Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: o2BJZi0PRQvZOqUzW6eyHD8x4u5Q+cM+z94GQNqjcLY=
Subject key identifier: A4:F7:C8:D4:D0:6C:11:76:BB:C3:20:49:05:05:30:E8:D6:1C:56:CF
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 019A4E86BCE774EDA22AAA3D99C13FDF1913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: NInXwkI9w8InXFveRZ4jXumQYQpjIJ/HNrjoeBbSPak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bc:e7:74:ed:a2:2a:aa:3d:99:c1:3f:df:19:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=a4f7c8d4d06c1176bbc32049050530e8d61c56cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:d9:81:37:01:40:57:85:d6:69:f9:08:f4:
9c:30:84:b9:0e:8a:3b:ea:64:10:cb:60:e3:33:0c:
e5:62:b3:89:0a:35:2d:53:d0:31:b6:d9:74:b0:b2:
60:5f:a9:e4:89:d7:62:cc:60:ba:eb:58:a1:7e:64:
56:64:9f:43:fa:25:17:ec:6e:16:1f:4e:e6:f2:39:
29:9f:18:77:9a:eb:2b:48:57:ef:93:7f:0d:c3:7c:
d4:85:6f:bc:04:c7:76:cd:bd:a8:00:04:43:20:07:
8c:2b:f1:67:6f:2a:be:9d:53:48:a2:49:56:0e:76:
58:0e:db:2d:aa:62:17:b2:a6:72:da:6e:49:cb:69:
80:b6:f1:c3:9f:7e:72:aa:54:f6:e4:51:c3:08:43:
3d:52:8a:b6:f5:63:4d:31:b9:a9:8e:3e:61:93:5e:
5d:57:51:a4:fc:65:cb:b2:41:2c:ff:c3:d9:13:e8:
bd:8b:cd:11:18:ce:fb:82:22:ea:87:06:73:ff:7e:
01:49:bc:26:f7:6a:fd:b3:c9:1f:2c:24:62:9e:f6:
a5:77:0e:3c:0b:da:b5:0f:35:c8:b2:b4:9c:0d:b9:
04:8f:99:63:1f:a3:df:a7:bf:f1:53:7d:44:dd:12:
20:c5:ab:be:45:dd:11:91:06:43:6b:64:a9:f5:54:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:C8:D4:D0:6C:11:76:BB:C3:20:49:05:05:30:E8:D6:1C:56:CF
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:51:50:83:f0:4c:47:c2:31:15:32:06:5f:56:2f:c1:6f:ca:
c0:f5:bc:94:49:b7:2f:4d:61:c6:25:32:51:f4:65:7a:7e:37:
7c:61:71:2c:5a:ac:f5:39:a1:0a:84:9a:c0:d0:01:7b:ab:24:
33:d6:15:26:00:85:d5:83:4c:b5:9b:3c:b2:6e:f9:83:22:1b:
9e:78:b1:9c:c5:f2:0e:fc:d5:a2:ce:9d:05:89:a5:60:a2:48:
53:a8:da:f9:f7:77:f3:f5:51:ef:bc:b2:5d:75:d1:dc:5f:83:
5a:46:0d:76:80:63:de:6a:73:cf:d9:63:ea:f5:69:69:ab:84:
19:13:eb:4b:58:94:2f:42:b2:05:35:c1:30:93:53:d7:a4:3f:
25:df:4f:96:0d:74:ab:10:08:25:f9:f4:ff:77:35:4f:8d:64:
95:b8:33:1d:69:f2:66:f1:5a:5b:10:8d:93:3e:22:c2:1f:d0:
db:d8:1b:c3:ee:67:82:8f:21:ea:18:2c:70:98:6b:75:08:f8:
d7:2d:97:3e:4c:b1:10:2e:31:82:ac:0c:1b:38:e6:43:0b:c4:
f1:a8:76:45:51:a5:eb:0a:48:43:5b:20:f4:3b:05:8d:69:88:
be:22:dc:16:8b:68:aa:59:c2:72:71:82:03:27:2a:cc:4a:2b:
d6:55:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:40 2025 by rpki-client