Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: Bs5VsmYPK/OaniOkEqodo8xUOFZT+hR1wZ1BGynLT6M=
Subject key identifier: 7C:01:DC:AE:D8:37:BC:08:18:DA:CD:A6:3C:90:F0:22:B0:76:E3:EE
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019922FAA98B5ABB937BCAFA04110337A1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: E7
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: 2EJYfMvmFZ1Pk3iZS0WLLmG3EwW3Qv5V/y2EcBMFu4M=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a9:8b:5a:bb:93:7b:ca:fa:04:11:03:37:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=7c01dcaed837bc0818dacda63c90f022b076e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:d7:27:95:f6:58:24:e2:f5:8f:7e:09:8c:
8f:f7:26:58:f0:1c:3e:d3:60:fc:f5:81:5c:93:d6:
83:08:13:e4:ae:b0:45:99:cc:95:ee:23:80:4d:e0:
b6:77:39:d4:8c:61:33:5a:c7:7f:e8:08:8b:2c:dd:
22:52:0a:ef:6a:dc:04:7c:3f:cf:67:f0:79:89:b4:
3d:52:74:25:ec:b3:fd:ce:5d:4d:43:5c:93:f4:0f:
a3:5b:40:27:06:2f:d6:b9:3e:7e:de:32:e9:69:57:
2e:0a:90:b5:fe:fe:81:82:a9:86:8a:1b:96:10:e1:
f2:42:69:96:54:53:ec:cf:3a:b5:1e:3f:f0:6a:a0:
ae:47:ef:16:7d:76:5b:fb:31:25:25:13:be:01:68:
da:57:ed:fc:5b:a9:a3:9b:b3:9e:e9:77:05:e9:07:
19:7d:0e:3f:f7:3c:71:8d:80:a6:d4:ef:69:2f:3a:
c8:b8:ae:95:62:84:17:ab:43:6d:9e:bd:0c:04:5f:
0d:26:60:b3:0e:1f:a1:63:69:cf:eb:b5:26:38:5b:
d1:60:2e:98:f9:d3:67:19:57:ce:52:4e:4d:e8:01:
a8:54:91:e8:93:ba:e2:e9:fe:7b:e6:c7:ed:28:a6:
61:30:aa:04:1b:2b:2a:5a:b8:76:0f:d0:bc:88:ff:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:DC:AE:D8:37:BC:08:18:DA:CD:A6:3C:90:F0:22:B0:76:E3:EE
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:39:98:e1:76:a6:ce:04:3f:4b:8c:de:9b:db:64:1c:1b:fb:
6c:e2:96:f4:40:51:e4:67:40:96:8e:56:1b:69:0c:2b:2d:21:
2b:de:1f:f9:a3:54:0b:39:62:1a:62:b0:1b:b4:2e:c4:15:96:
e6:aa:2d:46:bf:c9:ca:06:e9:ad:68:02:8b:1f:be:7a:40:64:
a2:2d:d8:73:57:46:ce:f6:a9:73:31:c0:65:f3:77:ab:48:75:
81:ef:96:ef:4c:da:d5:38:a6:6e:3c:09:8a:3e:43:dc:c9:6e:
1e:1e:51:41:42:0c:8a:2b:ba:9a:13:76:58:c5:01:38:c1:cf:
b4:e3:0d:aa:18:96:75:09:29:14:5f:a1:69:be:b9:ae:79:0b:
75:86:4e:01:d1:61:99:87:d9:32:b1:34:3c:d9:42:6f:7d:4b:
85:62:b7:92:e6:36:61:4b:46:e9:5c:8c:d3:77:19:3e:df:cd:
89:7c:d8:e3:9b:23:c2:b8:e9:64:f3:9a:56:18:aa:a2:28:bf:
0d:09:a3:b0:f3:55:bf:a9:b5:8f:e5:16:e4:f9:e4:d4:1b:9a:
35:29:7c:21:33:5a:f6:a6:38:8d:f7:2c:42:37:17:bb:7b:79:
f1:e7:ab:96:ef:4c:49:8e:dc:23:d7:9e:01:0d:9f:e0:ca:06:
7b:54:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:22 2025 by rpki-client