Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: wx103BFQwAhlNrdVo2jtqzu65fsci5x1wnZnvit5eg4=
Subject key identifier: 81:A2:22:B3:35:53:9E:0B:60:99:C8:CE:E8:83:61:88:F5:1C:BB:04
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 01976BBCED3A87D10F14E9C16FF040D5A4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 00:00:32 +0000
Manifest this update: Sat 14 Jun 2025 00:00:32 +0000
Manifest next update: Sun 15 Jun 2025 00:00:32 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: gl/AYJqhW9G0QwmW8+/hVG1WLQsLYsDEl6pu/woZcdE=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:ed:3a:87:d1:0f:14:e9:c1:6f:f0:40:d5:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jun 14 00:00:32 2025 GMT
Not After : Jun 15 00:00:32 2025 GMT
Subject: CN=81a222b335539e0b6099c8cee8836188f51cbb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:38:bd:bb:ea:cf:23:d2:43:62:f4:a5:70:
ab:05:05:ff:67:a9:a3:08:12:4f:2d:53:92:1e:ca:
04:6a:79:22:e3:47:e6:de:f8:d9:31:86:cd:85:12:
74:39:db:0e:c8:5e:b7:99:2d:2d:51:2a:b2:be:ad:
1f:8e:cc:76:3a:4b:a2:77:29:d6:9c:dd:e0:ae:41:
16:b9:f6:82:ac:9a:d3:64:5a:cd:76:aa:31:9d:a0:
21:e4:27:94:7c:6c:bf:1c:7a:2a:6f:65:da:5c:a4:
55:69:bd:dc:f1:7e:f3:9a:d9:ca:9a:05:78:fb:16:
46:51:ee:9e:46:2a:45:5b:5f:f6:1e:8c:14:79:fb:
72:3e:a9:58:b8:c4:19:f5:a0:1c:5b:0b:a0:f2:db:
05:49:e5:6b:5a:a5:4c:21:d1:bb:26:84:c3:8c:f5:
5c:3f:be:4b:e1:e5:c4:60:98:e3:73:e5:40:c2:7b:
13:87:dd:42:b0:36:ad:69:c0:5d:3b:30:54:0f:6d:
ba:a5:8a:14:84:f0:0d:2c:33:27:31:1e:45:e2:af:
62:92:f9:55:89:bf:78:86:e8:91:e7:c6:45:9d:14:
2b:6a:49:ff:2d:e9:6d:8f:a5:50:4b:82:a0:75:35:
a5:66:ff:08:35:b1:42:67:2c:87:f5:34:26:91:c4:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:22:B3:35:53:9E:0B:60:99:C8:CE:E8:83:61:88:F5:1C:BB:04
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:ba:01:e4:1a:60:e1:f2:4a:f2:3a:e7:bc:8a:f5:ef:d7:
b3:9f:cb:29:54:3a:ea:5c:d8:af:02:8a:bc:9b:90:09:8b:56:
92:1a:4c:45:17:34:3e:46:24:7d:a1:e2:64:a1:c9:c4:44:2d:
01:af:aa:54:fa:b5:4b:d0:43:79:34:e6:ce:97:80:13:77:18:
9f:fb:d4:14:03:17:34:7c:c4:3c:a5:87:bc:63:9c:91:f1:a1:
10:ae:e3:77:2f:12:f3:77:74:37:41:69:14:92:5a:97:99:4e:
90:d0:c9:ef:9e:d4:ab:66:d8:5a:5b:66:4e:f3:09:3a:2b:aa:
2a:db:2d:fe:db:e0:1e:42:58:3f:3c:73:e5:02:d5:70:4c:3e:
7a:69:c4:4d:22:55:d1:c3:ef:f6:f2:26:96:d0:63:55:6a:95:
0f:c6:8a:62:9a:8f:d6:e3:4d:1f:f8:f4:b9:fa:56:49:0c:51:
d9:ce:52:e8:8a:ad:21:e6:a2:58:a4:c7:08:2e:6a:71:de:06:
8a:ea:76:53:54:c9:04:7e:8e:bb:f1:90:7d:f0:5c:78:48:6a:
23:b9:2f:9d:3c:14:23:4b:da:dd:a8:56:1d:33:f3:fb:ae:8e:
b6:5a:16:14:07:71:b0:11:85:78:29:0b:ca:b3:2c:e8:7e:da:
19:07:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:30 2025 by rpki-client