Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
File: 66AaOmQRSwG_h52Kib6dFTF3bjs.mft (raw, json)
Hash identifier: jbSqkuOwUp5wX3ns/1+4ANHSkPmmQAI8vnoV04Ha0iI=
Subject key identifier: AF:69:70:F1:BE:A9:40:C8:51:93:7F:94:71:7A:5E:F8:B8:EE:CE:DE
Authority key identifier: EB:A0:1A:3A:64:11:4B:01:BF:87:9D:8A:89:BE:9D:15:31:77:6E:3B
Certificate issuer: /CN=eba01a3a64114b01bf879d8a89be9d1531776e3b
Certificate serial: 0199233163233C14A2E0033CB9A06BFDBCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66AaOmQRSwG_h52Kib6dFTF3bjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
Manifest number: 51
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: 66AaOmQRSwG_h52Kib6dFTF3bjs.crl (hash: xcW7+rR+Y85N3S/LqtT5Ys1KIOY5C4E6KiLc5TWw6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/66AaOmQRSwG_h52Kib6dFTF3bjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:63:23:3c:14:a2:e0:03:3c:b9:a0:6b:fd:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba01a3a64114b01bf879d8a89be9d1531776e3b
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=af6970f1bea940c851937f94717a5ef8b8eecede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:ec:18:4d:5a:a1:d6:1e:95:9f:ef:a0:6d:
b6:48:d6:1f:88:cd:b0:6f:06:8c:33:6b:da:83:67:
27:90:62:49:57:57:67:72:d0:b5:9a:9d:23:6a:1f:
ad:00:b5:4b:2e:ca:59:e4:ac:16:7a:84:93:cd:a9:
fc:c9:ca:2d:75:b1:a1:b8:36:a3:5c:90:b4:9c:a0:
54:2e:47:a8:fe:5a:83:86:f4:b5:9d:68:ad:ea:5f:
9e:9e:65:02:11:f6:a4:df:58:e8:f7:4c:c5:b2:e0:
1f:f5:69:61:d9:6c:c1:6c:89:9f:98:e6:10:9b:8b:
4d:c0:8d:29:8f:3a:84:47:0d:a6:f3:02:d0:f1:d7:
d5:8d:2d:e8:30:80:6c:b3:3c:2b:e6:aa:8e:11:e9:
f5:74:db:dd:6c:3d:06:25:5e:c0:ad:68:9b:45:72:
94:8e:74:dc:5d:c5:f2:a5:2c:54:56:59:0b:8a:4d:
e7:db:35:ad:ee:bc:22:6a:52:1e:4b:67:d7:8d:14:
3f:40:96:b0:ac:40:92:92:34:f9:de:6b:2a:f2:56:
30:a6:b6:ad:c6:47:c4:77:51:58:1d:4b:c9:e1:1d:
a6:d1:18:1d:13:c5:4c:ef:33:c8:49:04:09:d0:f7:
90:39:64:64:89:42:51:85:3f:d1:23:4b:af:0a:a7:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:70:F1:BE:A9:40:C8:51:93:7F:94:71:7A:5E:F8:B8:EE:CE:DE
X509v3 Authority Key Identifier:
keyid:EB:A0:1A:3A:64:11:4B:01:BF:87:9D:8A:89:BE:9D:15:31:77:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66AaOmQRSwG_h52Kib6dFTF3bjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/66AaOmQRSwG_h52Kib6dFTF3bjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:96:d4:12:89:82:98:3b:22:78:77:61:f7:e8:61:9b:50:29:
