Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
File: dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json)
Hash identifier: c+7xVHSJSKRRdOLtt3bHSoweZm8WV0YQVl5rc0XqdB8=
Subject key identifier: BB:D1:17:7C:AB:82:62:E5:3E:18:75:52:26:08:BE:18:41:C2:BA:6E
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 01989749B3B509096B8D146DECF2223659D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
Manifest number: 11F9
Signing time: Mon 11 Aug 2025 04:00:46 +0000
Manifest this update: Mon 11 Aug 2025 04:00:46 +0000
Manifest next update: Tue 12 Aug 2025 04:00:46 +0000
Files and hashes: 1: AySpplYr1k8EYDvYyZDjEzqH9K4.roa (hash: s1mdUNkG6Ay0RgrGD/89z3j82IecWcvVNMM/xUHeklQ=)
2: K2WHuCG9UOH7aVx9C_lS8WDCTm4.roa (hash: 1HhQUXTsNrF+XYLIkzcFw9sh41szsi9HXt4NDudQ02s=)
3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: Fx4IJHzHmUDU/XQT+o24aCaMR5cJt6owgTs668RT94o=)
4: ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa (hash: F3cv1Y7tYXZNMkOk4CynP5ia6K663k4g2QoOaTbO8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b3:b5:09:09:6b:8d:14:6d:ec:f2:22:36:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Aug 11 04:00:46 2025 GMT
Not After : Aug 12 04:00:46 2025 GMT
Subject: CN=bbd1177cab8262e53e1875522608be1841c2ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:6e:54:75:25:1e:5c:e0:29:ff:e9:1a:c0:
40:d4:53:a1:42:ff:1e:3c:bf:ab:02:c7:47:df:90:
9b:a8:29:15:d7:f1:b2:14:d9:7f:49:c8:f2:ce:42:
cf:22:ee:d3:0e:05:2b:9c:73:d5:9f:43:8a:41:6d:
dc:f0:34:f4:75:ed:8c:af:b8:98:77:29:21:d0:ec:
7d:56:a6:91:ec:25:b0:e5:7b:9c:24:41:15:90:17:
cf:34:44:b4:46:4a:07:ac:d5:08:24:44:3a:cf:65:
ce:aa:5d:1a:ab:c4:74:a8:e8:2a:5e:a4:9b:89:ec:
42:b2:bb:58:72:e9:ea:8a:a8:39:0d:f0:d5:5c:5d:
c7:f1:b4:17:fc:ee:e3:f1:00:e6:ef:bb:0c:00:28:
9f:b3:d5:82:52:53:c3:29:00:a2:64:34:a7:45:13:
0c:28:fa:68:16:4c:30:a0:02:05:75:58:df:4c:c1:
21:c4:8a:31:85:8d:48:75:cf:9b:87:67:c4:ab:2c:
6b:64:00:e8:3b:60:66:92:a3:70:30:3e:dc:21:5b:
9c:1c:49:b5:e3:af:c3:3d:4b:0d:4c:9c:3a:0f:40:
cb:b4:73:04:62:7f:2a:e2:7e:db:ab:b4:25:63:6f:
35:45:0e:b0:8c:d4:41:60:23:f1:86:5c:f1:73:c4:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:17:7C:AB:82:62:E5:3E:18:75:52:26:08:BE:18:41:C2:BA:6E
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:4d:80:76:a0:66:3e:6b:7a:31:13:dc:44:b8:77:f8:51:
65:52:20:1f:07:7f:0b:70:a9:ad:7b:06:d1:10:b2:e5:da:90:
7d:2d:60:5b:5f:2f:38:86:fc:0e:19:7f:59:79:ec:02:4d:c5:
f1:a0:2c:14:bf:f6:10:21:73:c3:8e:47:4c:01:21:c0:c5:fe:
a6:b0:01:c8:14:a6:56:d8:43:ba:55:d3:67:af:91:5b:4d:da:
22:ef:6e:f7:0f:78:e4:f6:c9:f4:3a:97:f4:c9:c0:80:a0:64:
09:e0:c5:57:af:05:8a:a5:1e:12:68:8b:37:4b:b6:7b:4e:44:
f4:11:45:e2:fc:cd:83:d2:36:bc:a0:8e:50:d8:df:9f:9a:3b:
a8:eb:41:82:40:8f:f3:87:f9:81:82:b5:c9:a1:be:f9:df:0d:
57:aa:b5:1a:99:1f:75:a4:62:24:b2:1b:d6:b1:91:2e:c3:96:
6d:37:79:71:c9:10:7c:7d:72:5e:8f:86:75:76:21:f6:8d:e9:
80:f8:c9:86:f6:6c:36:f5:bf:a1:68:f3:f2:5c:c2:43:79:86:
62:89:56:4b:17:c2:a6:93:d9:24:6b:b6:ea:f6:64:04:f9:72:
34:d0:70:27:9f:fa:d2:5c:fd:b1:da:76:41:87:94:f4:4c:05:
40:79:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:12 2025 by rpki-client