Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: 8N62LysYvDmaBI9KtBQjSzr5UfCvLLLfwiBob5QcqMg=
Subject key identifier: A4:B1:53:76:92:FE:A1:BA:39:02:BD:00:C7:C9:6D:8E:C5:0E:50:64
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 019873E3057F87FEFE69B7EA21E0BDDCF156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 059C
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: VK4Y3VA6ZeruWJ+FDE+nX+LWxO3Gm01ZmeRPq+Q4XxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:05:7f:87:fe:fe:69:b7:ea:21:e0:bd:dc:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=a4b1537692fea1ba3902bd00c7c96d8ec50e5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:b2:1d:63:37:68:07:68:b0:d1:ee:ec:d1:
f1:22:5f:36:f3:ae:42:4d:d5:76:f7:fd:da:fb:97:
77:af:33:90:27:38:5a:82:a9:ba:da:0f:51:6c:a7:
c0:7b:b2:43:eb:f5:e3:0b:04:ef:1f:04:31:80:32:
0d:6e:11:d3:db:9e:4a:74:37:d1:96:29:43:cd:5c:
11:77:59:3e:8b:ce:26:f3:b0:b2:ec:3a:be:39:0c:
a9:e2:34:10:fb:fd:32:c2:9a:d1:be:09:69:61:ae:
25:f9:46:f7:4f:5b:14:b6:5e:b9:92:9c:3a:34:3b:
39:98:07:14:f5:cc:54:bd:59:62:4a:7c:32:de:6c:
99:03:67:e2:0b:1a:14:5c:1c:f4:43:f7:0e:e4:f1:
3b:8e:76:20:ae:07:e5:c0:96:43:ae:81:ff:7f:5e:
44:eb:90:09:5f:87:74:76:d9:5a:28:77:ba:31:b8:
42:c1:0c:3c:39:03:5d:cd:30:9a:f2:77:c8:ac:d0:
66:50:1c:7a:25:22:c4:7e:87:86:14:2b:72:51:b5:
f8:90:5f:be:df:a6:4c:dd:be:01:2d:bf:ed:7b:dd:
b0:d4:33:dd:db:7b:0e:7c:a3:6b:73:5e:98:d0:97:
7b:5a:f8:1b:a7:41:35:e8:a0:89:92:65:61:74:e1:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:53:76:92:FE:A1:BA:39:02:BD:00:C7:C9:6D:8E:C5:0E:50:64
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8e:9a:65:dc:38:22:ba:26:3c:8b:14:dd:79:6a:5c:90:d9:
e1:b2:7f:bc:35:b0:35:eb:3c:3b:86:e2:d7:6a:c9:ac:cb:ca:
60:5b:91:37:8d:b9:88:00:f9:02:dc:f5:7b:2c:20:4c:5e:bf:
b3:7d:88:52:b3:67:06:11:ee:36:50:ee:59:19:36:6b:e9:89:
38:8a:76:02:77:43:07:98:32:da:92:5a:ca:db:17:c2:5c:94:
e3:09:7d:c9:47:bb:cd:07:97:05:f2:4a:bf:34:78:2a:c7:b8:
97:fd:ee:0f:b2:8e:b3:21:92:cc:d4:81:88:57:d7:7d:c6:ef:
93:2f:ab:92:fc:54:a5:d6:e7:ec:51:77:4f:a5:e5:5c:d5:b0:
d9:bf:f1:cc:37:39:50:cd:86:9c:86:f8:ae:a5:a2:f3:05:18:
f3:a3:38:d3:5a:e0:a4:ba:d6:54:4b:41:74:86:9e:3c:8e:a3:
6c:27:c2:b0:58:a1:22:53:47:b9:89:2c:90:4a:be:2b:96:5d:
2f:7f:db:56:9b:cf:fc:58:59:a8:aa:f4:43:86:0f:c5:2b:66:
6c:43:26:cb:ca:9a:fa:64:bc:3c:64:29:54:fa:77:97:e5:ee:
60:bd:6c:f0:01:1e:8d:32:5a:6f:67:ba:bc:6e:fe:4a:0e:b0:
ed:fc:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:29 2025 by rpki-client