Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: 5d6u7To2Pc+dOfyElR3n3P89rZHcFHUzzD+MF70f+MM=
Subject key identifier: EF:00:10:48:19:19:00:76:CB:A5:87:9B:E2:C5:9C:49:37:50:9A:EA
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 01988B45867F79BA79F9AA06584986AE6BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 20:00:46 +0000
Manifest this update: Fri 08 Aug 2025 20:00:46 +0000
Manifest next update: Sat 09 Aug 2025 20:00:46 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: suyth6xbFgQ4cm2b/vjAW/LoqVb4eagRh2E+JO4Bcxo=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:86:7f:79:ba:79:f9:aa:06:58:49:86:ae:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Aug 8 20:00:46 2025 GMT
Not After : Aug 9 20:00:46 2025 GMT
Subject: CN=ef00104819190076cba5879be2c59c4937509aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:fb:50:db:4c:88:99:c2:da:1d:4d:51:68:
0c:ed:49:6c:4f:01:b1:cd:cb:ee:be:b3:bf:7d:a3:
30:c9:73:83:00:ad:85:6e:73:d2:a0:b5:88:77:f4:
84:fe:98:6c:f3:79:a9:95:3f:8d:37:b9:97:71:df:
02:38:fe:95:70:a2:61:67:e4:dc:31:9a:02:26:ef:
3c:60:88:66:c7:54:71:76:f5:7b:f8:d3:84:59:85:
82:8e:0a:4f:94:b9:59:87:de:43:c1:a8:08:3f:45:
0a:1c:bd:dc:9d:02:cd:70:40:db:eb:a5:ef:4a:24:
15:49:4a:f6:ee:85:a1:8a:90:5b:ea:34:c5:30:5f:
25:05:be:4f:2f:09:f7:86:61:2a:aa:a0:58:01:88:
28:cd:8c:6a:f8:49:f9:67:98:9d:ea:64:11:6a:c0:
45:85:3c:e1:8b:be:aa:99:3d:99:71:3b:ab:98:e7:
e3:24:b1:8a:90:79:6c:e2:89:4e:fc:b2:d5:c9:5b:
58:ed:ee:67:0e:91:c2:23:57:5c:25:98:4b:dc:63:
5f:92:83:2a:c4:df:51:47:64:c6:62:f5:2c:77:b2:
25:df:54:f2:a2:3c:ab:fc:b8:35:34:1e:d1:a9:2e:
dd:14:a0:c4:e4:48:ce:6c:ba:72:bf:26:e4:15:87:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:10:48:19:19:00:76:CB:A5:87:9B:E2:C5:9C:49:37:50:9A:EA
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:80:d1:8a:24:78:f7:b9:5f:06:07:7e:f1:39:28:9d:c6:
49:e5:96:86:ca:83:ec:94:73:4c:e6:5e:81:a2:64:c2:03:41:
e1:5f:fd:70:36:a2:1b:7d:45:b4:d6:f4:ff:68:69:60:21:e9:
19:eb:f8:91:42:4e:4c:5f:4b:2e:23:a1:f2:5e:bf:3e:70:77:
b3:cb:42:1e:29:d3:d3:b2:e4:3b:88:40:e7:e9:6c:89:9c:81:
41:f9:b5:45:e8:03:c9:b8:c1:86:f1:da:1f:1a:d9:bb:e5:fd:
2f:a3:a8:ee:83:20:4e:66:b6:85:ed:45:6d:c4:63:5e:b6:db:
fd:f7:56:a6:79:e3:e4:8a:32:15:5f:1c:91:a7:ac:e2:4a:4a:
55:8c:a3:f4:1a:fb:5a:75:ef:44:bc:bc:36:e2:85:ff:33:1e:
d9:2b:13:55:f3:7f:cb:e2:cb:33:c9:6c:d8:64:97:15:e5:ed:
eb:34:6c:b8:69:31:4e:bf:3a:ff:7f:83:bf:c9:be:cc:b7:e2:
9e:74:14:d1:9e:08:11:38:cd:2a:67:90:a3:75:a1:d0:d8:65:
a0:b1:0d:26:f9:94:4e:8d:fd:3e:5c:13:29:5f:12:1d:64:f5:
f1:f9:16:da:e3:6c:73:25:68:38:dc:f4:d2:3e:24:b8:a8:5f:
6a:6a:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:08 2025 by rpki-client