
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: q/tEE+g9MykX+rNyRszMzAzAe9gsRL62qkO321PHxRc=
Subject key identifier: DB:4A:C3:37:F1:90:BA:7A:48:FF:71:5D:C2:E9:A3:ED:F8:37:21:F3
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 0199FC217CB1BC6E1C42C6059108D26BEA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: YJ+NOdTKTTTjQrWBs9/fh83zp+VIDnFUjBEkhh4S5A4=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7c:b1:bc:6e:1c:42:c6:05:91:08:d2:6b:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=db4ac337f190ba7a48ff715dc2e9a3edf83721f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:3c:4e:e3:fd:96:bd:86:09:09:b4:c0:71:
e7:17:b4:a7:c6:16:10:14:8f:03:04:f7:da:0d:f0:
94:ba:69:3f:a9:82:00:0c:0b:19:61:d8:65:3a:fa:
d6:3d:b6:38:69:50:42:ab:dd:91:af:3b:80:84:2a:
0b:e4:8a:68:66:32:85:9f:6b:47:e3:98:95:e6:19:
4b:5e:ba:7d:3c:23:4f:d7:d0:07:fd:58:73:69:82:
a3:41:09:19:d9:e1:c4:80:6c:fe:77:a5:dd:66:50:
8c:cf:30:f0:7a:ad:55:8b:50:e2:19:f2:71:cc:dd:
37:1d:9e:ec:d1:43:90:7e:2a:d1:65:98:7e:40:91:
ad:d6:80:f0:b7:23:66:0d:b2:97:96:07:d2:43:6f:
3d:d8:c3:cd:02:1e:a3:99:8f:ea:3c:4a:7d:0c:b5:
e5:7f:86:97:4a:c2:43:e3:e7:84:9d:1a:d2:c3:ed:
bc:65:3d:ea:6e:92:00:7a:02:13:b1:95:68:e3:38:
4f:48:d3:b1:56:1a:5a:38:db:92:19:e1:d4:b3:1b:
4c:c4:d6:88:64:d7:b1:20:81:46:87:98:cc:56:32:
ee:09:70:35:db:d8:3f:99:06:e3:7c:4f:41:2e:5a:
15:a8:f0:5d:bd:9a:1f:10:20:94:40:93:5a:57:43:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:C3:37:F1:90:BA:7A:48:FF:71:5D:C2:E9:A3:ED:F8:37:21:F3
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:5c:18:52:f4:28:73:26:6e:8f:15:62:92:3d:e8:2d:f6:
5c:ab:ea:68:69:89:8c:b5:81:62:a4:43:d8:9a:0c:84:9e:65:
dd:f2:91:95:4b:04:ad:02:a9:1a:bf:af:b3:c4:71:b0:d6:79:
fb:36:49:6c:e5:8c:40:9f:d0:a5:e7:d0:e0:ff:75:ef:1a:85:
3d:6c:19:ae:0d:37:de:81:c5:21:be:31:5c:cc:8f:4d:65:50:
bd:8f:65:c9:4a:ec:8a:49:03:60:8e:93:80:f9:3c:26:2a:3f:
0d:b4:f7:87:1e:0b:f1:30:d1:63:e9:fa:ec:1a:c1:23:7c:9a:
9b:43:e8:54:a5:3d:33:da:e0:6f:03:6f:13:59:bf:70:22:21:
9d:f1:f2:48:78:7f:9c:59:00:c1:a1:ce:f2:03:e7:37:5c:59:
6c:1c:0d:59:92:2f:62:61:03:19:8c:54:d3:5d:04:2e:8b:9d:
4c:24:e5:43:09:55:8d:ef:e6:ab:59:82:4f:15:18:7c:39:7d:
74:98:dd:cb:c6:2a:03:84:93:52:a5:e8:63:ab:91:1a:b3:02:
d6:29:f9:57:27:69:cc:5d:58:c5:bc:28:b1:e0:3d:bf:aa:bb:
86:37:ed:a8:67:29:9e:27:7e:1c:5a:55:d5:e8:fb:7c:ee:d4:
65:fe:7d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXyxvG4cQsYFkQjSa+oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNGY5OTVmNDE5MjIwZjU4NzQyNjdkNjhjYzE0MzcyZjBj
ZGYyOTMwHhcNMjUxMDE5MTEwMTE2WhcNMjUxMDIwMTEwMTE2WjAzMTEwLwYDVQQD
EyhkYjRhYzMzN2YxOTBiYTdhNDhmZjcxNWRjMmU5YTNlZGY4MzcyMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xE8TuP9lr2GCQm0wHHnF7SnxhYQ
FI8DBPfaDfCUumk/qYIADAsZYdhlOvrWPbY4aVBCq92RrzuAhCoL5IpoZjKFn2tH
45iV5hlLXrp9PCNP19AH/VhzaYKjQQkZ2eHEgGz+d6XdZlCMzzDweq1Vi1DiGfJx
zN03HZ7s0UOQfirRZZh+QJGt1oDwtyNmDbKXlgfSQ2892MPNAh6jmY/qPEp9DLXl
f4aXSsJD4+eEnRrSw+28ZT3qbpIAegITsZVo4zhPSNOxVhpaONuSGeHUsxtMxNaI
ZNexIIFGh5jMVjLuCXA129g/mQbjfE9BLloVqPBdvZofECCUQJNaV0NiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtKwzfxkLp6SP9xXcLpo+34NyHzMB8GA1UdIwQY
MBaAFAxPmV9BkiD1h0Jn1ozBQ3LwzfKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEt
MjY0Y2M0MjcyNTRlLzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEtMjY0Y2M0MjcyNTRl
LzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXxcGFL0
KHMmbo8VYpI96C32XKvqaGmJjLWBYqRD2JoMhJ5l3fKRlUsErQKpGr+vs8RxsNZ5
+zZJbOWMQJ/QpefQ4P917xqFPWwZrg033oHFIb4xXMyPTWVQvY9lyUrsikkDYI6T
gPk8Jio/DbT3hx4L8TDRY+n67BrBI3yam0PoVKU9M9rgbwNvE1m/cCIhnfHySHh/
nFkAwaHO8gPnN1xZbBwNWZIvYmEDGYxU010ELoudTCTlQwlVje/mq1mCTxUYfDl9
dJjdy8YqA4STUqXoY6uRGrMC1in5VydpzF1YxbwoseA9v6q7hjftqGcpnid+HFpV
1ej7fO7UZf59sw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:05 2025 by rpki-client