Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: apWDEIzJN36bPMJEm6M4bVdSKbmJy1hCc2ZF0yl4qDU=
Subject key identifier: 35:52:26:23:D0:55:35:3A:18:47:FD:0F:C2:DB:AF:69:67:C9:80:AF
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 0198D47384319952E7C9A6E7875F8234EABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 05CE
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: jO/PvwBN2f2rwvzFDPQeNv/JaOxvgYK1M/lrkULsa9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:84:31:99:52:e7:c9:a6:e7:87:5f:82:34:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=35522623d055353a1847fd0fc2dbaf6967c980af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:5d:75:47:05:6b:db:b1:f1:4b:79:ec:be:
09:5c:a0:35:36:d9:c9:c2:7c:33:f0:09:db:55:de:
56:f3:54:18:a2:42:2b:5b:5f:37:64:18:66:59:54:
5f:20:39:1d:08:7e:96:fe:a9:8b:7d:86:5e:93:a5:
5f:a6:2e:0e:19:e6:e5:50:68:3a:27:f4:24:22:ab:
11:0f:04:fa:59:51:92:d0:ba:44:11:29:a9:1b:c8:
34:bf:95:b9:5b:00:89:36:98:b2:a2:f7:75:81:c4:
7d:1d:5d:81:7b:3d:52:65:e5:d5:90:15:0d:a0:53:
54:9e:62:95:a5:0d:87:5d:0a:c5:3a:ba:a8:10:0d:
f7:cf:fb:ed:ef:03:67:e6:11:8d:34:36:14:47:ba:
af:19:c2:f2:51:03:d8:62:0b:72:26:05:75:c1:11:
02:36:6b:bb:6d:47:d5:83:a9:08:6c:d5:e3:ed:da:
42:38:d5:84:a7:cf:9d:b1:ff:36:ce:d8:54:e7:c8:
6b:3d:7b:92:bc:44:24:a0:5c:6d:a0:73:43:97:84:
49:26:0b:38:24:65:ed:98:36:59:bd:df:44:b2:1d:
70:cb:ae:40:1d:20:43:c7:d1:82:13:4b:3e:d8:33:
35:b1:a3:dd:06:30:d8:f4:1d:58:cd:90:2a:ba:c9:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:26:23:D0:55:35:3A:18:47:FD:0F:C2:DB:AF:69:67:C9:80:AF
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7f:3f:cf:a8:0b:c4:17:d8:cc:f3:98:ef:11:8d:ea:21:32:
95:09:47:bd:32:2e:ac:92:4d:aa:65:7b:e7:83:1e:4e:e8:ab:
40:92:c5:01:a8:3b:6d:b5:b8:86:4f:06:cc:7f:2b:56:12:29:
d5:01:94:08:0e:af:70:ff:65:ca:f4:9a:e1:54:74:90:6a:c5:
3d:73:0f:9d:56:f6:fc:5e:13:fa:c8:e8:61:4a:48:9b:ca:96:
8e:2e:5f:fc:ee:3c:f6:d9:b2:3c:4b:f5:68:82:16:98:59:d9:
10:d8:91:79:b5:5b:bd:e2:76:2b:2e:66:70:bc:59:d1:a8:94:
09:f4:34:b0:e0:5b:ea:42:0a:71:6a:31:09:cf:d6:3d:2d:96:
42:ea:54:15:f4:4b:2c:15:78:c6:1b:b8:3e:5e:a3:1a:ee:88:
5a:aa:99:45:28:62:1c:a3:0f:37:00:65:0d:05:a9:3b:0a:9d:
74:88:8c:c3:21:59:85:a3:af:9c:49:51:b6:b5:6a:fb:39:00:
da:af:81:34:d6:c2:3e:d9:38:4a:52:9e:16:49:1c:78:ed:7e:
0b:80:aa:46:86:4b:b7:05:b1:94:87:55:be:8c:8a:27:8f:d1:
76:0b:65:02:f3:e3:9e:9f:1d:68:84:93:53:e8:43:f9:9d:7d:
d3:23:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:25 2025 by rpki-client