:8a:b7:0a:b7:
66:2c:bc:a9:91:43:98:8a:bd:d2:f9:ae:df:94:76:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:56:57:31:5C:43:64:B6:3A:9E:3B:64:8C:8F:AB:85:24:35:C3
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c1:5a:77:02:e5:96:ea:bf:7f:0c:e7:f3:2a:63:8f:ef:bc:
64:1b:7b:e1:ed:a3:88:90:e8:15:d8:4f:16:d2:0b:61:a9:2a:
dc:3d:60:41:40:b3:f8:98:c3:df:b2:f2:ad:6f:b8:c9:cb:76:
03:e8:87:fa:e2:17:62:af:02:ed:f4:a5:c7:bc:27:ba:55:68:
92:85:81:31:ff:6e:00:f7:7b:d7:04:43:00:49:36:d5:53:9a:
66:f6:48:36:f6:1f:38:dc:b7:45:15:10:05:50:b7:dc:7e:85:
09:23:5a:d5:60:68:02:e4:ef:03:cb:fa:da:86:85:c9:e9:8e:
d5:21:1c:17:ed:74:27:c6:88:e8:e4:6c:c3:7d:4e:3b:37:90:
14:35:27:aa:e9:68:73:ee:71:c6:29:1a:04:60:85:97:c4:77:
89:00:a8:b7:53:f2:21:e8:07:87:70:36:b9:db:9b:e8:ac:5f:
ae:38:2c:51:47:50:15:3b:ef:22:ca:22:38:97:72:86:6c:58:
a7:c9:3c:86:41:bb:aa:96:62:07:09:dc:e6:10:67:37:70:78:
58:12:54:2a:b8:3b:b6:d8:9e:59:98:ca:3b:21:00:82:e9:8f:
eb:5c:67:fa:eb:e8:0b:39:1f:1d:82:71:3c:94:e3:2e:6f:46:
79:16:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:44:16 2025 by rpki-client