Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: f963gkr1K6GyFo3VHvHGjo4NnBEmG8U99KvhxPxetGU=
Subject key identifier: F9:95:EF:CC:5A:8F:39:59:D3:DC:63:FB:FC:01:4F:59:6F:5D:54:92
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 0198C9ED0FA4331576D77D0042E2F1DDD6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 130A
Signing time: Thu 21 Aug 2025 00:00:13 +0000
Manifest this update: Thu 21 Aug 2025 00:00:13 +0000
Manifest next update: Fri 22 Aug 2025 00:00:13 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: ZorShQI3LwbN8rD5qJh7tULoAjQTYwdZ83kvxMCz5mU=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:0f:a4:33:15:76:d7:7d:00:42:e2:f1:dd:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Aug 21 00:00:13 2025 GMT
Not After : Aug 22 00:00:13 2025 GMT
Subject: CN=f995efcc5a8f3959d3dc63fbfc014f596f5d5492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:78:b6:34:34:c3:e6:95:7d:f2:9b:fc:64:
b7:82:34:be:fb:64:ad:03:53:20:9c:40:ed:db:89:
d1:d9:07:f0:d9:0a:3f:38:3d:38:40:a3:c7:55:03:
9c:ff:6e:fd:ea:8a:6e:51:41:a1:f4:76:d8:44:0d:
16:e1:af:bd:3d:71:10:6c:5f:c2:72:d0:71:3c:76:
a1:21:54:cb:2c:6c:3a:e5:56:ff:eb:1f:83:70:69:
21:65:68:4b:e5:aa:ff:be:77:f7:4a:61:08:ca:4c:
e9:e3:5d:c2:6b:08:ff:7c:51:49:e1:cc:db:33:83:
d2:a9:b9:23:0f:63:77:e6:5c:78:82:34:5e:3b:99:
a7:d1:16:e5:13:62:4a:36:c3:97:3a:8e:88:78:11:
2d:f7:0c:93:59:3e:fb:3a:e9:33:cd:39:1c:f0:0c:
58:aa:53:20:d8:9d:68:2e:6c:fe:fb:f7:9d:d0:32:
c3:52:4f:d7:de:4f:5e:66:ac:16:34:ba:f8:27:1c:
9d:be:2d:07:41:1e:33:67:c4:e9:e9:5d:81:d6:d1:
d9:50:34:83:89:e7:91:d9:86:e7:68:38:14:a7:4e:
63:bc:11:7c:04:e5:30:3e:f3:7b:44:b8:1c:39:c5:
d9:61:ee:b7:07:f6:31:ef:74:4b:25:dc:49:54:b9:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:EF:CC:5A:8F:39:59:D3:DC:63:FB:FC:01:4F:59:6F:5D:54:92
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:a9:ef:24:5a:d9:78:0b:ac:9c:17:41:f7:16:a5:54:cd:
60:29:59:a2:23:de:fb:35:71:d1:5c:a9:54:9c:78:60:e2:b4:
75:13:51:f0:a1:1e:4a:0f:8f:ca:71:fb:7d:ed:65:49:58:8f:
a4:a0:39:d7:ee:32:46:2c:67:10:87:02:95:35:d0:5d:ae:2b:
14:0d:11:ad:4d:4e:5a:ad:fc:59:68:10:18:ff:24:7f:36:77:
f4:67:d3:49:ca:8c:16:fb:3e:9a:b3:a3:2a:1e:90:38:52:9a:
6b:c3:e1:e0:ce:2b:df:84:bf:65:63:1b:eb:4f:43:2d:94:de:
f8:35:71:77:c6:b8:3a:bc:6a:f3:14:e5:fa:ca:39:ab:e9:46:
a0:92:4f:f5:2c:7d:8c:5b:0e:2b:f0:52:a9:c8:e6:63:e6:dd:
a8:b5:85:da:b9:49:b6:60:41:0e:7b:2c:97:df:f4:fa:7b:4c:
5c:b2:bd:60:a7:5c:c3:d7:d9:36:76:aa:5f:22:88:35:89:51:
18:9c:a3:a4:db:59:8e:4c:4c:b8:2d:68:c7:fa:1e:b7:2f:be:
3a:b9:f7:4d:e8:23:4c:55:71:98:fe:47:72:6d:eb:06:db:62:
b7:23:4b:11:91:b0:ba:5f:c7:2a:71:93:1d:9f:6e:6c:c4:ea:
27:78:bc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:11:37 2025 by rpki-client