Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: S6FgyKDzi+oqaSPh35xZgYQy5+nzUkRID9y0MnbwYdk=
Subject key identifier: 3C:F3:05:80:E2:DD:C9:88:4D:54:B3:1F:E8:BB:8A:CE:0E:14:5F:87
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019881D4BA7FAB9FD1B943D9190E87E34208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 00:00:58 +0000
Manifest this update: Thu 07 Aug 2025 00:00:58 +0000
Manifest next update: Fri 08 Aug 2025 00:00:58 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: Z+TqneW4TVkaTmY2Sd5FCCttr3B4VIkHlaQUBguWQZ0=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:ba:7f:ab:9f:d1:b9:43:d9:19:0e:87:e3:42:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Aug 7 00:00:58 2025 GMT
Not After : Aug 8 00:00:58 2025 GMT
Subject: CN=3cf30580e2ddc9884d54b31fe8bb8ace0e145f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:78:6d:9c:05:f7:63:41:c2:04:af:c2:a1:
d8:97:e6:43:bf:a9:f9:8b:bc:cc:37:e7:d7:1d:42:
c2:af:20:0a:00:b7:2e:ab:1b:f4:37:68:30:5b:94:
cd:1c:81:a5:44:07:cf:03:0b:87:bd:d7:5b:5c:8d:
72:32:42:8d:26:d8:25:63:c8:9d:0d:ad:45:71:aa:
f7:4e:eb:ba:49:d6:2f:3c:14:8e:ed:28:f2:7d:ba:
0b:8e:9b:d8:8a:66:d9:5f:e3:2c:6f:f1:2a:72:f4:
01:4e:d4:71:7c:fd:f8:27:0f:5a:9a:f0:a3:ad:93:
b7:d4:1c:3c:4c:28:00:71:d6:6f:07:61:a4:7e:3e:
0e:97:f6:b3:cf:56:d3:b5:aa:2c:e7:ee:dd:4a:8c:
d3:c6:59:80:dc:3a:0a:b8:c5:f4:22:bf:61:f8:72:
4d:22:a1:eb:c7:01:ea:7b:73:64:dc:41:7e:e8:88:
48:f9:1b:1f:ed:8c:50:dc:c3:f7:71:44:7c:55:62:
3f:da:f0:12:dc:54:55:96:9e:c9:62:1a:6d:2c:cd:
9f:a5:28:a4:c1:1c:3e:cd:e2:65:64:94:7e:13:78:
23:96:a3:30:ec:24:9e:5f:9e:9e:82:d0:5d:c7:bc:
db:7c:3c:b7:96:80:e8:55:c8:40:fd:62:da:e0:d9:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:05:80:E2:DD:C9:88:4D:54:B3:1F:E8:BB:8A:CE:0E:14:5F:87
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:3e:a6:f4:b5:07:bb:8b:ef:ca:ae:fb:55:46:cd:76:71:
ec:16:89:69:86:de:8f:b1:21:c1:7f:57:03:7a:18:5d:45:9c:
5f:20:72:dd:7b:2d:68:26:f5:a1:3f:3d:00:22:42:0e:0a:73:
e4:24:d5:db:b3:99:c8:d1:1f:87:46:2e:57:85:71:55:dd:8f:
9e:1d:eb:19:39:51:d5:51:9c:68:ce:3f:c9:a5:b8:94:01:d0:
18:11:2d:35:ab:0c:60:2e:36:ff:89:0b:ca:a2:2c:ba:9b:b1:
62:a9:c1:56:2b:f7:78:c7:3f:4c:10:58:77:d6:50:86:95:ba:
44:6e:8f:8f:5e:1d:0d:de:1f:93:b2:50:db:d8:a8:fc:db:da:
92:89:52:dd:75:e0:a9:4e:11:9f:2f:ca:42:3b:ee:d4:e4:dc:
c7:8b:9d:7d:af:b8:fb:87:21:e7:e8:43:0a:3a:7b:4c:95:7e:
f1:a4:b5:dd:f2:56:f9:3c:00:7d:52:b4:ca:af:09:9d:8c:18:
2a:09:cc:ee:5a:d5:3b:94:ff:ee:50:ea:15:c0:54:1f:46:ef:
24:62:76:a2:94:d8:f1:45:1f:53:a5:ad:ff:a5:6b:c3:e8:ff:
41:95:72:dd:38:52:77:ae:54:61:4d:a9:ac:5d:89:39:01:c4:
89:49:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:32:26 2025 by rpki-client