Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier: tG1+8FOqAQ7wLVq+OoA3nEa5S0LSxuf1fdBT9Cyslio=
Subject key identifier: E7:D3:09:F5:61:DA:F6:C8:02:28:FA:5D:6E:56:64:AD:0A:40:A5:ED
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 019A258A8C02AE6E250507D0A6DDAB7410AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number: 13BE
Signing time: Mon 27 Oct 2025 12:00:27 +0000
Manifest this update: Mon 27 Oct 2025 12:00:27 +0000
Manifest next update: Tue 28 Oct 2025 12:00:27 +0000
Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: iTSLssMVchBNOCwMdzBNx0AFa262ldwcDnpwZ+cs4mc=)
2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:8c:02:ae:6e:25:05:07:d0:a6:dd:ab:74:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Oct 27 12:00:27 2025 GMT
Not After : Oct 28 12:00:27 2025 GMT
Subject: CN=e7d309f561daf6c80228fa5d6e5664ad0a40a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:69:e5:9d:b6:b4:f6:13:1a:88:5b:cd:0b:
4e:51:55:21:d3:1c:ed:36:3e:f5:eb:5b:95:f7:15:
a6:44:d8:9e:57:ef:b8:33:66:77:af:8f:7f:89:2a:
29:4f:f7:40:13:c6:cb:3e:6a:47:0a:2e:2f:92:7c:
38:01:fb:29:b1:03:ce:1e:df:6f:01:fc:28:98:63:
85:ad:77:02:2e:1e:46:75:69:fe:1d:76:03:41:b2:
e0:05:56:e7:03:7a:dc:b2:e6:18:08:32:cd:ef:df:
9c:bf:88:3b:c8:66:61:eb:d9:5f:9a:85:a6:f0:c0:
16:50:56:3b:cb:3c:86:ac:be:88:34:1c:92:25:10:
1e:df:6f:f3:5e:36:58:c5:96:5d:be:25:86:36:55:
9b:17:12:56:c1:16:82:62:63:3e:8e:e5:f0:55:13:
ed:7b:f2:46:c2:cb:85:3e:97:9b:e8:19:66:a7:d2:
e4:f3:35:02:42:10:fa:ef:a1:72:91:61:f2:61:2a:
27:60:03:32:8a:d5:ae:7b:25:68:e1:9b:69:41:23:
60:ad:ac:98:04:a4:8b:6e:a4:63:cd:f0:95:af:00:
14:a7:cf:af:6e:01:65:40:85:b6:37:eb:50:58:a9:
74:3f:f2:2f:e5:f7:57:6d:8c:6c:b1:50:07:cd:37:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:09:F5:61:DA:F6:C8:02:28:FA:5D:6E:56:64:AD:0A:40:A5:ED
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:3e:19:e0:ec:9d:ee:6a:bc:ae:e3:41:5b:b3:f4:fc:ba:
ba:40:f6:31:49:4d:8e:88:0c:32:38:53:69:32:88:fc:30:cb:
a8:16:31:82:29:47:34:9c:31:ba:5b:9b:c7:ef:13:d6:0e:1a:
c7:0a:5b:c7:e8:2c:24:a5:ec:58:44:84:e5:3a:b2:6e:8c:59:
dd:85:58:22:3e:06:72:12:1c:a3:bc:98:ff:7f:87:7d:3a:21:
b9:6e:e0:eb:5f:60:ff:1f:ce:dd:df:0c:0d:b5:cf:6e:3e:48:
90:21:d4:70:d6:e0:4e:98:e1:08:bc:26:69:9b:c1:5b:1d:be:
ed:80:a8:63:19:08:5f:26:e7:d4:6b:aa:43:cf:00:b9:96:65:
07:1b:9e:80:2d:5e:58:73:0b:06:5e:a8:fd:4e:a8:e1:24:ad:
c0:ce:e3:e7:f0:bd:1b:d0:c8:62:08:8e:8a:7f:6c:51:13:0e:
92:71:64:65:22:86:22:e7:b0:83:af:4a:45:ef:6d:b7:e4:08:
37:be:e1:b2:3e:b6:d8:09:2a:1b:bb:f5:60:a5:cc:75:b8:38:
6a:7f:2b:a6:b0:84:c3:d2:9a:bc:c5:e1:72:f1:31:00:e5:4f:
93:7f:f9:e0:86:b7:ba:76:df:52:ad:ee:83:47:ca:a8:2e:fd:
5b:00:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:59:16 2025 by rpki-client