Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
File: dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json)
Hash identifier: Js4NTdSqB2chPACqHO5Z5b7RG7X/v3QTNMzGu8IH6wA=
Subject key identifier: 90:C0:F5:59:A6:ED:55:50:F7:67:C4:33:43:84:3D:59:CA:45:29:D0
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 019A0824DF2104CB0926479D40734F4AD5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
Manifest number: 12B8
Signing time: Tue 21 Oct 2025 19:00:25 +0000
Manifest this update: Tue 21 Oct 2025 19:00:25 +0000
Manifest next update: Wed 22 Oct 2025 19:00:25 +0000
Files and hashes: 1: AySpplYr1k8EYDvYyZDjEzqH9K4.roa (hash: s1mdUNkG6Ay0RgrGD/89z3j82IecWcvVNMM/xUHeklQ=)
2: K2WHuCG9UOH7aVx9C_lS8WDCTm4.roa (hash: 1HhQUXTsNrF+XYLIkzcFw9sh41szsi9HXt4NDudQ02s=)
3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: GCYi1+Vu3kwkm2XFfk//abryctkvLevXY1ifGLR7/P4=)
4: ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa (hash: F3cv1Y7tYXZNMkOk4CynP5ia6K663k4g2QoOaTbO8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:24:df:21:04:cb:09:26:47:9d:40:73:4f:4a:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Oct 21 19:00:25 2025 GMT
Not After : Oct 22 19:00:25 2025 GMT
Subject: CN=90c0f559a6ed5550f767c43343843d59ca4529d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:20:ff:60:c0:a6:a2:e9:07:2e:27:c6:fb:
54:ac:36:49:80:d4:11:76:d5:0e:f1:90:3d:7e:35:
2b:b6:d9:4e:d7:94:4b:a5:69:14:46:3b:a2:3d:16:
f8:b0:fc:b6:3d:22:79:40:d4:58:62:20:f1:de:dc:
50:58:1b:42:98:7e:e7:c8:cc:f2:1b:10:23:b7:62:
f6:7f:aa:53:65:53:16:85:a9:48:e3:4b:15:0e:d7:
27:da:c8:0a:ff:11:21:6b:0c:47:24:e2:33:84:f9:
54:a3:a1:76:bb:12:19:c2:72:c1:c2:f3:24:e2:75:
79:e7:4b:1e:4a:6f:88:02:a3:cf:40:33:c6:69:ab:
82:ac:12:db:b6:37:96:1e:8f:6f:d1:23:87:da:cc:
27:92:4c:7c:eb:8e:dc:a8:5e:3c:cd:5e:f0:1a:1d:
b8:f8:94:25:7e:6b:2a:4f:c0:30:66:5e:97:a6:2a:
2a:d4:8b:75:8a:df:55:fb:2d:41:38:e0:1f:32:29:
05:04:6a:b5:08:ce:8f:65:65:dd:3f:2b:3a:b3:2b:
8d:d3:a0:d6:bd:13:fd:1f:b7:ed:ee:e0:1d:06:ce:
e9:a0:b2:6a:37:05:28:a9:7e:b5:f9:7f:ee:b7:7a:
ca:a1:4d:43:62:9a:08:7f:90:58:f9:01:61:0c:9b:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:F5:59:A6:ED:55:50:F7:67:C4:33:43:84:3D:59:CA:45:29:D0
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:61:51:6d:41:1d:b3:6b:64:f6:3f:e6:45:9f:7b:a3:3a:
c5:fc:0e:1a:54:aa:8d:b1:58:0e:74:84:c7:0b:72:a1:22:64:
e3:ea:dc:3b:31:19:9b:87:45:07:7f:01:18:93:57:91:61:c2:
79:b1:4e:f7:fd:d8:f2:c4:3b:4a:e3:09:b0:a9:0f:57:9c:bd:
01:c5:bd:83:20:36:0a:ec:57:f6:ab:b8:5e:df:d1:1f:81:ac:
4c:fe:63:69:56:78:59:16:b8:c0:0c:e8:f8:7e:f2:5a:f2:0d:
54:0d:b8:16:11:32:fe:db:d0:45:63:8b:7f:9c:bc:69:5c:44:
a6:21:54:d9:01:28:fd:bb:d2:5c:f5:77:b0:8e:74:c1:8b:c0:
d8:c6:49:4f:eb:53:0f:85:ef:38:ce:e4:c7:4d:3f:9a:b0:8e:
47:44:05:b6:11:99:2d:19:b8:49:0a:78:4c:cf:e5:0c:c0:ab:
5e:a2:4a:59:0f:0f:bc:02:6e:c9:72:8f:63:54:3a:11:7e:ec:
f3:e2:09:51:2a:ac:f6:94:26:ba:78:87:8a:0f:a3:0c:cc:eb:
1a:cb:94:cf:fe:46:02:99:18:43:14:4b:99:e5:b3:ef:17:b2:
de:ce:12:6c:cd:ed:9c:10:93:b1:53:cb:68:3e:36:80:60:65:
7f:e2:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:30:27 2025 by rpki-client