Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: oUh7KGE+/HnWsLvCrcRkFq8N008BqbipOniP487ClMg=
Subject key identifier: 15:87:78:8F:BA:38:91:0F:4A:AD:31:0B:7E:88:66:AE:5F:23:95:F1
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 0196A0BF7A66E4ABC44B6B5D961158F83FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1253
Signing time: Mon 05 May 2025 14:00:25 +0000
Manifest this update: Mon 05 May 2025 14:00:25 +0000
Manifest next update: Tue 06 May 2025 14:00:25 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: X3kEmRw9s3uZ7vQ8xbh1bgOmSE/S25KL2PSdHLQDHRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:7a:66:e4:ab:c4:4b:6b:5d:96:11:58:f8:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: May 5 14:00:25 2025 GMT
Not After : May 6 14:00:25 2025 GMT
Subject: CN=1587788fba38910f4aad310b7e8866ae5f2395f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:ec:7d:52:3e:25:b1:6f:10:99:52:bd:26:
63:d3:e7:df:99:d3:e8:66:a2:fc:a3:16:bc:0a:fc:
c2:2c:2f:06:a5:c7:0d:ba:55:13:7c:36:1a:11:ef:
69:8f:91:58:d1:c3:53:5b:58:34:88:a0:af:17:56:
95:72:5c:c3:5b:84:b5:6a:a1:91:c6:bd:91:b9:23:
6b:98:12:c3:34:d0:99:95:73:c9:4e:f1:5f:30:52:
f8:77:28:79:df:d7:c9:64:7b:41:b6:e3:78:e2:59:
44:3d:6d:70:8f:d8:e1:f8:1f:47:bf:84:9c:26:1a:
c3:a9:8e:ae:c0:ee:a7:f1:a5:59:77:1e:f4:fb:8b:
f5:8e:dd:a7:dd:1b:bb:72:8a:c4:1c:2a:ae:30:e9:
aa:f4:8d:ca:c8:f1:51:ed:e4:d4:18:70:86:bb:89:
e0:c0:ea:df:27:e3:36:e4:c7:e3:d0:77:20:24:71:
0c:a0:16:ae:d5:b4:b8:d7:52:8e:3b:f6:a8:07:68:
cf:a2:79:24:f2:f1:c1:96:31:60:2a:e6:ab:57:51:
93:d3:eb:0c:9e:d7:b5:41:c9:74:d4:1c:a2:06:28:
a5:82:02:2a:d0:3b:d8:00:9c:27:ba:ee:c0:45:ce:
b3:5a:fb:a3:cf:69:75:5f:a9:06:97:4c:ef:51:a0:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:78:8F:BA:38:91:0F:4A:AD:31:0B:7E:88:66:AE:5F:23:95:F1
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ed:25:52:cf:85:d1:c8:3d:75:9e:58:62:8e:a1:9d:11:46:
de:32:14:e4:f7:5b:aa:f0:e8:05:c3:45:68:2b:7f:35:13:2c:
7f:3e:60:d5:05:cc:57:96:cf:1b:8d:c3:7c:0d:e5:2d:2b:1d:
bb:15:43:e4:02:0d:f1:61:24:be:d9:f9:c4:8c:c2:71:9f:af:
ef:31:b3:7e:91:e7:c2:e0:1f:b1:5c:ab:39:9a:d5:20:2e:f0:
3a:51:f0:fb:2e:2d:4e:e8:61:e0:a0:db:19:ef:3d:37:4b:4b:
9c:22:1a:45:9c:88:a8:e2:d1:e9:5d:d0:30:a2:88:a8:94:6f:
5e:13:83:f2:37:04:98:be:1c:bf:24:f3:00:63:dd:fa:68:1b:
2f:05:84:be:b8:18:25:6f:38:fc:96:34:a4:05:5e:92:52:81:
6b:29:f0:6c:4f:76:cd:58:32:21:5f:ea:56:59:cf:44:72:d1:
b3:85:9e:24:1c:ae:2e:26:2b:05:8c:6b:f1:b0:48:35:c6:e9:
6a:22:c3:e2:25:bb:1b:c9:90:2a:7e:90:59:81:0f:12:88:42:
de:4f:86:5d:9d:1e:ae:9d:59:75:b0:99:9a:9d:58:88:cd:cd:
6e:5c:7f:1d:9d:8d:bb:1e:e3:8d:e6:6e:37:6c:f1:53:87:15:
9e:f3:f3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:51:13 2025 by rpki-client