eb:2a:66:11:88:70:22:01:91:23:c2:ee:04:7d:a9:be:ec:5c:
4e:7e:b5:6e:63:47:be:01:db:02:0e:fa:8f:2b:e2:ca:ad:be:
d9:f2:1e:71:27:b3:2e:48:00:88:72:c4:21:d6:7c:78:32:bf:
5e:e6:02:d5:95:05:89:64:ff:39:f9:8a:aa:04:c3:bc:86:44:
33:f2:d9:6d:60:fa:2c:a5:bf:9e:03:c0:56:8a:36:28:ad:9a:
4d:5b:07:40:60:c1:76:de:70:a0:d7:63:91:a2:63:de:b8:4f:
51:89:74:ea:77:61:f0:44:d7:30:a0:4a:d2:80:0c:7e:fd:95:
3c:94:3f:22:ca:27:44:d7:8f:3f:d3:a5:2d:13:17:32:86:92:
93:d8:be:51:7b:c6:84:2a:f7:d7:bc:66:72:19:ad:4e:f1:03:
30:17:98:53:06:19:3c:6c:67:08:61:70:d9:98:7c:99:70:9d:
63:d4:2e:fd:2a:bd:f0:f0:a8:a0:ac:f1:56:23:f5:c2:13:be:
e0:68:4a:1b:dc:1c:2a:c9:8f:5e:b2:f6:da:48:28:52:8e:5d:
d0:c5:79:0e:f2:82:04:f2:b6:58:28:05:56:7d:19:f5:9c:1c:
0c:83:fe:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMWMjPBSi4AM8uaBr/bz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYTAxYTNhNjQxMTRiMDFiZjg3OWQ4YTg5YmU5ZDE1MzE3
NzZlM2IwHhcNMjUwOTA3MDgwMTAzWhcNMjUwOTA4MDgwMTAzWjAzMTEwLwYDVQQD
EyhhZjY5NzBmMWJlYTk0MGM4NTE5MzdmOTQ3MTdhNWVmOGI4ZWVjZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45XsGE1aodYelZ/voG22SNYfiM2w
bwaMM2vag2cnkGJJV1dnctC1mp0jah+tALVLLspZ5KwWeoSTzan8ycotdbGhuDaj
XJC0nKBULkeo/lqDhvS1nWit6l+enmUCEfak31jo90zFsuAf9Wlh2WzBbImfmOYQ
m4tNwI0pjzqERw2m8wLQ8dfVjS3oMIBsszwr5qqOEen1dNvdbD0GJV7ArWibRXKU
jnTcXcXypSxUVlkLik3n2zWt7rwialIeS2fXjRQ/QJawrECSkjT53msq8lYwprat
xkfEd1FYHUvJ4R2m0RgdE8VM7zPISQQJ0PeQOWRkiUJRhT/RI0uvCqdjrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9pcPG+qUDIUZN/lHF6Xvi47s7eMB8GA1UdIwQY
MBaAFOugGjpkEUsBv4ediom+nRUxd247MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZBYU9tUVJTd0dfaDUyS2liNmRGVEYzYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84ZWRkZjItN2Q3Yy00NGEzLWIwZmQt
MTEwYjc2OGJmNGMwLzEvNjZBYU9tUVJTd0dfaDUyS2liNmRGVEYzYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84ZWRkZjItN2Q3Yy00NGEzLWIwZmQtMTEwYjc2OGJmNGMw
LzEvNjZBYU9tUVJTd0dfaDUyS2liNmRGVEYzYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5bUEomC
mDsieHdh9+hhm1Ap6ypmEYhwIgGRI8LuBH2pvuxcTn61bmNHvgHbAg76jyviyq2+
2fIecSezLkgAiHLEIdZ8eDK/XuYC1ZUFiWT/OfmKqgTDvIZEM/LZbWD6LKW/ngPA
Voo2KK2aTVsHQGDBdt5woNdjkaJj3rhPUYl06ndh8ETXMKBK0oAMfv2VPJQ/Ison
RNePP9OlLRMXMoaSk9i+UXvGhCr317xmchmtTvEDMBeYUwYZPGxnCGFw2Zh8mXCd
Y9Qu/Sq98PCooKzxViP1whO+4GhKG9wcKsmPXrL22kgoUo5d0MV5DvKCBPK2WCgF
Vn0Z9ZwcDIP+9g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:44 2025 by rpki-client