Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: F6JeGC/ypudB5CB0EmybrO6wq+ME8CZsMj3xtPd8+vo=
Subject key identifier: 96:54:EE:D7:0F:42:2F:35:A6:CC:D7:CE:71:4B:66:3D:99:00:FD:16
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019A2A7A1FE3560067033746AB15B8A98A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 11:00:37 +0000
Manifest this update: Tue 28 Oct 2025 11:00:37 +0000
Manifest next update: Wed 29 Oct 2025 11:00:37 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: HboUKJhUFJrRPUdofWz06D0ULQCm3VucY512bxQcfQg=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:1f:e3:56:00:67:03:37:46:ab:15:b8:a9:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Oct 28 11:00:37 2025 GMT
Not After : Oct 29 11:00:37 2025 GMT
Subject: CN=9654eed70f422f35a6ccd7ce714b663d9900fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:4b:2f:13:18:84:0a:ad:ba:dc:79:2e:63:
58:c9:6d:3e:0a:d7:a9:b0:b6:7f:7d:f0:06:0b:56:
0e:cc:fe:fc:16:ee:fd:4e:bc:97:7e:ed:1e:b5:6a:
12:95:1d:78:c9:c5:aa:db:1f:0e:4e:ab:ba:c1:90:
af:3c:ca:c1:f4:d2:d5:bf:52:43:db:ba:c7:ae:7f:
2b:61:06:09:88:20:d0:41:32:54:0e:bb:38:ce:69:
0d:64:73:0e:ba:55:29:17:44:2a:40:69:c5:5a:5c:
79:cf:3c:49:e0:70:1e:9e:5a:8c:11:db:ea:75:f2:
d3:3f:bf:4a:e0:84:44:87:ef:e4:6d:3f:e2:7d:73:
7d:27:ac:de:bc:52:09:49:a4:3e:68:7e:2f:86:9a:
82:57:4a:17:a5:80:4b:c8:c9:7b:47:94:9c:9e:f0:
9b:06:ac:85:42:67:7c:05:b0:a4:5d:29:ad:67:f3:
9a:29:c7:a2:d0:af:d9:17:5d:86:86:e5:8d:4f:54:
22:2b:9b:b0:6a:70:eb:51:b6:57:df:9c:eb:97:f1:
cc:40:7a:a2:50:ca:2c:e6:96:e9:b9:80:68:c8:e3:
fe:45:12:0f:d0:49:e1:09:ac:fa:b8:57:f8:d5:ae:
65:8e:7d:42:b5:0c:03:fd:81:cc:f0:ce:e3:7c:74:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:EE:D7:0F:42:2F:35:A6:CC:D7:CE:71:4B:66:3D:99:00:FD:16
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:06:6d:7c:eb:14:4b:55:38:0d:76:5e:e0:76:58:df:96:
de:cf:8a:9b:4c:4c:b9:3f:24:e3:1f:ea:8a:0b:11:43:e7:29:
93:e9:c3:a1:2c:f4:72:69:83:4b:1c:3a:ff:47:9a:15:ae:ae:
d1:4f:83:a1:c9:fa:08:18:3c:a7:a3:9e:bc:85:bc:21:b9:b0:
d5:7f:72:f7:ee:50:89:ab:8d:22:12:ec:de:00:85:a2:04:d2:
ae:3c:90:71:a5:a0:9e:db:6b:77:d0:e3:d6:f2:33:1e:d8:eb:
46:3d:53:ce:71:48:fe:da:eb:9c:97:55:7c:45:df:d7:d7:76:
d3:c3:b7:55:91:c8:78:94:30:da:3b:28:66:7c:49:00:24:a8:
97:53:83:71:35:28:9b:42:22:72:41:6c:8c:d8:95:29:65:c7:
a7:49:4d:87:de:f8:c7:18:2f:12:22:72:cc:da:62:5e:09:ad:
a1:2f:84:f6:69:aa:11:a4:ea:57:90:8a:07:14:98:ab:64:cd:
ac:5d:b1:96:c6:8a:d6:bb:74:9c:3e:62:27:eb:93:d7:06:e0:
76:ea:5c:3b:9e:1d:fc:8c:4e:00:bb:8c:92:be:99:62:2e:a4:
15:2e:90:e4:f8:18:d9:5f:4c:e6:52:9a:6b:3a:f5:a1:e6:2d:
60:56:d0:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqeh/jVgBnAzdGqxW4qYpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkM2ZmNzExNTFhNDVlZDM5ZmIxZGE1ZmZiNDAzMmVkNzRm
YTE5YzUwHhcNMjUxMDI4MTEwMDM3WhcNMjUxMDI5MTEwMDM3WjAzMTEwLwYDVQQD
Eyg5NjU0ZWVkNzBmNDIyZjM1YTZjY2Q3Y2U3MTRiNjYzZDk5MDBmZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphlLLxMYhAqtutx5LmNYyW0+Ctep
sLZ/ffAGC1YOzP78Fu79TryXfu0etWoSlR14ycWq2x8OTqu6wZCvPMrB9NLVv1JD
27rHrn8rYQYJiCDQQTJUDrs4zmkNZHMOulUpF0QqQGnFWlx5zzxJ4HAenlqMEdvq
dfLTP79K4IREh+/kbT/ifXN9J6zevFIJSaQ+aH4vhpqCV0oXpYBLyMl7R5ScnvCb
BqyFQmd8BbCkXSmtZ/OaKcei0K/ZF12GhuWNT1QiK5uwanDrUbZX35zrl/HMQHqi
UMos5pbpuYBoyOP+RRIP0EnhCaz6uFf41a5ljn1CtQwD/YHM8M7jfHQI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZU7tcPQi81pszXznFLZj2ZAP0WMB8GA1UdIwQY
MBaAFA0/9xFRpF7Tn7HaX/tAMu10+hnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUt
YTZjYjA1NGFjOTdiLzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lYTlkOTktNzM4Yi00YmFhLWI0NTUtYTZjYjA1NGFjOTdi
LzEvRFRfM0VWR2tYdE9mc2RwZi0wQXk3WFQ2R2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepkGbXzr
FEtVOA12XuB2WN+W3s+Km0xMuT8k4x/qigsRQ+cpk+nDoSz0cmmDSxw6/0eaFa6u
0U+Docn6CBg8p6OevIW8Ibmw1X9y9+5QiauNIhLs3gCFogTSrjyQcaWgnttrd9Dj
1vIzHtjrRj1TznFI/trrnJdVfEXf19d208O3VZHIeJQw2jsoZnxJACSol1ODcTUo
m0IickFsjNiVKWXHp0lNh974xxgvEiJyzNpiXgmtoS+E9mmqEaTqV5CKBxSYq2TN
rF2xlsaK1rt0nD5iJ+uT1wbgdupcO54d/IxOALuMkr6ZYi6kFS6Q5PgY2V9M5lKa
azr1oeYtYFbQaw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 18:41:37 2025 by rpki-client