Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: EX7HyZcsGwnN01h6WjkJXo9Ny8laSaeMXaOP+/Wa+ic=
Subject key identifier: E1:04:9E:34:F9:A8:5B:BD:26:B7:A0:65:14:AA:F5:10:A5:C5:18:7D
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019A4F2B6727C08533B7AD76707AA6CA689B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: QZr51avHe6G+3iExrrPNoIrtWKvaQo5nr5634g7ekjo=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:67:27:c0:85:33:b7:ad:76:70:7a:a6:ca:68:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=e1049e34f9a85bbd26b7a06514aaf510a5c5187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:91:6d:88:b0:98:99:80:3c:2b:92:54:23:
4f:17:f3:78:ca:3f:90:20:97:67:4e:7b:dc:d9:7b:
55:7a:ea:87:1a:56:07:93:91:f7:4e:c3:ed:48:a9:
03:5a:31:90:26:17:06:43:12:34:f2:f5:ac:59:96:
e6:a7:8d:8a:d4:1d:58:8a:3c:32:da:94:9b:ba:c8:
23:be:61:14:b1:9e:a0:40:0c:3f:bf:5e:f4:06:6f:
93:a4:e5:da:00:7f:23:72:42:ee:34:d1:da:5d:5b:
df:41:75:04:98:39:f1:ef:80:61:e3:61:85:1e:0c:
ef:02:fd:a8:f9:a0:e1:fe:d1:03:c4:67:ba:5c:80:
f3:b4:cb:a8:74:c5:fc:e5:a0:d8:30:30:fa:82:30:
e6:8a:bd:8c:39:76:d5:1f:fa:05:fe:65:50:93:91:
14:b3:12:c3:34:51:ee:fe:cb:14:91:a2:09:0b:a1:
eb:52:44:62:34:66:72:2f:d7:90:47:21:82:ec:90:
5a:c9:20:97:8c:45:67:36:9b:4d:22:0e:82:4e:36:
0f:6e:e0:4f:fd:b2:5e:5f:44:8a:63:3c:b7:1f:29:
8b:cb:d6:74:9c:fa:4a:b4:61:38:bb:5e:4d:27:8b:
32:e0:c5:90:1a:ab:62:2f:33:80:ee:fa:24:9a:4b:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:9E:34:F9:A8:5B:BD:26:B7:A0:65:14:AA:F5:10:A5:C5:18:7D
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:f5:c6:95:8a:84:c5:05:c1:57:5c:20:7a:c4:6b:46:79:
97:ab:ec:e7:38:22:66:b9:b7:fd:e9:03:cf:a7:24:0b:2f:bd:
4f:d5:42:ce:ca:8d:4b:72:e1:e2:fb:74:db:69:00:9c:eb:a1:
5a:e0:37:06:97:2e:be:dd:3f:ac:ec:f3:6f:be:85:97:74:a5:
fa:a7:b7:6a:3a:c4:2c:ef:2f:7e:5f:26:00:ef:f9:4c:f1:69:
4b:61:f5:2a:8e:39:f5:28:25:3a:5d:72:e7:f6:30:b4:d3:b3:
ef:23:26:77:f7:5f:75:2a:df:c9:90:5b:20:64:c1:fe:57:3f:
f4:de:52:d3:79:55:25:32:3a:06:16:b7:d3:89:85:42:83:53:
18:08:37:15:d6:00:48:1e:2b:0b:27:42:5a:a1:8c:62:24:07:
c3:4d:6a:5e:d7:0f:b0:f3:bc:96:40:f4:2c:1d:72:68:d1:fa:
fe:ad:94:eb:ad:48:a2:ea:c0:d4:bd:0a:ce:02:40:48:65:68:
83:66:6f:51:20:d3:ab:ee:69:43:88:1b:2f:0d:b8:c0:59:b5:
48:7d:f5:cd:d4:2b:12:c9:7d:47:2a:e0:6a:52:20:41:7b:58:
21:a7:87:9f:b7:af:aa:f0:b4:38:b8:db:4a:c2:5b:d7:79:26:
47:c7:b3:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK2cnwIUzt612cHqmymibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjUxMTA0MTQwMDM1WhcNMjUxMTA1MTQwMDM1WjAzMTEwLwYDVQQD
EyhlMTA0OWUzNGY5YTg1YmJkMjZiN2EwNjUxNGFhZjUxMGE1YzUxODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/eRbYiwmJmAPCuSVCNPF/N4yj+Q
IJdnTnvc2XtVeuqHGlYHk5H3TsPtSKkDWjGQJhcGQxI08vWsWZbmp42K1B1Yijwy
2pSbusgjvmEUsZ6gQAw/v170Bm+TpOXaAH8jckLuNNHaXVvfQXUEmDnx74Bh42GF
HgzvAv2o+aDh/tEDxGe6XIDztMuodMX85aDYMDD6gjDmir2MOXbVH/oF/mVQk5EU
sxLDNFHu/ssUkaIJC6HrUkRiNGZyL9eQRyGC7JBaySCXjEVnNptNIg6CTjYPbuBP
/bJeX0SKYzy3HymLy9Z0nPpKtGE4u15NJ4sy4MWQGqtiLzOA7vokmkvBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEEnjT5qFu9JregZRSq9RClxRh9MB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBv1xpWK
hMUFwVdcIHrEa0Z5l6vs5zgiZrm3/ekDz6ckCy+9T9VCzsqNS3Lh4vt022kAnOuh
WuA3Bpcuvt0/rOzzb76Fl3Sl+qe3ajrELO8vfl8mAO/5TPFpS2H1Ko459SglOl1y
5/YwtNOz7yMmd/dfdSrfyZBbIGTB/lc/9N5S03lVJTI6Bha304mFQoNTGAg3FdYA
SB4rCydCWqGMYiQHw01qXtcPsPO8lkD0LB1yaNH6/q2U661IourA1L0KzgJASGVo
g2ZvUSDTq+5pQ4gbLw24wFm1SH31zdQrEsl9RyrgalIgQXtYIaeHn7evqvC0OLjb
SsJb13kmR8ezmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:16 2025 by rpki-client