Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: UHFcmpxldIjzjEXSidNGZuWr0Wcn+ENCPHAgZFRjgbM=
Subject key identifier: 43:DC:64:8B:A8:A9:F8:41:8E:3E:56:ED:8A:0B:F4:41:72:09:43:CB
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 0198D6986380C5ED23E248D20973FE80F349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1378
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: W9NIN2sTp8JM6107W5bZucnvo8GIWBln7eMPJSiRSCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:63:80:c5:ed:23:e2:48:d2:09:73:fe:80:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=43dc648ba8a9f8418e3e56ed8a0bf441720943cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:98:a8:d3:67:50:d1:49:8e:dd:8a:a0:e9:
83:e8:00:73:7c:18:63:12:3a:4f:0d:c5:a4:71:93:
69:5f:7d:02:ab:6a:f0:e1:69:a3:9b:67:c9:32:19:
90:30:f6:66:6b:a8:00:8e:60:39:ad:f0:e9:68:ed:
57:23:9a:b5:60:eb:6a:e5:fd:46:4b:af:cd:65:45:
0a:4c:37:ca:73:3c:a7:21:3e:e8:18:85:b8:ff:31:
4f:cc:95:93:8b:f5:ff:5a:b7:3d:ea:82:dc:c4:31:
39:14:d0:d5:1e:3f:9a:1b:fb:fb:a5:a4:24:b5:5f:
8a:cd:97:1c:95:b4:05:ec:6c:9a:d0:15:15:36:c9:
75:8a:a1:93:f0:fc:54:82:f4:4e:0e:70:de:13:4e:
de:27:0f:5a:70:d0:bc:de:77:bc:6a:d3:7e:c2:08:
6f:cf:06:46:7e:4a:1e:1c:47:39:49:4c:c3:ca:ed:
c6:10:7c:19:4e:3f:72:a1:f3:03:9d:5f:de:24:6d:
8c:37:f5:cb:70:8d:01:f2:30:5a:e8:1e:84:ca:d8:
1b:8d:dd:e3:a2:7b:0b:09:21:ab:12:cb:b3:55:41:
9c:c1:1a:e2:2c:5b:61:9a:ae:30:ae:fd:da:56:c2:
06:89:ba:56:47:80:0c:50:43:7a:d6:d2:cf:71:4b:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DC:64:8B:A8:A9:F8:41:8E:3E:56:ED:8A:0B:F4:41:72:09:43:CB
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:70:9c:e8:a8:58:4c:31:83:c8:24:6b:3b:16:eb:31:92:
05:04:90:24:4e:7e:b6:3d:55:49:df:c0:36:d3:70:46:ef:c8:
94:45:67:20:64:c1:d6:43:b7:6b:69:a2:56:b8:6d:44:7c:f0:
92:30:96:e0:9e:eb:33:78:1d:55:a2:47:24:a8:ee:89:04:54:
2e:3d:f4:03:9e:dd:1b:4f:7b:42:5b:c6:78:e2:29:6b:08:f0:
67:47:97:9c:03:ee:f5:1b:6e:4e:42:0c:cf:f4:2a:3a:7e:69:
c6:bf:f6:5e:88:ae:1e:10:cd:2c:be:01:2b:55:3a:b2:1c:7b:
e7:5c:d0:87:41:41:18:d9:2b:7b:51:62:92:32:bb:22:e2:ea:
5e:bf:04:98:f1:6a:93:56:ee:1b:ae:ad:58:a9:5c:4b:77:c4:
05:32:b2:28:76:e1:c0:49:9b:18:db:5c:37:ba:ac:b0:5f:26:
f7:16:7d:4e:5d:0a:3a:b9:5f:47:d6:29:f5:2e:c9:66:32:76:
37:30:d3:e3:fa:e3:29:34:d3:c6:6f:3f:a7:c0:9a:65:a1:54:
9c:74:8c:30:43:91:5d:de:ca:db:ea:5c:77:32:e9:71:43:c8:
6a:fd:07:b9:88:ac:47:3e:12:92:8e:ed:74:e8:a8:9f:ff:d0:
98:1d:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:06 2025 by rpki-client