Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: ximiX+mxkp3fNRQR4s7X6V8u0T81ptpchQYtQLCSDvA=
Subject key identifier: A9:D0:04:58:9B:14:97:DC:47:DF:CF:D1:FE:1A:0A:27:FD:52:33:E3
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 0197B70E8ADC408BEB83EAEBD1DA5634F061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: lbtnHHldXHtDBjdfxFptijaatKG1Bdpxvm7vJNfsadA=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8a:dc:40:8b:eb:83:ea:eb:d1:da:56:34:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=a9d004589b1497dc47dfcfd1fe1a0a27fd5233e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:f0:c4:b0:6e:83:8c:a4:96:de:8e:5e:32:
ae:5e:e6:16:ba:d4:24:a2:e6:45:08:b0:86:ea:d5:
f0:29:9a:92:82:07:0b:96:81:bd:d5:c1:04:4a:1f:
69:57:b1:bb:71:d4:f9:01:d9:ad:d4:51:0b:c8:b8:
f1:49:50:e0:67:17:2e:64:44:dc:bb:7e:77:d3:73:
5e:f5:d6:74:3b:ce:7f:49:bb:31:d2:d9:c0:73:55:
af:dc:58:06:1f:9f:58:6e:1f:b0:35:97:a4:96:a2:
e2:80:44:5c:17:62:b6:76:ec:00:e0:20:43:6b:bc:
c5:0a:11:e7:c1:d1:f2:f8:56:90:14:a7:c8:ed:fb:
83:56:49:77:9a:fa:cc:27:b4:ae:20:27:b8:5b:76:
30:b9:eb:97:69:4a:c7:e3:fa:45:e5:a8:b3:dc:43:
1c:45:d2:95:d7:27:f7:35:db:67:5a:05:07:86:63:
b5:f0:f7:7a:e5:5e:9e:82:08:62:41:25:8c:c3:ae:
e8:72:eb:83:13:cc:e3:85:7b:0e:7b:48:e8:b7:fc:
b3:99:f4:0a:8b:61:1c:7f:31:e3:28:e4:f9:dc:cc:
d8:52:e0:47:dc:ee:6d:9a:8a:94:15:23:0a:74:e3:
33:3f:a6:5d:bb:d1:f4:fd:ba:0d:90:88:db:d3:9c:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D0:04:58:9B:14:97:DC:47:DF:CF:D1:FE:1A:0A:27:FD:52:33:E3
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:eb:d3:d7:a6:54:74:7c:f3:ca:19:b1:db:fb:cf:b3:79:a1:
11:23:b7:ff:9b:8e:2e:55:9e:b3:f5:6e:f4:e9:7b:08:38:0a:
c4:67:62:5e:46:e0:95:12:0b:fa:4d:ce:52:d5:2d:70:63:0f:
46:0a:66:99:fc:7b:04:f3:05:64:81:f9:17:81:cb:23:2e:16:
7f:08:23:f0:4a:02:88:9a:0b:cc:33:09:5f:87:27:2f:ab:ee:
15:ee:e4:1f:aa:62:4d:26:db:e9:a0:c5:97:de:58:d7:59:c1:
8e:87:a1:72:88:19:fc:e8:31:65:bf:f9:22:20:85:97:42:df:
d9:b2:23:b2:19:32:27:fe:93:87:9a:db:d4:30:ee:ab:59:aa:
47:a8:5e:4c:e6:14:03:5e:da:8a:48:77:10:35:62:92:2b:7a:
b6:cc:a3:99:8c:d7:4f:0f:a6:61:59:89:fb:78:94:32:c6:41:
54:c9:03:b6:59:cd:ed:ed:46:97:3b:fc:ae:e6:2d:13:c8:bc:
91:92:cf:65:68:af:8a:80:ec:dd:32:9f:7f:4b:6c:49:31:12:
71:49:d5:a3:dc:13:6f:43:29:8a:52:af:44:24:ab:0b:e0:bd:
7e:ff:00:c1:25:23:d8:98:48:be:d1:7b:06:ea:9d:f8:72:07:
8a:48:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:59 2025 by rpki-client