Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: N6utQ4UNbh9Mon6CnHskCSdV93AFmDRpPICODTydhOk=
Subject key identifier: F0:AD:A3:EE:29:E8:0D:1F:1E:52:71:65:2C:85:CD:26:3B:31:A3:92
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019896DBCB7CF471810551DFA84E033FCB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 15BB
Signing time: Mon 11 Aug 2025 02:00:43 +0000
Manifest this update: Mon 11 Aug 2025 02:00:43 +0000
Manifest next update: Tue 12 Aug 2025 02:00:43 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: iEFerJgdtcrBThZ1k0w26UXlwc7NYBHepzPhaqGDBio=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:cb:7c:f4:71:81:05:51:df:a8:4e:03:3f:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Aug 11 02:00:43 2025 GMT
Not After : Aug 12 02:00:43 2025 GMT
Subject: CN=f0ada3ee29e80d1f1e5271652c85cd263b31a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:cd:33:48:52:1e:95:34:88:91:9f:0a:10:
4a:1c:1a:3b:49:28:c4:a8:57:09:06:06:73:19:b4:
13:8d:fe:b0:cd:25:29:dd:a5:fe:ee:e2:17:58:a5:
a9:7a:c7:f2:ef:5c:fe:fb:77:b0:54:f4:00:fa:52:
c9:9b:b0:97:c0:50:ce:c8:c3:e7:5e:0c:5c:1e:8d:
74:7a:bb:78:07:07:7d:35:9f:21:36:73:7f:ca:d4:
13:a5:06:ac:80:7c:91:75:2f:47:88:bc:29:4a:2b:
fb:f8:08:88:27:19:62:d1:fd:ce:91:0b:60:d8:be:
db:e6:2e:e8:ad:61:41:99:17:c0:87:89:e7:91:bd:
d7:df:86:60:20:4a:07:5a:ea:cb:98:61:dd:32:0d:
89:ae:13:56:24:47:14:cf:00:3d:2d:c2:26:e8:59:
d3:a8:36:de:83:25:84:4a:22:3a:60:f5:c2:79:8a:
8f:94:98:2e:79:1e:72:2a:96:fc:c3:3d:c5:21:c2:
ae:0a:87:5c:53:13:2b:57:7a:97:2b:b9:7d:40:33:
9f:4e:83:83:0a:24:78:68:87:91:0a:b2:48:af:76:
99:1e:10:9a:b7:09:63:bc:d7:ec:fa:43:58:7e:8f:
04:18:5d:87:39:17:12:23:7e:68:37:f1:56:6b:13:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:A3:EE:29:E8:0D:1F:1E:52:71:65:2C:85:CD:26:3B:31:A3:92
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:28:36:e4:e6:a2:9e:39:61:24:38:6b:11:91:fc:d4:25:86:
7d:a6:2e:f8:e0:8a:ef:ee:4b:13:05:ed:7f:35:e0:19:df:25:
59:b9:09:d5:97:30:b2:f4:6d:f1:aa:a3:78:5e:55:07:3a:f2:
65:d6:26:fb:aa:4f:a3:74:cf:29:7f:f1:51:8f:96:f9:80:9c:
5c:14:47:1d:36:d8:5b:36:ae:3b:b1:8d:0b:d8:45:e5:26:64:
3a:a4:c2:66:03:7b:aa:cc:c7:4e:fb:fa:29:4a:db:58:c6:82:
6a:78:de:d8:c9:9a:a7:dc:04:46:b4:e1:d4:14:8d:4c:bc:41:
7a:47:bf:d5:5b:be:ba:86:2f:0c:e6:41:a5:2f:83:c9:cc:16:
6e:07:39:74:f7:fa:0d:5f:8b:5e:a6:a9:1f:37:4f:51:11:54:
c7:89:2e:15:0e:9c:3f:86:49:2a:93:34:f0:1c:45:84:53:89:
41:5b:69:f6:bd:fd:dd:aa:3d:6a:2f:ae:8a:4b:23:0a:11:3b:
1a:09:34:d3:07:59:5e:c5:dd:11:ef:a2:7f:67:97:8c:1b:a3:
77:32:10:56:5b:f7:96:0a:54:db:1e:36:11:85:64:68:6a:35:
ab:18:db:ad:58:77:5c:fb:08:aa:89:54:ca:0f:6d:97:d8:04:
62:68:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:43 2025 by rpki-client