Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: kEF+3W2wu1JuO6oPZZMd4UROFdzy2j14+dkoUKUZ1js=
Subject key identifier: 99:DE:9A:95:9C:97:A0:34:86:1B:62:D9:09:AD:FB:9A:27:FB:3F:8F
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019A4D3CD6C6D8BEFEA376B608BE461A6E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: JCu/cUQffX40PpNM24YToPcS8+3CVF/Wp7vRW66lN9I=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d6:c6:d8:be:fe:a3:76:b6:08:be:46:1a:6e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=99de9a959c97a034861b62d909adfb9a27fb3f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:37:02:5c:fd:c6:54:25:93:fc:1a:e5:f2:
a8:17:31:8e:9b:67:af:dd:25:de:67:4a:c1:fe:ea:
21:c0:6c:95:72:12:57:98:de:54:64:3a:a5:6f:05:
15:c6:15:90:ce:cd:2b:8c:c2:84:d4:b3:7f:03:56:
16:42:79:ad:b5:ac:9f:63:62:be:10:ac:1e:9d:5d:
22:88:f1:34:07:23:96:40:79:17:47:99:83:e9:0f:
8f:a1:4b:fd:c6:00:a6:c3:3f:3f:d5:d5:3a:47:fe:
5d:75:a2:1d:5a:32:df:4c:5e:5b:91:f1:c9:47:49:
e8:5e:51:a7:5d:cf:ea:ff:ab:54:2b:76:01:35:44:
f7:36:bf:b1:b4:e2:e0:80:b5:a2:01:c9:47:b4:96:
e5:74:a7:17:b8:80:ae:f3:2c:2e:71:af:b0:52:76:
b0:06:6d:57:34:91:c9:8c:27:26:7d:64:b6:4b:c7:
44:0d:18:80:04:d5:0f:be:ac:61:55:57:10:d0:cb:
90:4b:72:d4:25:93:62:b4:3c:c2:40:ac:4c:de:a3:
69:b6:71:a0:51:39:c6:6d:15:f8:15:38:25:91:74:
92:8a:75:0a:7d:91:76:c1:d3:43:41:b7:14:05:b5:
c0:98:76:74:dd:9d:de:2f:93:a5:d0:6d:8f:64:ef:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:9A:95:9C:97:A0:34:86:1B:62:D9:09:AD:FB:9A:27:FB:3F:8F
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0d:d2:87:29:dc:b4:7d:b8:d6:59:7f:8c:5f:a5:e5:2b:76:
0f:d6:90:da:de:9b:4a:f3:6b:bd:24:d3:cf:ef:10:5b:42:3f:
b3:20:6c:2f:7c:e6:24:85:71:d5:4b:47:7e:b0:f6:f8:37:58:
94:fc:a1:8f:dd:a7:bf:e2:09:95:aa:69:bb:18:a6:8c:78:31:
a7:eb:d9:56:54:24:03:27:de:32:7f:c8:37:53:d9:ad:aa:bc:
75:4e:b0:37:11:2c:49:1b:6b:3c:c0:23:04:da:d6:8f:dc:77:
cb:8d:51:22:fa:c1:98:38:df:41:01:d4:a6:37:f6:14:ec:9a:
05:6f:4d:44:b2:99:ca:e9:67:c2:a9:75:16:82:19:33:2d:7f:
f6:71:f9:98:35:cb:85:19:fd:ae:49:12:74:68:89:af:e0:c5:
fc:35:e4:03:3f:a9:de:3b:03:63:60:89:37:a1:61:b5:85:b7:
c8:d6:77:b8:a0:a8:37:ed:dd:a0:f2:60:19:58:2b:f0:f9:15:
7b:7c:35:f1:60:7a:72:88:36:e8:4f:51:4c:d8:7a:45:3d:d7:
e5:40:49:67:46:bc:5b:4b:b2:61:c4:d4:52:e7:e5:81:13:57:
05:1d:1b:c0:d8:2b:07:91:b0:fa:ff:95:e1:87:8b:d7:6f:e8:
5a:c4:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:31 2025 by rpki-client