Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: w5SyNe6+NKszsWx2Au5kzXQsh0qWQEP0RoQJj31nNl4=
Subject key identifier: 40:4F:AE:1B:F3:CE:49:C1:2A:CC:E6:9D:4A:33:30:EA:D7:BC:E1:24
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 0198D69824988F82A6DA48365D909C0D2472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: CSdbLJ5SCbP6/i4CfgdLO76fzDpUi/XFOsb3rp5r6Xk=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:24:98:8f:82:a6:da:48:36:5d:90:9c:0d:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=404fae1bf3ce49c12acce69d4a3330ead7bce124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:42:bb:54:43:2b:89:cf:d7:0e:12:b0:d6:
c2:41:99:bf:09:7e:fd:01:4b:ee:1b:31:76:bb:ed:
a2:4f:8e:f5:a2:37:3a:68:4b:fc:0c:88:17:ac:ec:
32:f9:30:18:f4:b0:b9:92:47:c2:b3:5d:9e:89:65:
5a:27:3a:4f:61:5e:0c:45:fc:6f:b7:2b:b4:4c:ab:
92:48:81:a0:f1:76:48:71:b1:89:85:0a:94:76:29:
a7:d6:63:fc:61:04:58:76:04:2e:31:f2:ef:cb:ad:
10:25:5d:60:64:08:ab:72:7e:c3:e7:b2:ae:3f:40:
cf:d1:46:b0:81:5b:b5:32:ee:69:7b:f5:b6:33:25:
df:f8:9e:5c:ae:24:de:b9:62:71:8f:ea:64:68:e0:
25:87:b7:08:45:23:72:e6:bf:78:72:70:a7:cb:c5:
b9:59:cb:e2:03:b7:36:0f:7c:92:09:b2:6c:c1:70:
2c:0d:74:95:b5:7f:4c:fc:c3:29:d6:03:e6:34:04:
14:4a:1e:9f:b6:bc:ab:9f:88:2b:9c:ae:a0:ac:bd:
f7:46:a8:70:4c:13:0c:37:38:56:81:6d:be:3a:40:
2a:03:f4:23:c6:a1:21:ae:92:e5:85:b6:28:10:18:
c9:51:7e:5a:ca:a3:d4:6b:aa:ed:d2:28:50:5b:b9:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4F:AE:1B:F3:CE:49:C1:2A:CC:E6:9D:4A:33:30:EA:D7:BC:E1:24
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:31:15:af:62:a7:50:26:50:b5:2a:08:68:2d:25:5f:9a:
66:45:57:a7:65:5a:ab:3c:38:60:87:04:91:67:6e:b3:0b:f5:
ac:1f:4d:69:a7:94:ba:ff:c8:f4:66:29:8b:27:43:0b:4f:30:
46:75:7c:bf:79:99:c5:cd:dc:c6:12:41:22:ef:6b:40:19:7a:
bc:58:71:55:ea:ec:5c:02:12:2c:f1:ea:e9:a7:55:bc:a3:1c:
84:a0:c6:83:32:af:4b:ae:71:7b:c1:9b:9c:6b:78:88:aa:df:
34:6a:5b:7e:c9:ba:58:0a:50:36:b7:b7:36:15:28:e2:a9:8b:
ce:f0:f0:2e:12:0b:f9:5d:14:77:09:59:6a:67:43:98:5e:18:
f9:2e:b8:84:55:a2:2c:ff:28:01:83:4e:e5:0b:ab:37:75:12:
e6:9d:79:4b:72:fe:2b:bb:9b:64:90:72:50:1e:25:10:cd:e8:
5c:dc:48:20:9f:12:b9:72:4b:79:cb:e6:d8:cf:eb:21:45:93:
f6:a6:93:2d:f5:ae:00:d2:e9:fc:65:f9:0f:5d:b5:f3:f5:23:
18:14:2d:1e:e3:56:36:54:47:12:26:38:0f:c6:ca:63:19:5a:
d3:4d:c0:2a:32:6f:3c:40:5f:2a:39:6f:a2:77:68:5d:eb:43:
76:af:e9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCSYj4Km2kg2XZCcDSRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjUwODIzMTEwMjMxWhcNMjUwODI0MTEwMjMxWjAzMTEwLwYDVQQD
Eyg0MDRmYWUxYmYzY2U0OWMxMmFjY2U2OWQ0YTMzMzBlYWQ3YmNlMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XZCu1RDK4nP1w4SsNbCQZm/CX79
AUvuGzF2u+2iT471ojc6aEv8DIgXrOwy+TAY9LC5kkfCs12eiWVaJzpPYV4MRfxv
tyu0TKuSSIGg8XZIcbGJhQqUdimn1mP8YQRYdgQuMfLvy60QJV1gZAircn7D57Ku
P0DP0UawgVu1Mu5pe/W2MyXf+J5criTeuWJxj+pkaOAlh7cIRSNy5r94cnCny8W5
WcviA7c2D3ySCbJswXAsDXSVtX9M/MMp1gPmNAQUSh6ftryrn4grnK6grL33Rqhw
TBMMNzhWgW2+OkAqA/QjxqEhrpLlhbYoEBjJUX5ayqPUa6rt0ihQW7nvSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBPrhvzzknBKszmnUozMOrXvOEkMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao0xFa9i
p1AmULUqCGgtJV+aZkVXp2Vaqzw4YIcEkWduswv1rB9NaaeUuv/I9GYpiydDC08w
RnV8v3mZxc3cxhJBIu9rQBl6vFhxVersXAISLPHq6adVvKMchKDGgzKvS65xe8Gb
nGt4iKrfNGpbfsm6WApQNre3NhUo4qmLzvDwLhIL+V0UdwlZamdDmF4Y+S64hFWi
LP8oAYNO5QurN3US5p15S3L+K7ubZJByUB4lEM3oXNxIIJ8SuXJLecvm2M/rIUWT
9qaTLfWuANLp/GX5D1218/UjGBQtHuNWNlRHEiY4D8bKYxla003AKjJvPEBfKjlv
ondoXetDdq/pGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:16 2025 by rpki-client