Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: unxEXXHFFR5SOreHF5BQmeAekXgshO3CvLxkXYRU8Z4=
Subject key identifier: 34:07:60:94:CC:59:A9:F9:24:78:09:4E:C5:BE:54:35:38:A5:99:C5
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019A5AC1BD97C2A35A1185D86FF59EB87296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1441
Signing time: Thu 06 Nov 2025 20:00:37 +0000
Manifest this update: Thu 06 Nov 2025 20:00:37 +0000
Manifest next update: Fri 07 Nov 2025 20:00:37 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: aD8G+ctadxecIyY3+Wt90+f2GO3ltTjdDa5IJQCY8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:c1:bd:97:c2:a3:5a:11:85:d8:6f:f5:9e:b8:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Nov 6 20:00:37 2025 GMT
Not After : Nov 7 20:00:37 2025 GMT
Subject: CN=34076094cc59a9f92478094ec5be543538a599c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:14:8b:ad:28:7b:e3:0e:af:88:46:b5:48:
a3:4f:f0:d0:5a:3c:05:12:9f:8f:67:90:39:e6:48:
66:1f:2d:fe:80:19:7f:1e:f3:a9:5d:6a:85:d3:6a:
63:0d:c4:da:44:07:37:7d:7e:13:58:7f:44:25:d1:
8b:81:d6:f8:0d:9a:67:4b:16:c6:18:02:05:ed:3a:
b5:cc:77:d3:27:50:0a:ed:e7:93:d7:33:be:8f:e0:
fe:59:c5:37:27:db:c6:8e:65:a1:10:39:6d:b2:6d:
6a:f9:54:cc:5e:53:62:e4:4a:20:03:80:4e:81:24:
e3:d1:62:58:5d:11:f9:fc:66:6a:e2:1a:07:7b:46:
b9:72:03:c9:03:bb:90:29:82:a7:db:59:20:da:9d:
d5:de:c5:a1:a7:f7:ac:1b:cd:84:87:56:34:76:d9:
9b:6e:42:58:f0:89:82:1b:c6:be:3b:78:bb:ba:d1:
52:18:2d:94:01:92:b7:d6:ad:7e:fc:50:b1:e1:87:
e4:2c:07:1f:1b:8e:db:27:41:79:dd:05:f7:d8:41:
5b:86:4f:f3:8e:2c:e5:b3:25:ec:32:2e:82:ce:ee:
c8:7f:3b:1f:d5:42:59:0b:f2:ee:60:dc:b4:f5:15:
4c:34:db:95:e7:97:1f:82:4b:98:91:76:e0:53:9f:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:60:94:CC:59:A9:F9:24:78:09:4E:C5:BE:54:35:38:A5:99:C5
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:b6:9c:d9:8c:cc:a0:87:77:dd:42:45:03:9c:6d:fc:0f:
a9:06:cf:f1:5f:f2:a8:36:e2:f5:4c:ed:2e:79:8f:ca:65:c5:
60:82:55:35:4b:d1:24:ef:bd:49:3d:2c:b7:f2:7d:f4:68:b6:
75:af:9c:99:2b:cd:eb:52:67:b5:52:2b:48:fe:53:f7:07:3d:
3e:5b:fc:69:8c:dc:8a:f9:19:89:a8:5f:04:12:bc:9a:18:de:
69:b0:62:03:63:eb:c6:ec:d6:0a:cb:9d:1b:f2:62:f8:a1:6b:
2a:88:76:44:c6:11:bd:57:22:7b:01:10:42:f2:fa:1e:58:09:
34:bd:da:56:d0:00:3f:7f:95:8a:d4:f6:50:71:ff:93:ca:2b:
17:1c:fc:b6:d8:5e:ab:41:5e:4f:ad:3b:61:71:21:d5:14:cb:
ce:48:ec:75:c4:ee:87:d8:de:58:3f:29:d4:ef:97:ca:1d:b2:
a8:21:3c:1b:f0:58:e6:2d:97:ed:9c:35:fa:82:09:60:23:37:
84:74:99:6a:3b:4c:e9:1a:df:a7:75:0d:d0:cb:b5:c5:89:3a:
3a:f1:84:6d:e0:5a:48:64:a8:76:38:fc:b5:2b:05:95:f2:2d:
5d:3c:17:46:68:ad:ec:9c:c1:52:5b:87:f9:71:bb:e0:76:72:
cc:43:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 04:40:11 2025 by rpki-client