Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: xMFQBns5RyS5hDE8Orr9rzXLwn36MgcsCsZndF1Wopo=
Subject key identifier: 6D:5E:22:99:B4:FA:90:D5:53:AA:44:D5:33:00:69:0F:08:31:60:12
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 0198499C77E419D611FAB8C6DA00FB02D6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 132F
Signing time: Sun 27 Jul 2025 02:00:47 +0000
Manifest this update: Sun 27 Jul 2025 02:00:47 +0000
Manifest next update: Mon 28 Jul 2025 02:00:47 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: QArv4RDpuWd83l9NQgkaKj/lohCrfikC5+23MiT1u78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:77:e4:19:d6:11:fa:b8:c6:da:00:fb:02:d6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jul 27 02:00:47 2025 GMT
Not After : Jul 28 02:00:47 2025 GMT
Subject: CN=6d5e2299b4fa90d553aa44d53300690f08316012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:1c:b6:d0:18:5a:53:c8:7c:4f:ff:40:dd:
a7:33:b4:71:89:2a:16:a4:0b:2e:ce:f9:24:a8:fe:
8f:bc:70:6a:56:2c:da:3f:68:02:39:46:54:1f:91:
a9:eb:fe:f9:e7:be:07:ee:6d:2e:79:16:0b:67:41:
19:e0:1c:03:de:64:85:35:b0:1a:f0:72:78:24:de:
3f:66:5b:34:29:de:20:48:85:c8:81:2e:ca:69:8d:
77:dc:9b:12:1e:ca:03:bf:30:48:6a:11:11:a9:66:
94:11:43:c3:86:5f:fb:f8:e3:3e:e6:a3:2f:da:8d:
29:0a:5f:ec:97:5e:33:6e:c6:f0:ca:7c:dd:56:75:
c9:58:43:bb:c3:4a:a5:c9:25:d9:89:92:ff:41:19:
ff:16:fc:b4:62:7c:f1:06:ae:e9:b3:15:2a:5e:03:
f0:75:28:e0:3b:b6:f3:3e:7b:de:78:cb:67:32:3f:
c5:f6:dc:49:60:7b:ba:b1:b2:30:91:7d:7f:bd:5d:
96:29:9d:b0:6d:29:69:dd:66:bd:05:66:b8:f2:7f:
2d:3c:80:60:5e:46:25:7b:93:dd:d2:4c:2f:6a:dc:
46:b4:2d:42:63:e1:2f:3a:4c:d4:93:ec:fd:82:77:
93:80:49:ce:23:14:6a:8d:64:ab:2f:53:2a:12:b7:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:22:99:B4:FA:90:D5:53:AA:44:D5:33:00:69:0F:08:31:60:12
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:a5:0b:3b:76:60:5f:45:0a:43:18:f3:02:e2:60:e4:fe:
f7:d6:1a:f7:a5:15:2b:64:e8:03:73:81:ab:59:5d:d7:c2:b8:
1c:a1:8d:32:29:21:a1:60:06:ba:c6:68:cb:bd:38:9a:39:63:
b3:ec:34:12:2e:8f:63:6b:84:df:a4:b4:34:78:84:e8:14:42:
cb:8f:9c:7b:ed:d4:0b:92:ad:32:6e:46:d8:7f:75:5a:40:07:
f9:c6:0f:b6:7b:ad:6c:1b:57:54:62:4c:9f:91:e2:9f:62:ed:
b9:f5:83:cb:ed:66:7b:3f:04:a8:a2:fb:99:8f:74:61:cf:7b:
6a:0d:2c:c7:5b:96:a9:76:d3:cb:ed:ec:60:13:ce:d8:57:af:
a6:63:c1:ac:87:a5:40:eb:46:af:4a:74:18:ea:37:32:b2:dd:
44:a0:05:23:97:7f:a8:55:0d:fa:a4:fd:8c:f5:af:f4:55:0c:
b2:cb:3b:29:c4:00:65:c3:7c:02:54:bf:d2:a6:a5:3d:e0:de:
87:49:33:65:a9:87:40:0e:7b:7a:53:51:df:96:30:a5:c1:d7:
9b:5c:07:19:b0:49:86:85:18:8c:44:d4:2d:fd:88:50:87:58:
64:2e:f1:8f:23:e0:aa:5a:43:bf:ab:6e:12:38:d8:93:7e:e3:
83:b6:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:14 2025 by rpki-client