Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json)
Hash identifier: v2XYtODHJa7B0U1Nofjkw6k8fI/uAkPaw8jz24ZL/bE=
Subject key identifier: 3A:7B:F5:05:5C:4C:2F:68:0A:73:AD:68:67:05:AA:5E:9F:89:96:C5
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial: 0199FBEB728BBDC3E9DD37826B03F99B34D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
Manifest number: 0667
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=)
2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: jr91V3Qnqmss5iMsY2/FLx57c4wOEOETmbR7vOSDSko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:72:8b:bd:c3:e9:dd:37:82:6b:03:f9:9b:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=3a7bf5055c4c2f680a73ad686705aa5e9f8996c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:4c:25:dd:62:e1:ca:e1:40:f1:d2:0e:0d:
03:a9:c8:2f:26:fd:74:18:db:00:23:4c:8c:46:44:
86:e0:d5:66:39:8c:70:67:b0:b9:62:eb:8e:60:36:
dc:f7:40:20:68:29:bc:cc:ab:fc:9e:8a:89:5c:05:
1e:83:6d:9d:0e:41:71:2b:d6:07:29:cf:1f:4e:1f:
75:6e:be:ab:b9:b5:e3:26:cc:fa:dc:c0:fd:9f:60:
fe:6d:5e:0d:4c:20:85:b9:df:5c:55:92:05:b3:f5:
84:0c:12:27:a7:38:96:53:dd:a5:69:a1:d0:a8:00:
1a:d0:18:28:a3:37:94:e0:be:20:5e:5a:01:fa:2f:
76:fb:09:a8:78:fa:12:ae:9e:56:dd:12:e9:9b:ed:
96:7f:bd:d5:35:d7:b1:a7:71:36:4b:ae:2f:f2:d0:
33:16:e9:d9:9a:ca:21:66:e6:a8:ae:d5:52:ee:c7:
18:0e:7c:4b:df:c7:fd:36:1d:28:ba:fd:73:9b:08:
81:74:b2:c8:e6:92:fe:43:bc:ce:ab:b1:a5:41:e6:
8e:15:3d:2a:eb:a9:74:f3:d6:19:79:68:dc:70:ef:
07:08:af:2b:3f:4d:a8:64:eb:d3:bb:f8:07:f6:8d:
4c:49:c9:77:9e:28:7a:81:df:e1:6d:d0:05:02:1a:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:F5:05:5C:4C:2F:68:0A:73:AD:68:67:05:AA:5E:9F:89:96:C5
X509v3 Authority Key Identifier:
keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:54:f6:ee:4a:a4:47:8b:70:41:26:50:d8:16:07:cb:15:50:
e4:df:6b:da:46:17:87:54:c2:eb:3b:c4:c7:ca:80:2f:11:d9:
5c:d5:96:85:1b:ad:c1:ec:9c:cf:3b:2a:e1:66:1d:e5:86:90:
f2:16:40:fa:6d:cf:fc:29:0d:7d:04:1f:de:70:a7:74:37:b2:
74:ae:64:57:5c:3c:99:ac:91:d2:fa:34:01:95:4e:91:ef:00:
96:9e:46:53:50:a2:c6:ef:9f:02:61:72:15:24:78:52:23:6c:
14:c6:e9:85:c7:d5:ed:d3:5a:52:79:53:ba:c3:ea:16:1a:a0:
f0:29:81:f2:a4:75:e1:18:c3:e7:b1:6d:7f:ef:b8:83:86:ff:
ee:0a:f7:49:7a:ee:ee:90:54:0b:b6:4c:6b:d6:47:40:fe:80:
9d:8b:1e:f6:e0:50:7a:82:80:c1:5a:0f:35:55:da:c1:e7:86:
e5:2d:dd:19:71:27:94:15:d1:fd:a5:4f:8f:1d:78:d0:7a:27:
62:29:c3:85:a5:8b:69:d6:c5:0b:52:d4:a8:72:62:fa:3e:0a:
64:08:14:ed:31:85:a1:13:52:c0:b5:af:e7:b0:71:0d:ee:13:
a6:00:3c:ba:3d:f7:a2:5d:4a:51:16:77:ec:38:fd:57:7a:c0:
40:6c:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:39 2025 by rpki-client