Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: 2Tmi4wX4F/GC4Zu+eSlXBYgJiBoV7rMW27lVkTiqOQw=
Subject key identifier: 09:7D:31:AD:E0:33:14:AF:DE:0F:48:85:96:41:69:C2:FE:C8:D5:A3
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019A71EEF859B36448B6E0235DFFCB8C70A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: TJvqLpx2/F0VSrkIYFAlC0VA7qrntZ4Q7gTO165uAjg=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:59:b3:64:48:b6:e0:23:5d:ff:cb:8c:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=097d31ade03314afde0f4885964169c2fec8d5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:d3:44:82:66:92:7f:fd:a2:70:8f:93:2a:
48:f9:b1:43:ff:22:4f:99:b6:c4:fc:f7:9c:97:18:
b8:8d:67:06:40:63:6b:ab:57:c7:d3:44:5e:06:73:
46:33:d3:81:c3:7e:63:31:30:eb:82:b3:4b:33:b2:
03:b7:7a:38:b6:23:36:22:27:d4:92:45:7c:58:a3:
74:8b:b6:ec:d7:a3:3d:bf:92:7b:42:7d:ca:2a:85:
12:f3:df:6b:cd:a9:1e:06:20:af:bb:50:e3:45:96:
45:ef:27:74:71:f1:ef:4d:2a:e7:bf:98:45:ad:5e:
b8:43:95:a7:11:51:a7:77:11:75:45:ed:a8:85:5b:
ef:fe:ef:30:83:ab:76:28:b2:48:47:b4:ec:e0:64:
c6:c2:a0:a0:f1:c4:1a:6c:b0:7e:27:94:dd:35:74:
98:cf:19:b2:94:dd:a4:39:d2:80:b8:f8:02:d4:d0:
93:eb:5d:81:6b:80:61:f8:41:74:07:cf:83:30:d1:
4f:2c:6e:5f:3d:41:fd:91:81:0b:9f:92:8d:c2:bd:
96:13:c1:6d:46:97:24:16:61:18:c5:5b:d9:4c:f7:
4b:53:b6:ce:31:ba:69:2f:52:a5:6a:6b:56:94:99:
3f:c4:86:b8:21:90:14:2a:00:bf:ba:5e:54:a6:a2:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:31:AD:E0:33:14:AF:DE:0F:48:85:96:41:69:C2:FE:C8:D5:A3
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4a:fc:58:14:3d:40:f9:5e:ab:49:7e:06:0b:62:19:2e:79:
fa:ce:91:dd:5b:52:6b:27:f7:3a:14:48:46:7f:23:2e:9d:9d:
43:b7:35:59:25:55:65:75:d7:ab:25:6f:bf:65:ae:15:65:1c:
45:df:a4:b0:61:e0:a3:15:82:d9:4a:d7:3b:f8:48:fc:e1:cf:
e9:a7:9b:04:88:a0:b5:3b:b0:28:dd:13:a7:32:88:e4:70:dd:
1b:cf:b6:0d:6b:d6:c3:30:1b:c0:09:34:d2:86:e8:69:2b:b9:
dd:81:8b:c0:40:d1:9b:e8:30:6e:24:9e:ba:41:c8:e8:b6:c3:
0b:ec:ec:e4:e3:1a:9d:25:1c:a3:c9:d7:01:41:b7:36:41:ef:
8d:09:cc:81:21:1a:7c:7d:bf:5a:e1:57:8d:50:94:71:48:32:
7e:ff:92:e1:79:20:a7:31:34:81:bc:2e:8e:40:89:4b:c8:57:
39:62:50:2e:38:c7:8f:64:28:63:13:58:28:7f:84:18:19:02:
3e:82:a4:6d:c5:bc:83:07:f8:ed:75:05:53:24:ae:bb:eb:d1:
3a:dd:10:23:ae:b0:b2:3c:95:dd:df:d2:38:c5:8b:f7:6b:d6:
51:2f:89:d4:4b:28:15:6d:e6:e7:76:5a:b6:c1:f4:c2:6b:7e:
34:31:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:57 2025 by rpki-client