Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: 7W5Cbz/11ALXajEcFzCgf6UnNsce85PZvccM4CeePok=
Subject key identifier: 0E:EB:87:4C:1A:0E:ED:85:F2:03:47:A8:30:7C:E7:C1:16:1C:98:AB
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019748C30AF077CCA5757A2020D9219DCE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:31 +0000
Manifest this update: Sat 07 Jun 2025 05:00:31 +0000
Manifest next update: Sun 08 Jun 2025 05:00:31 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: gUar7izvcgU6j7FckyXSrJ7uU2BLLC1xdgtCVcGg0iI=)
2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:0a:f0:77:cc:a5:75:7a:20:20:d9:21:9d:ce:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jun 7 05:00:31 2025 GMT
Not After : Jun 8 05:00:31 2025 GMT
Subject: CN=0eeb874c1a0eed85f20347a8307ce7c1161c98ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:d8:3a:a7:f5:d2:d8:53:30:f5:cd:85:82:
88:e2:1c:ec:80:71:ed:99:52:36:1c:8c:ff:50:f4:
83:90:26:db:79:36:7f:16:5a:c5:55:2c:32:ae:38:
d0:5a:f6:02:8b:74:1d:04:99:90:2a:b3:47:aa:87:
18:db:30:e0:04:66:fd:d6:08:54:73:dc:dc:b7:62:
82:43:9f:b0:9e:ef:dc:23:06:c2:84:09:6b:a3:75:
d9:76:40:f5:e4:9e:15:1e:c6:90:52:c7:fc:87:ff:
06:94:35:e1:9c:3c:d8:b1:73:d2:b7:72:bd:6b:72:
8e:e9:01:ac:e1:78:42:dc:93:95:45:82:6a:29:cc:
66:6e:8a:1d:7e:5a:de:92:1d:96:2b:89:18:8a:f3:
06:3e:d5:51:39:b8:45:89:19:03:a9:47:31:35:ea:
e5:43:9c:b3:86:06:1a:0e:99:99:50:ae:e1:0b:9b:
98:71:0d:27:d3:5b:cc:38:fe:36:cd:f1:39:3b:c3:
cc:a2:2d:70:e7:10:d0:00:09:f2:a3:4e:96:26:dc:
c1:1d:9b:37:52:bb:4c:a9:4c:07:74:f1:9b:1c:72:
b1:36:8c:2f:ab:09:e2:98:6a:14:f9:f1:24:dd:96:
bf:73:b8:dc:2a:0b:2f:20:9c:58:4d:30:a5:71:62:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:87:4C:1A:0E:ED:85:F2:03:47:A8:30:7C:E7:C1:16:1C:98:AB
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:86:f0:44:3f:f8:2e:02:4b:e3:b6:2d:28:93:29:b5:6b:16:
66:37:8f:ca:7f:8e:a1:96:9e:05:3d:57:f5:e0:a3:52:6f:d7:
31:9d:f1:c2:1b:6a:87:68:10:c9:2d:c7:2a:90:27:70:0a:7b:
05:a9:7f:13:35:18:f9:5b:ef:c7:5d:d6:35:25:e0:e2:76:05:
e8:3e:d9:7d:f7:90:99:b4:ca:e8:b6:e2:76:06:3f:25:e0:95:
ff:40:e1:25:81:05:80:84:3c:7a:ba:37:45:2f:ac:97:de:69:
80:74:c5:a8:a4:0e:1f:8e:5c:ef:26:c7:45:26:c0:a2:41:24:
32:86:da:d2:98:a4:af:2d:8d:54:79:e4:92:f2:8a:6d:69:7d:
2f:d9:ea:3e:3c:b2:2f:06:ec:e9:54:a9:9f:cf:bb:1d:60:34:
75:a9:b2:39:03:01:55:bf:a0:1a:a7:44:3e:18:a8:9d:94:5e:
04:e2:b6:20:98:e0:2d:93:54:40:c8:e2:99:af:9e:6d:dd:f7:
4a:0d:71:82:30:da:f6:97:21:cb:30:77:50:ab:7e:86:9a:7a:
ef:52:be:3b:cb:88:dc:0f:ef:d7:3a:5f:3c:46:32:58:44:1c:
c4:a8:69:f0:27:43:79:82:f9:1b:3b:77:02:c5:05:8a:70:a8:
5a:3a:96:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwwrwd8yldXogINkhnc4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNGY5OTVmNDE5MjIwZjU4NzQyNjdkNjhjYzE0MzcyZjBj
ZGYyOTMwHhcNMjUwNjA3MDUwMDMxWhcNMjUwNjA4MDUwMDMxWjAzMTEwLwYDVQQD
EygwZWViODc0YzFhMGVlZDg1ZjIwMzQ3YTgzMDdjZTdjMTE2MWM5OGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEHYOqf10thTMPXNhYKI4hzsgHHt
mVI2HIz/UPSDkCbbeTZ/FlrFVSwyrjjQWvYCi3QdBJmQKrNHqocY2zDgBGb91ghU
c9zct2KCQ5+wnu/cIwbChAlro3XZdkD15J4VHsaQUsf8h/8GlDXhnDzYsXPSt3K9
a3KO6QGs4XhC3JOVRYJqKcxmboodflrekh2WK4kYivMGPtVRObhFiRkDqUcxNerl
Q5yzhgYaDpmZUK7hC5uYcQ0n01vMOP42zfE5O8PMoi1w5xDQAAnyo06WJtzBHZs3
UrtMqUwHdPGbHHKxNowvqwnimGoU+fEk3Za/c7jcKgsvIJxYTTClcWJnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7rh0waDu2F8gNHqDB858EWHJirMB8GA1UdIwQY
MBaAFAxPmV9BkiD1h0Jn1ozBQ3LwzfKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEt
MjY0Y2M0MjcyNTRlLzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEtMjY0Y2M0MjcyNTRl
LzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYobwRD/4
LgJL47YtKJMptWsWZjePyn+OoZaeBT1X9eCjUm/XMZ3xwhtqh2gQyS3HKpAncAp7
Bal/EzUY+Vvvx13WNSXg4nYF6D7ZffeQmbTK6LbidgY/JeCV/0DhJYEFgIQ8ero3
RS+sl95pgHTFqKQOH45c7ybHRSbAokEkMoba0pikry2NVHnkkvKKbWl9L9nqPjyy
Lwbs6VSpn8+7HWA0damyOQMBVb+gGqdEPhionZReBOK2IJjgLZNUQMjima+ebd33
Sg1xgjDa9pchyzB3UKt+hpp671K+O8uI3A/v1zpfPEYyWEQcxKhp8CdDeYL5Gzt3
AsUFinCoWjqW2g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:54:41 2025 by rpki-client