Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File: DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier: 9X/OzdF8dNGOCSHZYV2C6USK4DpRMVPpR4aKztsAUAs=
Subject key identifier: 8F:E3:91:7C:CB:80:39:95:25:DD:A3:5A:94:03:32:D2:6C:3E:C6:76
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial: 019A1F88E0857FAB702CC2C4FF5451FE37B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number: 13F8
Signing time: Sun 26 Oct 2025 08:00:55 +0000
Manifest this update: Sun 26 Oct 2025 08:00:55 +0000
Manifest next update: Mon 27 Oct 2025 08:00:55 +0000
Files and hashes: 1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=)
2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: w7hG2HiYc7068TcycTTGZ9X14DoskTcaf8msjURXN2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:e0:85:7f:ab:70:2c:c2:c4:ff:54:51:fe:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Validity
Not Before: Oct 26 08:00:55 2025 GMT
Not After : Oct 27 08:00:55 2025 GMT
Subject: CN=8fe3917ccb80399525dda35a940332d26c3ec676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:77:26:6f:59:49:b2:81:53:af:ca:16:0a:
b1:16:bd:f4:6a:57:88:6e:ed:e7:6b:ae:62:d5:f0:
f4:43:75:a5:fc:d1:60:64:d8:d8:1b:ad:76:55:eb:
65:ed:dd:c8:65:4d:c3:bd:ab:fb:d8:d8:d9:71:f8:
cf:f0:40:fc:50:97:19:80:f5:dd:a5:02:9a:a3:f6:
f8:5a:95:1d:fd:8f:dc:d6:9e:d6:6c:29:fa:48:c9:
c7:08:29:1b:71:2c:96:11:f5:79:22:b1:a1:3c:23:
98:d1:91:80:c3:78:da:f6:20:ff:1f:f4:e9:0e:38:
7a:90:95:6a:74:a4:c8:c7:20:b5:8c:9b:86:6a:29:
bc:bb:c6:fe:20:b5:6f:2a:69:f8:2a:fd:01:66:8e:
88:8a:3e:6c:38:be:66:91:4a:dc:1f:74:2b:7e:dd:
b2:79:94:99:08:33:80:db:80:dc:0e:88:09:89:b1:
b4:71:1f:49:9c:f2:cf:23:84:52:e5:e3:7c:69:7c:
2d:a0:6e:a5:cb:64:9d:aa:3c:14:c3:d7:05:d7:08:
a4:96:c9:55:0e:f0:bf:5d:b8:ee:dd:5e:67:0d:ce:
c7:ae:4a:fa:6c:2e:c7:be:b1:12:b2:a9:fa:e8:d9:
6f:e1:55:31:6c:09:c1:84:90:61:aa:e9:ac:66:93:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:91:7C:CB:80:39:95:25:DD:A3:5A:94:03:32:D2:6C:3E:C6:76
X509v3 Authority Key Identifier:
keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7d:6b:74:37:f1:03:2d:46:77:2f:c6:83:6c:ab:b4:80:d9:
fe:dd:15:e6:b0:6d:41:db:d0:61:0c:95:26:36:02:1d:72:53:
3e:f3:bc:dc:3b:dc:c8:8c:62:47:69:2b:fc:6e:ac:dd:89:ae:
26:64:c1:a7:d7:6a:83:da:03:ba:5d:56:17:4b:4e:2e:e1:c7:
f3:15:e8:14:08:db:44:95:db:a1:98:00:5f:57:86:39:0d:66:
da:f5:85:7d:12:cf:a0:2e:64:ee:47:ce:17:cc:32:b6:19:7f:
ff:fa:f6:59:c1:ff:1f:15:32:55:10:41:81:97:a8:28:51:d6:
84:d0:1c:4e:ff:f6:a7:d0:61:95:df:44:9f:62:25:50:39:a9:
de:00:cd:1b:02:14:1b:35:cc:5b:5b:97:36:41:95:8a:d7:39:
ed:0b:eb:86:e5:15:53:91:27:66:49:9f:20:2d:7c:4b:a9:48:
d7:0b:61:e5:88:97:2c:d5:95:98:1f:f2:1c:95:7c:11:29:a2:
4a:7d:88:5f:92:be:21:3e:ee:76:2c:6f:38:52:24:35:f0:6e:
6f:34:6d:f8:ac:f7:d7:98:43:85:fc:69:86:3e:13:db:d1:eb:
ff:82:66:ea:c9:f6:52:1c:1a:6d:f3:c8:28:e6:3a:b9:12:8e:
a2:3c:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:29:45 2025 by rpki-client