Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: 3Rdd74sIcPEPaViATi68FWh1CZYhdrNFpt9ASgl0crM=
Subject key identifier: 23:19:0E:04:CA:61:CC:EC:E8:B3:E1:40:02:96:AC:0D:29:A5:9F:01
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 019A714A1212D908E1E60A1BE162B4F72499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: xlhVmZAzOdmk6WeOv0/Efhodkl6jxGCpl75itYaXH1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:12:12:d9:08:e1:e6:0a:1b:e1:62:b4:f7:24:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=23190e04ca61ccece8b3e1400296ac0d29a59f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:ef:ba:f4:29:4e:6e:c0:ac:bd:e4:c2:91:
fe:a2:0a:c9:2f:1c:4f:d6:a3:ce:13:f5:8a:a9:cc:
1c:42:42:1b:96:85:74:2f:aa:f6:fb:16:83:cc:72:
e9:71:d5:a6:87:84:73:c5:bc:93:ad:c1:12:3e:8c:
20:17:25:be:79:aa:af:8b:ee:b4:9c:e9:19:fd:1b:
29:a8:f2:33:b5:aa:f4:28:4d:87:ac:24:89:59:fc:
9c:49:fb:59:35:2b:37:7e:0d:78:7c:a9:d9:f4:eb:
6c:a3:a3:0a:f8:7d:77:e5:cc:7e:b0:04:88:3c:8e:
d4:f0:50:a7:53:3d:1c:73:b5:a7:a9:4c:33:af:e5:
b1:b5:e1:18:4d:d0:58:e0:59:a5:10:40:72:b7:9a:
53:7d:ca:5d:d0:14:38:b0:c1:8f:d2:e0:12:95:18:
4f:75:f4:d5:a3:71:18:a8:23:5a:e3:8f:92:1a:fc:
90:d2:f1:da:6e:f0:f4:a2:53:91:f8:96:1c:1c:17:
ed:47:8b:00:65:88:f9:b8:b1:fd:a8:cd:30:8a:61:
f1:a6:ad:14:9c:45:39:9f:06:20:97:af:46:d2:df:
71:69:08:d6:75:9d:72:80:92:85:c6:24:66:c3:ae:
68:a2:43:f0:ea:86:cb:cc:20:f3:d5:f8:fb:53:23:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:0E:04:CA:61:CC:EC:E8:B3:E1:40:02:96:AC:0D:29:A5:9F:01
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:f8:a8:73:4b:f4:29:3f:42:53:0f:78:29:4b:80:63:39:
0c:79:f2:40:59:bd:40:86:73:22:eb:68:c6:27:80:86:8a:68:
78:14:87:19:d1:1c:bb:00:46:17:d7:24:1a:07:3b:da:1a:23:
7c:a2:af:5c:17:6e:04:5f:bc:e2:8b:fd:9a:54:3d:d5:e6:84:
a0:0c:5e:e4:a2:93:25:00:dd:16:aa:7a:83:4a:84:01:c5:c6:
ba:77:ba:56:56:0a:f1:f3:e5:9b:27:d5:43:c4:b6:87:7a:60:
64:ec:c8:88:de:7f:32:0b:bd:77:6c:2f:f4:cf:b9:1d:90:26:
ac:ad:dc:98:19:da:7c:da:4f:2e:c3:9c:aa:d7:4e:40:a6:77:
11:27:af:4e:31:59:75:7f:bd:3a:f4:09:ba:a7:8e:ea:0d:8d:
12:7e:f1:29:09:2b:5a:5d:98:44:02:1f:e9:88:c0:bd:72:ea:
3c:d4:8f:5d:0c:70:a9:5b:97:98:70:5e:5e:00:87:cb:f5:c1:
d8:42:df:b7:28:c5:32:f0:ec:0b:9e:38:0f:a9:c1:8e:c6:9f:
6f:4c:e1:18:8e:3f:74:0b:1c:f1:d7:25:0c:00:be:e2:1a:15:
39:ba:d9:92:81:21:7a:86:1a:4d:26:2b:e6:af:31:16:14:9f:
d1:74:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:46 2025 by rpki-client