Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: EJFsBpFLPB17sk9iTQ+llmPI5jwMjr+yDjXy5GkltOc=
Subject key identifier: 53:FE:EA:E8:96:FC:58:E3:2C:7F:17:03:60:6C:C2:8F:DC:30:16:FA
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 01987419515D5B1C63B72A4A1CD71E26B766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1345
Signing time: Mon 04 Aug 2025 08:01:12 +0000
Manifest this update: Mon 04 Aug 2025 08:01:12 +0000
Manifest next update: Tue 05 Aug 2025 08:01:12 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: Ju67ajfYkyPx44o4OiWzOhFVRHbteqekUTpr9xk+iTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:51:5d:5b:1c:63:b7:2a:4a:1c:d7:1e:26:b7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Aug 4 08:01:12 2025 GMT
Not After : Aug 5 08:01:12 2025 GMT
Subject: CN=53feeae896fc58e32c7f1703606cc28fdc3016fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:48:9e:5c:7f:fa:fa:c5:02:f1:7a:32:ee:
f4:2f:48:ec:67:00:8a:fa:fe:35:26:06:eb:84:22:
9b:f6:c8:75:5c:6e:44:4c:04:07:b1:d0:55:2b:a5:
e8:ca:b6:7b:18:a6:8d:05:76:d8:de:81:e3:d6:f3:
8e:e1:e3:0a:b1:64:20:00:e0:91:58:2a:ae:9c:70:
ce:87:f8:82:22:32:01:99:20:1f:d7:ac:5c:d0:fb:
3d:83:dc:18:17:97:1d:06:9d:2f:66:18:08:cf:be:
22:30:4a:fa:89:1c:21:b8:b0:8d:62:3a:d9:27:00:
dc:de:9b:c1:3c:54:15:4c:ba:0e:4a:ac:03:a7:a4:
c9:1f:55:ec:b5:05:96:65:c2:d8:92:0d:35:4a:67:
19:ff:66:5c:16:6a:80:27:c3:4b:a2:2e:f4:81:d3:
16:8b:fd:4e:87:b6:9a:b6:f2:8a:6e:3d:38:2d:43:
f3:81:85:5c:57:b9:3e:0a:e6:04:3f:3f:6b:00:10:
53:dc:71:7d:9b:11:2f:b3:fe:46:3d:b8:70:a5:e3:
79:63:aa:1b:22:52:6d:27:04:41:f8:58:6e:a6:41:
e8:87:35:0e:88:fc:8a:b4:f9:2f:6c:ad:12:9e:0d:
6f:8e:ac:20:59:86:18:b5:bd:9a:30:d0:55:2d:ab:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:EA:E8:96:FC:58:E3:2C:7F:17:03:60:6C:C2:8F:DC:30:16:FA
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dc:d5:9a:0d:29:55:3c:bd:30:66:12:c5:2b:0f:24:62:87:
1f:43:77:c6:bc:c9:79:b7:83:8a:55:48:cd:73:18:7a:08:63:
cd:6f:84:33:10:a4:41:7e:4b:15:7c:d2:8f:ca:cb:8b:c4:62:
f6:79:11:9d:db:8b:e8:23:69:a9:25:76:2b:b6:d8:16:3f:b3:
bf:5e:8d:b8:ee:c2:2b:fd:aa:41:ef:a8:92:a4:a2:96:27:41:
da:8b:ba:cd:e0:85:df:32:a1:f5:97:fb:6c:ed:7e:73:8b:b7:
d3:29:d0:7f:52:b1:40:3e:f1:a6:0a:72:db:38:1d:ec:88:6a:
98:ac:45:ef:a1:1f:c5:65:d3:fb:3e:65:14:a8:a5:13:0d:17:
b4:fb:a9:16:1e:d9:dd:be:13:64:e7:a1:37:9a:41:9b:3f:0d:
d0:7a:dd:8e:35:69:e8:7a:fe:d9:d1:23:db:9f:0c:2b:02:c2:
f1:eb:f8:43:9c:80:77:bd:2f:92:c1:66:a2:0f:27:ea:64:77:
7e:8b:2e:7f:0c:c4:46:38:c6:46:c4:c4:ce:62:62:bb:37:5a:
de:f4:33:a3:fc:e5:51:c7:15:da:e4:d2:03:c5:c7:77:d1:fd:
01:06:40:91:c8:09:ae:5f:58:37:d8:db:6b:37:ea:35:67:ae:
c5:3b:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:39 2025 by rpki-client