Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: tj1oMEIn/bSTkA0cQ1G+LMCfy0K+r/eH0iHkoFmk2z8=
Subject key identifier: 10:A3:A9:CF:E8:BB:95:29:A7:A8:7D:12:D7:81:7F:53:5D:12:94:2C
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 0197B6D79776A1DDC8FB8BBCE2E898E2E868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 12E3
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: FULKLVXoVQ8uQxyo9/tmWu4WAcMTcKOuWyyrDN4own8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:97:76:a1:dd:c8:fb:8b:bc:e2:e8:98:e2:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=10a3a9cfe8bb9529a7a87d12d7817f535d12942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:1e:db:c0:66:31:7b:db:1f:ce:86:ab:80:
3e:78:ea:5c:b3:b2:41:e6:6b:c1:7d:e2:be:85:c8:
2a:07:a3:50:ce:e2:c3:ca:38:98:08:7d:89:a0:28:
c3:d6:71:64:ff:78:12:18:0a:91:d8:6f:77:a8:82:
d6:7a:ce:2b:83:35:0a:b9:7d:65:05:aa:0e:00:fa:
16:06:b7:48:a2:ed:5b:d9:00:cc:a5:8f:b3:c4:ad:
c0:25:1c:af:ec:1e:83:8b:19:f5:c1:89:93:8f:d5:
d1:56:c6:83:b7:19:bb:36:6c:2c:41:e7:c2:f0:63:
ae:05:fd:3c:a0:00:ce:b2:81:15:62:3d:53:c6:e0:
aa:18:dd:02:f3:26:c2:32:f6:2b:7d:ac:38:3b:da:
be:27:e2:51:5c:db:72:da:93:71:a0:57:5a:90:36:
48:a2:fd:85:5f:bc:0b:ed:87:7f:a2:a6:78:53:0e:
bd:61:74:4c:8e:84:d8:34:a3:19:08:a8:47:a0:78:
09:ab:3d:c8:ac:04:e0:b4:58:cc:2b:73:db:5b:c8:
ff:f8:50:8a:f6:4c:3b:ec:f3:68:05:7d:47:cc:f3:
7e:89:7c:e0:51:a3:c7:9b:fb:95:f1:ed:be:60:d2:
1f:06:6d:d5:11:0f:a2:aa:d0:23:a6:a8:f3:a9:be:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:A9:CF:E8:BB:95:29:A7:A8:7D:12:D7:81:7F:53:5D:12:94:2C
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:2f:ac:36:fe:b1:ba:d2:78:b0:41:c9:da:64:75:3c:16:
e2:62:2b:88:41:c7:27:e9:a2:65:4a:e4:c3:8d:00:1d:36:9b:
a4:72:06:ad:00:9a:56:4b:79:74:cd:f2:ce:3f:ba:e3:66:c9:
a5:43:dd:76:03:34:7c:2b:ea:c3:33:cc:71:46:f9:e1:d3:03:
68:61:82:3f:d2:90:aa:0d:58:b0:5a:c3:74:de:e2:f2:80:68:
c3:75:5d:20:90:71:a4:3a:33:e8:5b:c6:08:a5:15:f1:28:54:
21:a3:0b:0d:35:2c:c3:ca:b9:33:cb:fa:70:48:96:16:6d:9a:
96:70:eb:f9:a2:25:aa:5a:f2:a9:d2:52:cc:14:f0:0c:31:c9:
58:5f:f8:47:9e:18:41:81:80:70:4f:6c:2b:cd:72:84:9e:f3:
14:82:ec:49:69:c9:ca:02:00:c5:40:ce:4e:74:88:f5:99:f9:
f0:a9:95:68:2c:e1:28:f3:76:5b:90:e9:ca:db:ac:7b:13:ec:
1c:23:12:3a:02:fc:63:95:c8:9c:a5:16:d6:a5:c5:db:46:24:
5f:21:c9:7c:44:9e:e2:42:69:40:5b:88:5a:37:f9:7b:d9:19:
b8:65:5c:7d:d6:ce:f3:85:38:b6:09:8b:3a:36:87:b9:c5:e9:
35:ad:2a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe215d2od3I+4u84uiY4uhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy
Nzg2NWQwHhcNMjUwNjI4MTQwMTExWhcNMjUwNjI5MTQwMTExWjAzMTEwLwYDVQQD
EygxMGEzYTljZmU4YmI5NTI5YTdhODdkMTJkNzgxN2Y1MzVkMTI5NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYAe28BmMXvbH86Gq4A+eOpcs7JB
5mvBfeK+hcgqB6NQzuLDyjiYCH2JoCjD1nFk/3gSGAqR2G93qILWes4rgzUKuX1l
BaoOAPoWBrdIou1b2QDMpY+zxK3AJRyv7B6Dixn1wYmTj9XRVsaDtxm7NmwsQefC
8GOuBf08oADOsoEVYj1TxuCqGN0C8ybCMvYrfaw4O9q+J+JRXNty2pNxoFdakDZI
ov2FX7wL7Yd/oqZ4Uw69YXRMjoTYNKMZCKhHoHgJqz3IrATgtFjMK3PbW8j/+FCK
9kw77PNoBX1HzPN+iXzgUaPHm/uV8e2+YNIfBm3VEQ+iqtAjpqjzqb5HVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCjqc/ou5Upp6h9EteBf1NdEpQsMB8GA1UdIwQY
MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt
ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw
LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDcvrDb+
sbrSeLBBydpkdTwW4mIriEHHJ+miZUrkw40AHTabpHIGrQCaVkt5dM3yzj+642bJ
pUPddgM0fCvqwzPMcUb54dMDaGGCP9KQqg1YsFrDdN7i8oBow3VdIJBxpDoz6FvG
CKUV8ShUIaMLDTUsw8q5M8v6cEiWFm2alnDr+aIlqlryqdJSzBTwDDHJWF/4R54Y
QYGAcE9sK81yhJ7zFILsSWnJygIAxUDOTnSI9Zn58KmVaCzhKPN2W5DpytusexPs
HCMSOgL8Y5XInKUW1qXF20YkXyHJfESe4kJpQFuIWjf5e9kZuGVcfdbO84U4tgmL
OjaHucXpNa0qhw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:40 2025 by rpki-client