Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: MMmLXRWSSkbCqDLAr+zie6KthEJspG2aY8CyOCbOi28=
Subject key identifier: 06:0A:40:AC:99:6F:BD:A6:17:87:58:B7:E8:0B:B3:75:9E:5A:E4:83
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019A56E4F9CD0CCA5056376766D80A332F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 143F
Signing time: Thu 06 Nov 2025 02:00:37 +0000
Manifest this update: Thu 06 Nov 2025 02:00:37 +0000
Manifest next update: Fri 07 Nov 2025 02:00:37 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: q7mDiK6i+rqFahOpLR8pYGVkDlR+YbhbQokJPRzNc04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:f9:cd:0c:ca:50:56:37:67:66:d8:0a:33:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Nov 6 02:00:37 2025 GMT
Not After : Nov 7 02:00:37 2025 GMT
Subject: CN=060a40ac996fbda6178758b7e80bb3759e5ae483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:e1:d0:ad:0a:4f:da:f1:b8:19:00:7f:50:
62:69:0a:dc:14:f0:94:5f:2a:74:5d:3c:6f:f4:af:
f4:a9:47:a2:d2:64:b1:d5:94:04:1e:a7:5c:4d:50:
f2:27:14:b5:40:86:0f:60:31:b3:31:32:42:6e:97:
90:98:15:c3:8a:f9:23:a8:e3:fa:5e:a9:b3:34:a0:
9c:bb:36:7a:bc:0f:22:51:22:0b:cf:7b:88:56:13:
b1:22:c3:5f:8c:b1:c1:9e:fd:86:5a:80:e3:df:ab:
05:70:12:ce:8e:c9:bd:c4:51:68:58:bc:1b:9a:10:
32:b7:eb:ca:e1:20:54:e5:08:93:b7:4d:c7:f5:b9:
79:66:17:5e:40:73:56:39:57:a8:34:ed:29:90:f0:
49:ef:06:5e:2c:27:73:81:38:15:36:6c:2d:30:ea:
56:c9:57:cb:34:43:62:aa:8a:34:90:3a:d5:bf:40:
21:78:38:c4:35:e3:f4:92:d8:a6:bc:37:d6:b3:ff:
99:0c:ce:54:6c:06:27:17:6c:93:94:e9:c8:23:9a:
97:2b:b0:a7:d4:ee:36:7c:6c:29:f9:01:73:0b:0e:
f3:0c:f2:96:b0:af:ff:3b:26:11:ce:75:2b:0e:fe:
9a:d8:c9:43:97:a6:39:dd:3c:a8:ad:46:24:3c:3e:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:40:AC:99:6F:BD:A6:17:87:58:B7:E8:0B:B3:75:9E:5A:E4:83
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ec:b7:83:ad:c0:8a:0e:70:5b:42:b7:45:5b:8e:84:b2:09:
31:18:00:cc:d5:ea:36:b2:87:96:8a:be:df:54:89:b1:0f:32:
ad:7e:da:3f:16:70:33:c2:31:ad:a8:1f:c8:74:aa:88:2f:e0:
a3:8d:f5:11:fc:ee:cc:63:94:3d:50:81:14:9b:61:76:da:bd:
ce:d2:cc:d2:69:b9:e5:c3:09:e2:a1:01:52:15:6c:15:5a:4d:
c9:94:03:3e:d6:92:17:fc:57:00:d6:5e:75:02:1f:2d:e7:a8:
be:43:09:83:3e:de:ca:38:a2:63:3e:d8:f9:4a:39:36:10:39:
84:cf:21:64:c9:71:f5:47:77:6d:91:94:d4:2c:f6:5e:c2:50:
c5:a1:90:40:11:34:47:d6:b8:69:46:e9:3f:37:88:93:eb:a7:
b5:0e:33:1c:72:7f:5b:97:05:7e:c0:c4:57:2d:2b:4c:cf:8b:
c7:30:e0:48:21:f3:12:d4:25:d3:0f:16:8e:bf:92:4a:f2:aa:
56:d1:2f:0d:3a:41:de:46:84:3d:3a:83:0b:7b:1a:c1:f6:4d:
83:3d:58:cb:7a:d0:5e:29:c3:1a:d6:a5:24:ec:a0:3e:5d:18:
11:2a:3e:4c:15:b7:33:d3:99:8a:21:0c:cc:e1:de:7c:c4:8a:
47:e3:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:01:19 2025 by rpki-client