Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 1AkYPyOUWL9xqRa5BVlV1lmONaDToaQRqWJ9EayNfPA=
Subject key identifier: 89:AF:E5:09:07:17:9B:E5:15:B9:FA:27:D0:75:29:3A:BC:38:F9:38
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 01976F2C6719A303BFC96FD40E465498F770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 0515
Signing time: Sat 14 Jun 2025 16:01:10 +0000
Manifest this update: Sat 14 Jun 2025 16:01:10 +0000
Manifest next update: Sun 15 Jun 2025 16:01:10 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: 51flLe1xJSzdX88j1Y6KvY5HTxoXC8PNhnJle1ROUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:67:19:a3:03:bf:c9:6f:d4:0e:46:54:98:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jun 14 16:01:10 2025 GMT
Not After : Jun 15 16:01:10 2025 GMT
Subject: CN=89afe50907179be515b9fa27d075293abc38f938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:2c:38:05:f7:5d:ea:7e:80:e0:55:79:bb:
4b:24:9a:87:4f:1c:87:9c:de:ee:0f:34:ce:54:e4:
e8:8c:63:72:f3:9f:e2:5d:29:2a:65:ca:72:76:b1:
ef:fe:21:97:6f:ec:7a:6c:41:0a:c3:c6:53:68:e0:
11:02:31:1d:7e:86:35:5e:82:e6:e3:c4:98:49:c7:
c8:8f:c2:1d:4b:b2:83:1f:e1:0d:f5:95:40:a2:b6:
9a:b2:a4:7b:8e:57:93:b2:dc:4b:72:22:69:03:9c:
05:af:f8:b9:48:20:36:29:e3:4f:f0:f3:19:ae:7b:
06:ea:e3:e3:4c:83:8e:fd:45:2d:e2:df:c6:da:f6:
85:49:41:ee:9f:99:26:36:79:04:cc:31:f9:04:e2:
b2:93:07:b8:c2:d9:65:84:ff:50:a9:27:94:dd:9d:
b6:a4:e9:ed:98:67:cc:d3:64:96:b2:84:0f:d7:2a:
f6:79:e4:52:78:7d:74:89:b9:03:6f:2b:e3:5c:16:
a8:29:ac:b2:81:90:0f:c3:9e:c6:4b:17:ba:d6:0b:
2a:d1:a6:52:96:50:9e:dc:ad:86:f9:d8:8a:65:ff:
96:31:b9:0c:f3:89:4e:a6:ab:c0:64:82:68:17:78:
cf:8a:af:1e:6d:ad:80:ad:48:79:03:f0:a2:bb:bc:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:E5:09:07:17:9B:E5:15:B9:FA:27:D0:75:29:3A:BC:38:F9:38
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:79:bb:62:be:a4:f5:34:d2:81:41:56:08:cb:82:8f:c7:
2b:34:b6:d8:bf:a1:17:8c:9c:cc:ec:45:c2:9a:36:30:b4:e7:
76:ff:11:64:9b:b8:db:f0:46:5e:92:8f:44:61:1f:58:09:25:
e8:ad:9a:05:7a:5c:45:67:fe:44:22:a0:ec:31:d2:88:e4:ba:
e8:c3:13:a1:4d:57:c4:14:e6:f5:1f:21:ea:9b:61:a1:37:6e:
4a:49:d8:95:88:37:89:59:7b:67:ae:d8:ad:69:64:27:9c:2f:
ce:5e:78:b5:c1:44:d4:dc:a1:50:75:1f:68:5a:13:b1:c5:65:
a0:b8:69:47:60:a7:f6:8e:a1:a6:6d:fc:1e:dd:ec:64:28:0b:
67:70:7a:14:cb:7f:75:aa:27:e0:38:95:f0:26:f7:23:ae:34:
b2:c3:67:af:25:56:cf:93:01:71:b7:56:c3:f0:32:94:45:cb:
9c:13:d0:91:37:5c:50:fc:17:90:94:db:3d:49:b1:d2:e2:e3:
38:44:06:1b:47:cc:b2:21:8a:13:e3:1c:72:6b:f1:b6:2a:41:
4b:77:f8:95:d3:e6:a6:3e:f0:83:fe:22:64:60:7a:6e:2e:c4:
ee:e7:60:21:f5:d8:eb:94:8b:db:6f:89:49:31:8b:89:cf:12:
14:7f:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:43 2025 by rpki-client