Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: mEGx7hDnK1MEt/FhOeAN/oAxPGgmadBEkVWgQiP9Ryo=
Subject key identifier: C1:31:52:A9:0A:17:8C:4D:D6:83:EB:E1:D6:10:36:6D:79:EC:77:3E
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 0198D6CD13F7FD4491856B61FEE1F4FE698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: OGtnuL/5uPBlZOOrJnlxP1MgI1j+sVe0zRusoMXgvwM=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:13:f7:fd:44:91:85:6b:61:fe:e1:f4:fe:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=c13152a90a178c4dd683ebe1d610366d79ec773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:70:ef:2a:ae:e7:81:27:12:39:bd:58:0f:
f0:c0:37:ac:75:51:39:fd:34:c3:a3:53:f2:29:d2:
da:21:31:24:06:6e:e4:db:90:98:2a:7c:7f:d1:5c:
0d:f6:9c:35:62:45:8b:cc:38:3a:fe:13:2c:81:6d:
23:9d:4e:f4:db:36:13:5c:06:dd:cd:65:6e:37:6d:
d5:0b:fd:58:37:0b:4f:46:0e:e2:5e:4e:20:81:2c:
89:16:91:a1:f4:4d:97:11:d7:9d:1b:eb:37:07:2b:
1b:38:03:4d:e7:e1:ed:7b:0d:13:6d:03:1d:62:ba:
58:81:b8:21:1c:cf:3a:42:a1:93:05:00:4b:66:ed:
64:12:ad:ea:f7:49:a2:6d:e9:fb:61:f5:c9:71:7f:
13:9e:90:b8:2b:aa:91:d4:64:bd:fd:fd:81:c9:3a:
41:e6:21:f6:43:48:11:33:df:8c:a0:06:f8:be:bd:
c4:a1:54:e3:bf:8e:48:7f:4a:1c:78:35:50:d0:cd:
22:33:39:8a:4d:4e:b1:52:8e:68:cb:06:39:91:1f:
6a:36:9e:3f:85:5b:a5:e0:a2:7b:6b:b8:3d:b8:f8:
75:83:6e:af:97:33:ff:0b:f1:71:03:bd:16:f7:ce:
e1:e2:f5:3c:92:b3:95:1f:65:f1:34:75:df:52:98:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:52:A9:0A:17:8C:4D:D6:83:EB:E1:D6:10:36:6D:79:EC:77:3E
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:e4:85:a8:67:66:5e:bb:6a:ad:b4:c1:a8:f6:2c:e3:e3:
9b:f9:3a:b1:7d:b0:1b:71:db:c3:15:fe:af:a6:78:46:f0:96:
38:e5:3d:5c:ba:29:32:78:ec:67:ed:5c:46:67:c8:40:2a:6d:
30:da:f8:9a:b2:e1:0d:2f:da:a1:59:d1:57:44:83:f6:71:fe:
e0:82:63:63:83:f8:55:15:51:fb:a9:3f:63:84:c6:51:88:c4:
42:d9:4e:ab:44:59:82:ba:cf:d7:01:ce:a9:e9:77:ee:dc:75:
0d:d3:d2:ab:dd:e0:82:43:bd:eb:5c:5f:90:51:08:6c:76:41:
63:d8:1c:78:a6:10:20:9b:36:5f:ce:9f:99:57:8c:e8:30:53:
aa:2f:75:63:8e:f2:89:69:bc:7d:8c:ec:a5:06:49:ed:1e:3f:
9b:70:e0:b0:88:23:89:cb:1f:bb:eb:29:d0:eb:42:7e:f7:b2:
32:e8:55:cb:da:fe:78:f9:06:c8:7e:a1:05:6a:26:08:9c:83:
cf:1e:36:f9:86:5a:bd:d5:c2:17:7a:cd:1b:b9:a4:fd:59:d2:
ea:7f:95:95:af:f4:a5:c6:03:46:97:2b:33:bd:8d:70:37:f7:
b1:e2:41:ba:51:45:da:dd:2d:5f:d8:e4:39:b7:9e:9a:fa:b2:
72:1e:8b:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzRP3/USRhWth/uH0/mmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ViYTY4NzNjNWI1MDc1YjNjNDM5ZjdmZWViNTRhZjFm
MTBkYTkwHhcNMjUwODIzMTIwMDIwWhcNMjUwODI0MTIwMDIwWjAzMTEwLwYDVQQD
EyhjMTMxNTJhOTBhMTc4YzRkZDY4M2ViZTFkNjEwMzY2ZDc5ZWM3NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Rw7yqu54EnEjm9WA/wwDesdVE5
/TTDo1PyKdLaITEkBm7k25CYKnx/0VwN9pw1YkWLzDg6/hMsgW0jnU702zYTXAbd
zWVuN23VC/1YNwtPRg7iXk4ggSyJFpGh9E2XEdedG+s3BysbOANN5+Htew0TbQMd
YrpYgbghHM86QqGTBQBLZu1kEq3q90miben7YfXJcX8TnpC4K6qR1GS9/f2ByTpB
5iH2Q0gRM9+MoAb4vr3EoVTjv45If0oceDVQ0M0iMzmKTU6xUo5oywY5kR9qNp4/
hVul4KJ7a7g9uPh1g26vlzP/C/FxA70W987h4vU8krOVH2XxNHXfUpgkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMExUqkKF4xN1oPr4dYQNm157Hc+MB8GA1UdIwQY
MBaAFA0+umhzxbUHWzxDn3/utUrx8Q2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUt
Mjc5OThiZjE3NDY1LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUtMjc5OThiZjE3NDY1
LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmY7khahn
Zl67aq20waj2LOPjm/k6sX2wG3HbwxX+r6Z4RvCWOOU9XLopMnjsZ+1cRmfIQCpt
MNr4mrLhDS/aoVnRV0SD9nH+4IJjY4P4VRVR+6k/Y4TGUYjEQtlOq0RZgrrP1wHO
qel37tx1DdPSq93ggkO961xfkFEIbHZBY9gceKYQIJs2X86fmVeM6DBTqi91Y47y
iWm8fYzspQZJ7R4/m3DgsIgjicsfu+sp0OtCfveyMuhVy9r+ePkGyH6hBWomCJyD
zx42+YZavdXCF3rNG7mk/VnS6n+Vla/0pcYDRpcrM72NcDf3seJBulFF2t0tX9jk
Obeemvqych6L2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:44 2025 by rpki-client