Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: rzbc1rJlAFG/Z3H5NX5QAkZmeViK7pXDD8Vdc5zMZug=
Subject key identifier: 9F:7F:1C:FE:38:DE:8B:D0:E3:B9:38:D2:1B:1D:29:CF:60:3E:30:83
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 0197B6D79D649B3228B7A6A6247EE6BAAD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: yv4eQxLytLywGI+BptOJNGlZHIxGjKlGBnyQZxji/30=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9d:64:9b:32:28:b7:a6:a6:24:7e:e6:ba:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=9f7f1cfe38de8bd0e3b938d21b1d29cf603e3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:de:96:51:e8:29:34:85:61:4d:b7:a8:bd:
08:1d:5d:0b:05:73:6a:02:42:aa:7d:29:ca:58:28:
87:b4:f2:d3:21:fb:c8:45:3e:8a:2d:4b:bb:9e:54:
a0:93:8a:32:c6:97:36:e2:69:80:a3:b7:73:dd:4d:
15:01:67:4a:4a:1b:16:a6:be:47:41:a8:fa:9c:cc:
95:e0:ff:43:06:24:78:ee:9a:81:af:f3:3e:d1:03:
61:66:98:73:99:11:e5:e8:97:50:0b:48:25:35:bb:
12:92:56:5d:c5:89:72:dc:37:91:70:c8:4e:70:2b:
4e:08:61:25:28:30:de:f7:8a:81:82:9b:82:ba:cb:
f9:c8:93:2a:41:37:2b:58:39:81:1b:0b:fc:ce:95:
6f:94:85:60:7c:99:99:38:76:e4:10:f6:72:84:dc:
4f:87:dd:37:40:8c:9f:19:12:4f:b0:d8:51:60:87:
2f:a4:01:61:a2:3d:bc:55:8f:35:cf:41:0f:89:19:
a9:e5:9e:f5:61:5f:9c:af:e3:87:42:b9:d7:c8:62:
c7:73:6c:a7:e4:d8:75:20:b0:c6:66:09:d9:e2:29:
30:e7:96:43:a8:eb:c0:df:5c:8e:11:0f:7f:9f:43:
ea:b8:2e:b7:f4:27:32:61:02:7d:c0:24:96:f5:7f:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:1C:FE:38:DE:8B:D0:E3:B9:38:D2:1B:1D:29:CF:60:3E:30:83
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9b:b0:da:fd:48:3b:24:51:e8:7a:29:56:9c:1e:ee:39:d6:
c8:92:97:29:b4:28:19:51:88:2d:0d:65:99:ab:39:bc:a7:90:
2a:7d:0d:73:a4:f4:71:43:65:5e:98:7f:63:f8:a2:96:be:93:
fb:5c:ad:fb:15:ea:51:6b:05:f7:a8:7e:6f:0e:65:f2:94:a6:
06:f7:59:bd:48:7c:2d:43:77:a5:54:21:26:d1:30:fd:f0:18:
bb:cc:d3:f6:fa:33:1a:cd:14:89:de:19:c2:b9:68:4d:71:ba:
74:a9:43:f5:52:71:52:22:d8:08:e0:4d:1e:84:34:4d:06:ed:
f0:86:5b:bc:c1:74:58:68:ff:12:1b:ca:5a:29:03:c3:ed:2e:
6a:39:c3:9c:84:dc:3f:30:66:27:74:9d:26:9f:74:48:92:ec:
27:61:7d:36:ba:29:f7:43:8d:2e:5a:0b:18:2f:20:49:4c:17:
f4:20:18:97:50:62:70:eb:bf:ec:75:7b:59:4e:39:08:d8:b2:
2d:01:f7:35:ab:0f:48:61:82:1d:44:c4:d5:66:6a:53:d7:95:
fd:0b:53:33:24:f4:02:01:cb:eb:63:4c:a0:bf:1c:b8:65:9a:
fe:29:8c:56:70:49:ee:a3:75:e1:35:c0:52:52:e7:b7:b0:ef:
f2:24:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:21 2025 by rpki-client