Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: YeHkP7d+69nU9SBqlok7E+b7RaEiJo98qibssNl1Rcg=
Subject key identifier: 27:9A:8A:E2:B0:FD:10:0B:B1:B1:B6:28:E8:47:90:7C:D9:36:0B:8E
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 01976997BA89823B699FCE94338AC47F1F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 12BB
Signing time: Fri 13 Jun 2025 14:00:40 +0000
Manifest this update: Fri 13 Jun 2025 14:00:40 +0000
Manifest next update: Sat 14 Jun 2025 14:00:40 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: Pvi87OGq7YuV+5tppe9+V+jNONA1s9zrhliOQcsLjgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ba:89:82:3b:69:9f:ce:94:33:8a:c4:7f:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jun 13 14:00:40 2025 GMT
Not After : Jun 14 14:00:40 2025 GMT
Subject: CN=279a8ae2b0fd100bb1b1b628e847907cd9360b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:ac:13:3d:79:a8:2f:76:e1:5c:27:2e:cb:
02:8f:96:6a:10:e4:6c:71:e4:9e:aa:b1:7d:bf:9e:
e4:91:91:df:f7:28:3f:43:57:b0:cb:7b:5c:5d:be:
cd:e2:30:b1:1b:6d:a3:e1:13:0e:4c:93:f0:f5:17:
39:1c:f7:0f:71:47:0e:64:67:e0:06:34:3f:b4:7c:
9e:1d:93:43:d4:cf:55:e0:82:9c:3e:29:90:d6:f1:
d6:fb:1c:06:4e:8c:d5:e9:53:14:51:8b:a6:00:b9:
d4:b8:34:cb:71:e9:73:a5:ca:af:3e:65:ee:11:f8:
d5:e4:b7:a2:21:7c:5e:87:1a:07:b1:3d:82:1c:b0:
43:7f:19:d5:39:34:fa:a7:ec:38:7b:33:eb:78:5b:
61:45:e6:b1:81:5f:b0:a9:00:f3:d0:9b:70:71:63:
26:5c:6b:ba:6c:45:f3:ec:f4:33:3a:9d:e7:b9:59:
8d:00:cd:d6:6f:49:d8:0d:3d:2a:3f:cb:4b:3b:c0:
50:b2:03:51:0f:66:0f:72:3c:69:29:04:f9:67:d1:
d5:69:5b:87:46:c9:ec:1a:c8:0e:52:5d:a2:23:90:
35:86:4a:a1:d3:1b:06:7d:3f:c5:40:05:a0:26:11:
bb:14:90:50:83:38:95:be:69:5a:40:84:04:2d:4c:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:8A:E2:B0:FD:10:0B:B1:B1:B6:28:E8:47:90:7C:D9:36:0B:8E
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:f8:16:8d:6c:dd:62:ae:ca:78:f0:38:d0:cf:85:3e:ab:
7d:63:51:e0:9e:ff:40:75:78:5e:b8:39:d4:0b:51:4f:c0:13:
80:48:e3:55:87:02:5d:fb:d5:4c:e3:29:52:30:17:a1:9d:75:
2e:69:b1:05:33:9f:1c:b5:4d:9d:f0:ae:f7:f3:5f:f5:4a:01:
48:60:fe:0c:d9:e8:ef:f6:5c:9f:d6:f6:cb:c9:83:e3:c9:63:
87:73:e3:41:50:c8:9a:3f:90:5d:32:4f:fe:96:80:23:3f:77:
f4:08:9c:5d:a0:31:c2:ce:6f:6c:22:3a:a7:26:70:3d:15:2d:
22:ff:30:8c:56:88:86:60:7d:94:fe:17:30:22:fa:b1:81:ff:
b9:c9:26:57:d2:af:de:62:e1:8b:11:8a:9c:25:e4:91:87:6d:
3e:24:55:49:9a:d9:f4:83:36:13:16:ea:42:e0:6e:f9:ad:d4:
38:e1:db:03:5f:f0:d6:57:be:d6:94:20:5e:8e:35:e7:f2:be:
05:36:56:e8:8d:f5:33:3a:6e:86:9e:1b:17:42:fa:47:9f:73:
a0:1a:24:ae:bc:56:48:83:d7:d5:47:63:d5:12:8f:7f:fa:b6:
ab:21:37:4e:91:da:84:f8:be:81:59:fa:04:67:9b:39:78:34:
7d:1e:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:42 2025 by rpki-client