
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: ogzXYib4Mkov8GTRUwX4gM9VCC94zONbIyK4LI1NANg=
Subject key identifier: 4C:2F:D1:F7:59:62:3A:26:06:72:B1:71:BC:2C:57:36:4C:E4:C7:28
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 0198737443C197C29CE1568C639E27684474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:00:55 +0000
Manifest this update: Mon 04 Aug 2025 05:00:55 +0000
Manifest next update: Tue 05 Aug 2025 05:00:55 +0000
Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: bFIT/QfiEBkIngpkg5tKa+58upU9nxnqF4ImQc3gZm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:43:c1:97:c2:9c:e1:56:8c:63:9e:27:68:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Aug 4 05:00:55 2025 GMT
Not After : Aug 5 05:00:55 2025 GMT
Subject: CN=4c2fd1f759623a260672b171bc2c57364ce4c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:c1:97:94:2e:33:bc:8b:70:03:fb:24:12:
f1:28:da:f2:54:f7:e0:14:09:a3:56:5f:a9:78:73:
96:5b:09:11:cb:4d:8a:7e:8e:6d:fa:f4:88:7a:6f:
0d:99:9a:e8:f0:d5:97:88:a4:ec:ec:b6:72:ee:13:
37:5c:66:a0:d5:43:8d:76:97:82:8a:a8:c2:59:23:
9c:b7:fb:71:2f:ed:dc:d9:c7:db:66:78:e6:d6:a0:
29:1c:04:72:56:aa:39:e3:82:7d:40:45:a2:b1:f5:
64:a1:0e:52:9a:3c:55:d9:de:4d:5a:6d:a9:20:ee:
da:d4:26:41:12:98:08:ea:4a:cc:f7:e7:bc:d3:99:
55:f9:29:01:19:64:a5:ea:d2:a7:0a:9e:39:c9:0d:
99:77:4d:43:54:be:0d:a3:2e:d5:ef:eb:75:25:a9:
cc:ae:49:33:e7:85:e8:50:b8:8f:56:35:c6:fc:f4:
e1:79:77:3c:fd:8b:40:ad:e2:3e:4c:47:c8:98:b2:
b4:20:0e:08:f9:07:ce:d7:53:b3:c6:0e:8c:b8:46:
f3:e8:fd:08:2e:12:13:b2:2b:7c:89:98:eb:2c:3a:
de:62:9e:08:c4:4c:27:2b:19:d0:87:51:33:85:96:
2d:d5:82:b4:ae:f9:b7:13:04:60:42:13:03:37:23:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:D1:F7:59:62:3A:26:06:72:B1:71:BC:2C:57:36:4C:E4:C7:28
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:52:ed:98:9b:5b:f4:42:03:c8:a1:f4:74:4d:5d:b7:72:
30:23:6f:90:a1:f4:1d:88:a6:cf:37:5a:f1:2b:fb:f4:dc:72:
4d:30:c4:7b:e3:d2:0e:90:b8:2a:29:c9:93:15:13:51:28:42:
2f:ce:4c:44:70:ef:24:06:45:2d:9c:7f:b9:dc:60:cf:54:69:
a6:4b:e9:c3:85:ae:c5:98:9c:a3:d8:b7:f4:a3:90:d7:54:42:
db:df:fe:e9:17:5d:1a:a5:08:82:b0:08:9a:2d:fa:e2:fa:3d:
22:42:57:a4:4c:22:ba:53:d1:33:02:c3:2a:31:2c:71:46:d6:
a5:f2:9b:65:ae:06:6a:63:c8:6a:14:b9:8a:7a:43:c4:5a:6e:
39:7b:b9:97:e9:f1:96:76:59:41:5e:99:47:38:8a:64:63:75:
28:d1:12:e8:ad:9f:a5:46:30:40:1e:a4:88:3c:02:fe:0d:49:
51:4b:99:5c:fc:d2:4f:0c:a0:3c:3d:1e:ab:6e:f0:36:22:03:
5b:af:b0:2b:7d:59:6b:24:44:16:a2:5e:bb:ba:90:54:c7:5c:
e6:af:ae:9f:d3:da:4e:32:5a:c4:1d:d1:5a:7e:66:f6:8c:e2:
93:03:fa:f6:cc:22:8c:46:41:47:0f:fa:ed:70:9f:53:0b:f9:
e9:ea:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:07 2025 by rpki-client