Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: UERMf+RBtknAdOrt10WL5SYRwwsnRB0Xen/uWZ9KMR8=
Subject key identifier: E3:4F:88:50:2D:57:5C:B0:8C:FC:DC:3A:9A:B0:FE:33:92:D7:AC:AF
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019A51506CE948A67AF843BFF105772FEFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 00:00:16 +0000
Manifest this update: Wed 05 Nov 2025 00:00:16 +0000
Manifest next update: Thu 06 Nov 2025 00:00:16 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: PAXNGjWeWHl/eUhG8ZcWxdzr63RnsUZJicLMJDTzQiE=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6c:e9:48:a6:7a:f8:43:bf:f1:05:77:2f:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Nov 5 00:00:16 2025 GMT
Not After : Nov 6 00:00:16 2025 GMT
Subject: CN=e34f88502d575cb08cfcdc3a9ab0fe3392d7acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:bc:28:e4:e4:8c:13:72:f8:56:95:77:9d:
18:e4:e8:b6:19:5a:4b:aa:0a:31:56:bd:64:eb:08:
20:14:24:25:e1:78:cb:62:1d:ee:54:57:ee:55:a9:
c0:45:af:bf:d7:5e:8f:00:70:45:90:5c:25:61:d0:
0b:43:11:a7:44:63:26:04:6e:7d:ee:e3:5d:8e:a5:
58:62:c8:76:d4:f3:4d:1f:25:e3:32:ec:e6:b5:79:
0d:2f:fb:52:43:92:82:2e:66:75:61:ce:5d:29:ce:
97:f7:50:40:61:48:d3:36:85:08:c5:0e:d7:e2:e7:
c0:1c:3c:be:5e:31:e7:0d:b9:14:a6:fb:15:16:fb:
f4:86:62:93:21:4f:7c:38:c5:58:08:a3:38:c8:cd:
0f:f1:21:4d:ac:dd:ae:a9:40:57:e7:e4:0e:dc:d1:
97:90:1d:56:38:17:ff:28:e8:1e:43:c3:df:c1:44:
a2:3d:20:d3:a7:ee:84:f1:66:e1:56:2f:71:18:1c:
fc:08:7c:88:36:5e:f6:44:a4:de:63:b2:0b:ef:c8:
ae:fc:d3:8f:f7:a1:d4:85:50:af:93:ea:5c:8a:26:
a3:cb:cc:68:e6:cb:3b:d8:b8:27:54:ba:f6:09:8d:
6e:1c:a0:f9:58:1c:f8:fc:94:7b:87:f9:c9:a0:e5:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:88:50:2D:57:5C:B0:8C:FC:DC:3A:9A:B0:FE:33:92:D7:AC:AF
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:a6:f1:1c:c8:b8:ea:9d:00:3f:b2:0d:d6:6f:d9:c8:69:
47:83:e8:3e:d7:6b:cc:87:82:8b:c1:b3:e9:35:e9:4f:6c:d2:
2e:65:f2:55:1e:d0:07:03:a9:f8:18:39:86:05:17:dc:77:c7:
f6:10:8f:b0:a7:55:ab:60:c5:a0:c3:09:f2:5f:f5:a3:14:e4:
10:ff:e4:c1:f2:27:3d:c9:2a:fa:bf:b0:42:26:cf:44:0b:e4:
41:fc:de:b9:2f:3c:5c:96:fc:29:de:eb:bd:b9:ad:a6:be:aa:
91:99:28:b4:b4:2c:e1:63:22:0e:90:db:5a:f5:6a:03:2e:e8:
12:00:6f:40:ab:96:79:96:71:d3:39:05:ef:98:bf:5c:6f:b2:
d5:8f:82:12:11:f9:90:59:73:d4:bf:bf:44:d6:b0:92:37:53:
a0:11:b4:39:6e:72:1f:2d:66:b0:6a:f8:91:cf:ab:c9:29:05:
c1:e1:a2:7a:db:48:0a:d2:3d:e7:ca:06:8f:72:68:cb:bc:d2:
99:f1:81:bf:45:c0:e5:08:35:b5:ef:0a:2c:7e:ba:51:af:41:
d7:ca:b4:42:d6:c7:a1:0e:86:03:c6:ef:2b:cf:b0:33:22:21:
cd:da:2e:4c:78:59:81:03:78:b2:b8:2d:56:2e:19:f6:d1:67:
78:2f:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:46 2025 by rpki-client