Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: Jf8G8Q6XeQnD0imBCBY1YQoiwqXvzBV5v6tgQfSnOYg=
Subject key identifier: 85:A3:C3:D9:7E:9B:B2:D4:26:ED:E0:3D:F8:C7:D8:4F:88:B7:22:41
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 0199FC59094B34CD31DF7E6E7B022CC2A589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: ZfvBiG0YCY5b294xs4k5yrK3WhR0IrVU3PEbvHdK8Hc=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:4b:34:cd:31:df:7e:6e:7b:02:2c:c2:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=85a3c3d97e9bb2d426ede03df8c7d84f88b72241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:ae:75:21:a9:60:71:8b:24:b3:21:71:3d:
41:5b:cc:26:4c:cd:7b:4b:0a:fb:6e:08:d9:2d:d7:
58:f4:34:75:21:0d:da:5d:29:74:ac:f9:22:fd:34:
0f:ab:a1:18:db:5f:92:f5:4b:c3:15:05:08:47:26:
70:db:42:af:b2:c0:ca:bd:7d:0a:67:a8:b6:e4:e3:
60:be:d3:a3:1e:bc:af:6f:10:ac:ca:f0:6b:f6:47:
00:b0:5a:d6:e1:3a:2a:18:f3:45:65:9b:7e:f9:7f:
40:ef:6f:59:e9:1d:b4:39:6f:ef:60:8f:fa:bd:2c:
e6:66:c7:38:66:29:7b:6b:4c:80:df:01:2e:e3:a4:
d2:1b:6d:eb:a7:2b:96:9b:85:2b:99:e5:35:03:07:
69:13:a3:f8:43:88:14:98:da:91:87:0d:75:ba:e1:
69:ed:a3:33:a3:08:1e:06:39:f5:79:41:09:32:48:
ee:33:48:f0:69:45:ba:df:e5:b7:74:18:68:bb:a2:
72:31:e1:14:11:c8:ed:37:9b:44:e9:ba:41:2e:62:
83:04:a9:21:0b:ed:1c:82:a5:a6:ab:39:08:82:a7:
e3:87:ef:2f:90:dc:ec:18:b7:cb:37:e7:6f:a7:6f:
c7:3f:7b:9c:e2:4a:75:2d:f9:58:28:96:07:24:62:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:C3:D9:7E:9B:B2:D4:26:ED:E0:3D:F8:C7:D8:4F:88:B7:22:41
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:ab:9f:be:39:80:44:3e:00:8f:ca:cf:20:fb:c0:f3:51:
2d:bc:5c:07:4a:a0:ec:0e:eb:e8:6c:0b:ba:49:30:96:f0:8b:
93:f0:1c:1d:28:4e:bb:30:78:10:76:57:e8:07:fc:b4:87:47:
be:10:ce:5b:e2:ff:2a:60:d0:e8:2b:de:38:21:9f:6d:35:7d:
c6:19:d4:8e:65:f7:13:f2:67:cd:50:15:fa:65:45:3c:e3:b8:
6c:c1:27:19:ee:47:af:ac:8b:67:95:d2:b8:71:18:80:67:85:
2f:c3:6f:c1:da:99:60:b5:eb:f6:f7:b2:74:3d:5a:59:1b:0d:
b6:0a:8d:32:98:9e:64:b4:3f:f6:73:d4:57:28:42:dc:3c:83:
ec:3a:71:9d:51:12:3f:65:30:f7:ba:de:00:7a:fa:b3:94:2c:
71:7e:36:df:db:99:ca:81:be:8a:28:a0:80:46:20:9b:8e:ae:
2f:9e:40:db:b7:1e:83:ca:1c:bb:8e:32:f3:02:fe:95:cd:74:
6c:28:fb:32:f2:ab:cd:99:d9:ea:47:07:5a:28:9a:4e:99:9d:
93:ab:ae:54:57:15:a2:f0:e0:86:e9:2f:f2:f0:f2:c5:15:6c:
57:4d:38:36:71:34:ca:33:74:e7:9a:16:ca:8f:67:a1:a9:31:
44:9b:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:22 2025 by rpki-client