
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: jHPQhXykZD38suUsGujsZrGUfq8PB90zuJJwUd08NJU=
Subject key identifier: 42:3F:D5:90:FA:70:ED:E2:C6:EA:1B:98:20:91:B3:D4:36:D4:6E:C2
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 0198D5F1B14ADFE24C3CAFDB4875BE5A962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: 4rgxSf79Xe3NA9ptbd9sNcnc20I2JpBIH5+Q+baNX0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b1:4a:df:e2:4c:3c:af:db:48:75:be:5a:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=423fd590fa70ede2c6ea1b982091b3d436d46ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:ca:2f:41:50:e4:4c:16:36:4a:dc:c5:da:
de:6d:90:3f:ff:46:85:8b:a3:8c:41:ad:cb:9b:9d:
8a:ff:14:4c:f4:31:b1:7b:b5:66:5f:10:a5:5b:af:
43:72:21:6b:b0:ea:13:91:2a:95:e8:fe:02:72:17:
1d:e5:c4:33:03:4b:d9:60:66:4c:39:bf:4a:d2:04:
5b:7b:3f:f9:02:8b:ba:a2:39:1e:d1:88:90:fc:f4:
76:0a:6b:ec:78:ab:95:8e:df:ed:22:98:4f:a5:59:
7d:f1:cb:31:b2:cf:b1:79:d3:d2:6f:eb:13:55:a7:
f4:ba:13:43:2c:b0:56:c5:8d:a8:de:de:bc:87:b8:
92:e7:17:e7:a5:c0:19:4f:cf:a1:c9:a4:e7:74:cd:
f1:0d:a7:9a:18:19:73:78:32:50:e0:62:f9:86:cb:
44:22:be:42:01:73:6a:3c:d4:b5:94:d0:d4:92:1b:
b0:03:1b:da:64:92:e4:35:62:0e:65:bc:84:1f:ff:
f0:95:ee:02:e8:92:94:e3:c9:17:df:6c:42:fd:e8:
a6:04:1a:11:9c:9d:b7:ad:35:ac:67:1b:b5:12:c1:
86:64:5d:44:39:4b:30:67:ee:93:21:da:1a:68:d8:
9c:a8:f0:06:fc:07:81:fd:6f:98:8e:11:a2:a0:8b:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:D5:90:FA:70:ED:E2:C6:EA:1B:98:20:91:B3:D4:36:D4:6E:C2
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:0f:1a:79:77:a8:d0:3e:23:1b:55:10:8f:bb:68:75:e4:
3b:ae:bf:73:c0:52:6f:70:47:1f:61:cd:46:0d:4a:97:79:72:
76:4f:c7:df:39:c3:8c:f8:84:0c:86:a1:bf:4f:0d:09:38:3a:
09:64:ac:3a:67:f0:d1:f2:60:5a:5c:eb:05:fc:53:cb:98:9a:
81:8d:41:0e:84:00:6d:d8:0e:f6:46:9f:ed:08:21:7a:92:72:
ae:35:cb:5b:88:41:dc:51:7c:17:1d:dd:18:67:c5:f9:a9:25:
dd:17:06:ed:e1:e2:0f:ac:4d:cb:42:5b:e8:a9:d0:0d:37:3b:
e8:83:b3:0e:66:c4:7a:aa:10:f4:dc:ea:d2:6e:84:70:bc:03:
a3:5a:0e:c4:87:c8:f9:01:c6:77:00:71:c1:2f:6c:23:d5:87:
2d:16:02:3a:8d:1f:ce:2e:c0:a5:4d:66:b9:6c:20:17:14:3d:
a6:3c:9c:67:6c:08:31:90:c3:dc:bb:5a:71:82:80:30:e2:ce:
bc:4d:97:62:86:c7:ca:62:22:a3:6f:d0:de:cd:ac:f5:57:a8:
7d:85:75:af:3c:49:21:8a:55:76:bf:98:c8:c4:51:55:b6:a0:
ce:87:ff:77:ed:ec:09:dd:11:2b:27:81:58:ad:35:fc:fc:0e:
37:09:7d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8bFK3+JMPK/bSHW+WpYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm
OTQwN2QwHhcNMjUwODIzMDgwMDQzWhcNMjUwODI0MDgwMDQzWjAzMTEwLwYDVQQD
Eyg0MjNmZDU5MGZhNzBlZGUyYzZlYTFiOTgyMDkxYjNkNDM2ZDQ2ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UnKL0FQ5EwWNkrcxdrebZA//0aF
i6OMQa3Lm52K/xRM9DGxe7VmXxClW69DciFrsOoTkSqV6P4Cchcd5cQzA0vZYGZM
Ob9K0gRbez/5Aou6ojke0YiQ/PR2CmvseKuVjt/tIphPpVl98csxss+xedPSb+sT
Vaf0uhNDLLBWxY2o3t68h7iS5xfnpcAZT8+hyaTndM3xDaeaGBlzeDJQ4GL5hstE
Ir5CAXNqPNS1lNDUkhuwAxvaZJLkNWIOZbyEH//wle4C6JKU48kX32xC/eimBBoR
nJ23rTWsZxu1EsGGZF1EOUswZ+6TIdoaaNicqPAG/AeB/W+YjhGioIvEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI/1ZD6cO3ixuobmCCRs9Q21G7CMB8GA1UdIwQY
MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt
YjEzNmZlNDBkZjRkLzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk
LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusAPGnl3
qNA+IxtVEI+7aHXkO66/c8BSb3BHH2HNRg1Kl3lydk/H3znDjPiEDIahv08NCTg6
CWSsOmfw0fJgWlzrBfxTy5iagY1BDoQAbdgO9kaf7QghepJyrjXLW4hB3FF8Fx3d
GGfF+akl3RcG7eHiD6xNy0Jb6KnQDTc76IOzDmbEeqoQ9Nzq0m6EcLwDo1oOxIfI
+QHGdwBxwS9sI9WHLRYCOo0fzi7ApU1muWwgFxQ9pjycZ2wIMZDD3LtacYKAMOLO
vE2XYobHymIio2/Q3s2s9VeofYV1rzxJIYpVdr+YyMRRVbagzof/d+3sCd0RKyeB
WK01/PwONwl9FA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:38 2025 by rpki-client