Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: eISUwhDddPZGEPuwzz9VQ6dLNMuFyqVt6iiWuPaSPVE=
Subject key identifier: 29:A5:68:B8:E7:68:02:27:9A:22:61:73:1D:5D:B6:8F:F4:67:63:CC
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 0199FC218C29AC0E8F72D00CA6731DCAC8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: qTG+zc56S/OnAcD0CZXUF7PGP4oquqBE0VEfEwC/yNc=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8c:29:ac:0e:8f:72:d0:0c:a6:73:1d:ca:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=29a568b8e76802279a2261731d5db68ff46763cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:41:7e:2f:b4:c1:a0:f3:c3:5e:0f:4b:97:
cf:18:20:06:a9:cd:38:ab:7c:5a:0b:83:6c:48:bd:
83:5f:7d:5d:a0:4a:4a:ec:84:2e:da:7c:18:17:b2:
7f:c1:18:06:c9:69:ce:d0:ed:7b:7e:75:e2:9c:51:
68:48:82:bc:52:96:a7:d6:dc:ea:c2:40:57:2d:af:
ab:85:13:71:98:ce:dd:98:f8:05:03:bc:d8:80:ee:
0f:82:83:f1:78:5e:71:06:4f:c6:32:72:6c:21:c1:
70:c0:60:4f:46:df:7d:4b:27:9c:ed:5f:94:e6:64:
4a:2f:ed:31:99:de:6c:ce:27:e1:b2:57:a2:e9:4b:
ab:46:f4:44:cd:af:3d:71:af:11:c1:0a:db:d4:08:
f9:fa:c0:b5:34:78:3f:63:df:b6:65:c2:38:07:80:
3c:12:76:11:3b:e4:6a:a6:e2:e7:6f:7b:35:80:09:
f8:4f:ab:ea:dd:79:b2:1c:13:c1:c6:fb:eb:67:5e:
46:c8:05:a5:b1:02:e4:14:23:0d:ba:b5:77:a0:41:
7a:fe:63:c0:6c:a6:1e:01:69:29:78:0e:19:44:70:
ed:77:20:72:0e:41:c1:bf:ef:ad:a9:20:df:04:fd:
e7:1b:c4:9f:90:47:ea:f5:06:a7:b9:d0:e7:f8:8e:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:68:B8:E7:68:02:27:9A:22:61:73:1D:5D:B6:8F:F4:67:63:CC
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:61:7c:16:47:74:8e:f0:4f:97:78:7f:0d:fe:23:6c:c6:b6:
03:40:94:1b:05:53:5f:1c:74:e9:b9:97:01:4c:83:5a:b0:e9:
e9:13:ab:7f:c8:d3:dc:b1:50:00:77:fe:90:75:1a:67:2d:0b:
78:26:7a:d5:54:28:d7:04:03:82:f1:54:33:b1:25:f7:23:8e:
29:88:7c:2e:40:fc:87:82:42:d2:56:93:b1:56:09:20:80:ac:
b0:cc:11:36:3d:0c:77:a3:c5:52:84:11:77:49:5d:d4:81:2e:
34:95:9d:b8:1e:5b:43:84:8b:dc:29:b2:f0:3d:96:f6:4c:4c:
0e:be:6b:d5:1e:2a:a7:24:cd:cc:1b:5f:3b:ea:0b:63:df:4c:
e3:ae:a0:c5:80:b8:9b:fb:4e:51:5f:b5:35:84:db:26:03:c4:
37:25:31:a8:5f:47:67:f3:13:5a:a4:c0:fe:9b:e6:aa:25:fb:
b9:13:69:44:78:2b:65:d6:fb:e8:0c:73:42:21:ee:1a:f0:63:
e9:fc:b3:52:39:58:77:2e:30:ef:58:a3:18:c9:5d:56:65:34:
3c:5a:d5:26:54:19:8a:ee:0c:04:fe:7e:18:14:ec:29:75:6a:
8a:80:08:96:ba:79:64:7c:c5:0d:6e:95:58:69:7a:54:6b:d8:
d7:fc:b7:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYwprA6PctAMpnMdysjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD
EygyOWE1NjhiOGU3NjgwMjI3OWEyMjYxNzMxZDVkYjY4ZmY0Njc2M2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZxBfi+0waDzw14PS5fPGCAGqc04
q3xaC4NsSL2DX31doEpK7IQu2nwYF7J/wRgGyWnO0O17fnXinFFoSIK8Upan1tzq
wkBXLa+rhRNxmM7dmPgFA7zYgO4PgoPxeF5xBk/GMnJsIcFwwGBPRt99Syec7V+U
5mRKL+0xmd5szifhslei6UurRvREza89ca8RwQrb1Aj5+sC1NHg/Y9+2ZcI4B4A8
EnYRO+RqpuLnb3s1gAn4T6vq3XmyHBPBxvvrZ15GyAWlsQLkFCMNurV3oEF6/mPA
bKYeAWkpeA4ZRHDtdyByDkHBv++tqSDfBP3nG8SfkEfq9QanudDn+I6NRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmlaLjnaAInmiJhcx1dto/0Z2PMMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGF8Fkd0
jvBPl3h/Df4jbMa2A0CUGwVTXxx06bmXAUyDWrDp6ROrf8jT3LFQAHf+kHUaZy0L
eCZ61VQo1wQDgvFUM7El9yOOKYh8LkD8h4JC0laTsVYJIICssMwRNj0Md6PFUoQR
d0ld1IEuNJWduB5bQ4SL3Cmy8D2W9kxMDr5r1R4qpyTNzBtfO+oLY99M466gxYC4
m/tOUV+1NYTbJgPENyUxqF9HZ/MTWqTA/pvmqiX7uRNpRHgrZdb76AxzQiHuGvBj
6fyzUjlYdy4w71ijGMldVmU0PFrVJlQZiu4MBP5+GBTsKXVqioAIlrp5ZHzFDW6V
WGl6VGvY1/y3xA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client