Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: 2ZDKNs+EeGHEDsFisYlFHa0bk0KYBvcnsRw17MS8XwA=
Subject key identifier: CC:DC:D9:0F:EF:35:73:16:E3:7B:92:D2:05:86:D7:90:B7:13:79:59
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019A00DA076F151027C4F2CC85717AF8944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 13AB
Signing time: Mon 20 Oct 2025 09:01:20 +0000
Manifest this update: Mon 20 Oct 2025 09:01:20 +0000
Manifest next update: Tue 21 Oct 2025 09:01:20 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: hNSS3WGZx/o5JXfWDqjhwNmOTTLyAQ4wKZNwhqRzowo=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:07:6f:15:10:27:c4:f2:cc:85:71:7a:f8:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Oct 20 09:01:20 2025 GMT
Not After : Oct 21 09:01:20 2025 GMT
Subject: CN=ccdcd90fef357316e37b92d20586d790b7137959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:aa:a3:71:f5:d0:4a:8e:53:41:b5:07:ff:
0c:5e:7f:49:d4:a6:54:13:60:39:f7:a2:4b:8e:08:
7b:b3:6b:e9:5f:95:9e:c0:1f:3f:cd:36:c3:3d:15:
e4:ec:d2:d5:80:1f:ee:22:1b:e9:02:42:df:b2:01:
8a:6d:64:53:30:b7:28:e7:80:27:21:52:ee:a2:e3:
db:00:87:cb:9d:95:1b:59:e1:33:b8:c4:46:90:ce:
93:49:c3:ee:6c:a0:e4:eb:8e:c9:ad:79:dc:04:f0:
f2:b9:21:50:0b:b2:a9:52:98:53:46:3b:4e:6d:2e:
ad:29:f3:0a:12:ff:c2:b3:77:77:5d:44:e2:f6:c7:
fd:10:29:75:db:44:c7:15:35:31:07:8c:be:f9:a9:
fe:c1:3d:d2:d6:0b:34:3b:79:6b:b9:e5:5c:a6:f9:
6b:74:d1:3d:ac:7d:e2:94:83:ab:4b:f4:e2:ca:37:
04:16:30:de:ed:a1:01:dd:c4:b3:97:66:1d:58:5f:
a4:6f:9d:1d:c9:8f:79:48:2f:62:12:54:1f:81:13:
e8:61:ab:4c:83:03:b6:77:28:a1:58:bb:a0:b6:79:
95:94:43:55:c6:4c:b7:4b:d9:ae:95:72:c4:2b:4a:
2b:f2:f5:1b:cf:c4:92:4b:2a:97:d5:7a:4d:e7:9e:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:D9:0F:EF:35:73:16:E3:7B:92:D2:05:86:D7:90:B7:13:79:59
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d8:a1:ff:c2:02:9c:6b:ba:86:80:34:fd:5b:44:0f:6a:40:
0a:19:8f:70:e9:40:72:66:98:5c:8a:64:3b:d2:16:d5:57:9e:
b8:c8:f9:60:bd:09:70:32:35:1f:df:5f:bb:19:a7:ab:9d:98:
72:42:ec:45:b1:2b:86:3f:1b:63:1e:75:7d:70:a8:9e:93:2d:
88:20:9d:1a:b6:35:35:06:7a:2e:a6:1b:71:ba:68:f6:48:fa:
ee:2d:5b:e7:14:6c:1d:cd:b8:18:36:d6:d9:71:5b:7a:0e:5c:
d3:a7:4b:5e:10:49:5f:90:05:fc:4d:40:ae:7d:c7:89:1a:81:
cd:da:c9:48:0a:72:71:c3:c7:d6:fd:13:e6:8d:32:ef:a8:6f:
f2:d9:9b:67:f3:06:8e:de:55:ac:b6:9a:b5:11:5e:9f:da:08:
b1:01:c0:79:81:b9:04:ba:31:6d:ba:9f:e6:96:7d:c2:02:cd:
24:14:1d:35:d8:08:6b:02:e5:f9:6f:1f:ac:7d:b7:15:4e:69:
84:c6:95:84:63:50:f1:dd:f5:0f:cf:b9:00:2e:f3:28:8f:36:
fa:55:0f:74:87:b8:79:b0:52:35:02:17:00:6d:3f:06:56:7a:
49:ab:a3:a5:59:80:5f:64:bd:c4:48:20:e8:a4:5d:5f:8d:43:
12:1b:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:17 2025 by rpki-client