Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: S9jYVA6ClCzKgm+FIjhIdIHdXk7cKTk7BHn/57tYufc=
Subject key identifier: 74:65:1C:AC:17:E0:86:51:DF:39:7F:84:E1:CD:EB:E6:FC:39:54:67
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 0197B6A13C250B5B97AB26E1BF2ADD349711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 053A
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: 5ycrqX3e44gyXiTGuqXghL+vJdIEqmoqwK5bqlDNmOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3c:25:0b:5b:97:ab:26:e1:bf:2a:dd:34:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=74651cac17e08651df397f84e1cdebe6fc395467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:9a:b4:2b:95:6d:37:90:49:cc:8e:bd:5f:
6d:f0:64:25:29:d5:0d:0f:d0:62:cd:92:3d:38:63:
e8:52:6a:e4:e6:84:0b:4e:64:a6:ea:4b:99:26:f7:
24:a6:02:c2:d9:a7:26:7f:a6:c3:0d:2a:e7:a5:a2:
af:70:1d:6a:4a:f2:a0:94:c1:64:3b:ca:77:f0:7b:
b3:8b:48:23:eb:fe:46:5b:f5:01:a3:d1:b3:ab:9c:
bc:b9:01:75:41:54:b7:f6:6f:69:6c:95:64:6a:e9:
60:0c:ff:7f:08:70:00:6b:2f:3e:4f:06:a6:e2:c6:
ca:6e:42:6f:3b:96:b4:dd:2b:c1:1a:70:fa:db:6e:
f3:03:c0:d2:64:93:34:96:b6:fa:9b:97:72:00:eb:
6a:90:30:cb:a6:1a:59:26:0e:43:e8:67:6a:83:f8:
31:d4:1d:90:45:4a:55:1d:65:ef:74:dd:46:3b:14:
6c:11:8c:a3:d3:03:28:1a:29:6b:54:8d:ae:f0:ba:
a5:81:14:9f:26:88:b9:8d:db:15:95:01:30:10:65:
ea:a7:a3:bd:39:9b:91:f9:9d:79:f7:07:7d:70:9d:
c1:1f:da:16:b1:75:45:ea:08:32:81:32:06:8f:8c:
55:37:6f:72:bb:70:44:1f:31:07:c5:d8:3b:92:93:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:1C:AC:17:E0:86:51:DF:39:7F:84:E1:CD:EB:E6:FC:39:54:67
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:b4:ad:89:66:3e:1a:17:9a:d0:79:f5:99:1c:d5:a4:39:
d1:26:6e:78:78:09:76:83:8a:30:0c:4b:d4:28:28:0a:d1:c7:
dd:f6:2d:e3:8a:c5:7c:12:58:34:85:01:13:d8:c0:d0:6b:c6:
a7:b5:d6:26:59:75:25:db:ab:89:43:8d:a8:ab:e9:c1:33:29:
a4:00:0e:0d:b4:d5:cf:b9:b6:fa:ab:cc:f9:21:53:f1:b6:29:
45:5a:05:b4:a0:e8:1d:5c:88:cf:23:d9:0f:cf:72:d9:18:29:
14:a8:23:37:55:74:60:82:63:2e:12:91:b2:f2:b6:a4:24:2a:
04:53:8a:8f:27:0c:58:1e:52:44:06:72:ef:16:0c:d4:bd:a9:
87:3a:85:f6:b6:d2:b0:d1:7b:0d:3c:22:63:5c:47:9d:56:74:
34:95:8e:db:66:49:45:59:ae:44:2a:74:7c:f4:bd:1e:94:ce:
96:17:ea:d6:b5:15:a8:68:52:30:2a:2f:1b:30:5f:34:4f:94:
6e:b6:8d:d2:9b:ba:4a:a2:fd:73:6c:10:20:0b:93:65:d2:4b:
fa:8f:3b:a2:19:b9:04:dc:ca:e6:94:16:c8:c9:b7:47:bc:62:
73:94:7f:13:b3:62:2c:ca:c3:f8:23:e7:0b:a4:ed:f7:14:5a:
37:aa:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:45 2025 by rpki-client