Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: VNaAANuIF2sLkumjRY2LcshRMlvAw5lwR79KYyePnnE=
Subject key identifier: 1D:B0:D0:C4:49:55:C5:5F:29:C0:32:87:7E:D6:B3:B9:7F:79:50:97
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 0197C94B962C61F7C6C04EDF4DA102FA9312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 34
Signing time: Wed 02 Jul 2025 04:01:03 +0000
Manifest this update: Wed 02 Jul 2025 04:01:03 +0000
Manifest next update: Thu 03 Jul 2025 04:01:03 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: aV76G1vWtJjBJIe+fAKRII9a/a8VEz8T6wlCprv98bA=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:96:2c:61:f7:c6:c0:4e:df:4d:a1:02:fa:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Jul 2 04:01:03 2025 GMT
Not After : Jul 3 04:01:03 2025 GMT
Subject: CN=1db0d0c44955c55f29c032877ed6b3b97f795097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:d0:23:26:89:5a:56:0d:0c:e7:c9:55:ba:
15:c8:d5:91:2c:28:e0:cc:d2:92:14:99:4f:aa:0f:
16:c2:78:5d:53:c2:12:7e:a2:2c:22:c9:3e:20:ca:
3d:6b:c2:bd:18:0e:44:bd:37:a3:81:e7:87:7f:f3:
4d:ee:41:63:da:cb:fe:a8:10:22:3e:cf:a6:b2:c8:
89:08:c1:43:ac:43:b3:d4:c0:9b:2b:2b:2e:bc:9e:
5a:55:c6:f0:08:2f:c4:56:42:80:2b:c4:29:8d:fb:
3f:17:3c:4e:e3:90:c8:0a:b3:e0:65:9b:f3:30:c7:
b0:48:ac:b9:6c:1c:ea:4c:51:91:62:2b:96:8b:22:
58:82:ed:53:7a:54:39:31:69:2a:ee:92:80:71:e6:
68:2c:00:4a:64:85:39:4c:00:95:2e:6a:1b:2c:cd:
be:91:49:55:da:67:b8:f0:c8:15:da:08:2f:85:03:
72:20:71:b0:e2:ae:42:22:87:03:4d:b8:23:9d:1d:
95:63:57:b8:c7:13:f6:9f:e1:77:3a:5e:7b:cb:d0:
b3:da:70:35:29:59:95:fc:0a:72:ab:9a:1d:e8:8e:
e2:58:07:6c:4f:17:bc:05:42:97:6a:1f:14:bc:c5:
72:58:c3:a5:c1:42:46:9b:cc:c0:03:26:a2:7f:13:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:D0:C4:49:55:C5:5F:29:C0:32:87:7E:D6:B3:B9:7F:79:50:97
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:ab:21:da:67:36:d1:75:9a:3e:52:e4:7a:2b:5b:0c:1b:
fe:ab:0b:6a:c4:04:41:a8:b5:22:76:0b:2c:57:7b:94:b0:4d:
d5:8a:25:1e:95:63:68:fc:01:d9:17:2d:ed:02:90:45:4e:24:
4a:cd:96:47:8c:f9:0b:61:4b:31:e9:0f:97:50:e8:f4:a1:17:
60:f8:96:de:67:bd:0c:34:5d:15:d2:9c:b8:3b:cd:77:fb:34:
ef:d1:b2:98:12:50:89:60:97:b2:fc:9a:9a:60:bc:7d:ba:12:
5e:4d:c7:99:9b:78:91:85:3a:19:9f:00:40:6b:e7:62:00:63:
d1:ec:f2:fa:ab:da:fa:6c:4c:48:4e:06:1a:71:c8:0b:10:32:
31:fd:d4:e3:32:56:d4:23:a3:4f:7b:62:8e:33:99:92:2c:e8:
be:f1:f9:d8:a5:ac:36:33:f3:80:39:29:0c:be:5f:39:eb:82:
c3:0a:87:b0:8c:c6:86:16:ea:ad:fd:5e:55:26:aa:b5:82:12:
b4:66:66:91:68:e1:95:3f:fe:83:ca:96:53:40:80:d1:b8:5b:
06:66:82:99:57:01:ff:99:8f:2b:a4:01:33:c7:a0:c0:1b:94:
09:ef:af:2c:9c:29:4a:0d:76:7d:c3:32:59:0f:62:4a:e2:8a:
ae:be:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:14:59 2025 by rpki-client