Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: btDpMhcBKMaQh60WnTSBu6tAh7gxuZQrT3Dyotcn+N8=
Subject key identifier: 44:22:A6:E3:9D:08:0A:C7:C0:D8:B1:CD:6F:3E:FE:DC:07:8D:4C:C8
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019A52D2345A05425B5E77985CE5D83E52AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:01:38 +0000
Manifest this update: Wed 05 Nov 2025 07:01:38 +0000
Manifest next update: Thu 06 Nov 2025 07:01:38 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: qNH9gp89hlI9KYntmelRfYaYSj50Gay/dLQtjBwDA2o=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:34:5a:05:42:5b:5e:77:98:5c:e5:d8:3e:52:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Nov 5 07:01:38 2025 GMT
Not After : Nov 6 07:01:38 2025 GMT
Subject: CN=4422a6e39d080ac7c0d8b1cd6f3efedc078d4cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:5d:a3:3f:97:26:f9:f5:4e:54:c8:46:bd:
35:97:0e:b7:3b:dd:02:1e:50:67:2b:4c:08:06:9c:
b5:b6:94:61:fd:50:12:08:bd:4c:b4:45:24:bc:c3:
4a:eb:2c:f6:d4:11:24:ad:17:ed:a5:e9:1d:4b:fb:
45:1a:e1:a8:31:94:8b:cf:55:6e:0d:32:01:6c:d5:
f4:e5:73:ff:e5:f0:fe:dc:31:38:a4:5f:01:a5:5a:
f8:c6:7d:07:82:da:6a:43:21:23:58:29:cb:37:82:
90:4c:f9:7a:0d:9f:72:83:50:c5:58:39:29:0f:e8:
7f:73:3b:e3:00:14:50:40:c1:dc:44:5d:08:e1:4a:
d0:21:5d:8b:df:18:14:60:fb:45:3c:40:b9:01:ed:
67:e2:85:74:e3:07:ff:5a:d0:d0:0d:67:96:c8:eb:
32:09:05:ae:19:62:d5:d0:55:54:6c:bd:67:ae:ea:
56:81:24:c0:e5:1f:42:98:c1:25:d4:29:35:52:61:
e4:ad:b2:5c:5b:60:86:4f:cd:2f:6f:d1:e5:c1:3e:
6a:56:75:0d:0a:75:a9:2e:7a:58:b3:44:6b:b4:41:
fe:a9:c1:7f:05:b1:56:33:89:64:e6:7e:a7:60:d0:
4e:af:97:c7:29:09:cb:44:b1:21:3f:6c:dd:39:b1:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:A6:E3:9D:08:0A:C7:C0:D8:B1:CD:6F:3E:FE:DC:07:8D:4C:C8
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:1c:12:fe:8e:7e:15:2a:97:52:f0:21:a6:ff:3b:7e:9a:
1a:c8:89:6d:e3:0d:de:3a:61:8c:ef:1e:92:ab:c1:ae:1a:64:
65:50:02:99:89:b9:66:21:3e:85:4f:df:78:8a:1d:8b:99:2e:
50:0b:85:4a:e4:44:0c:ad:9f:5f:da:ce:4c:64:d5:89:f6:18:
56:90:61:e2:02:fc:73:12:7a:32:01:15:e9:26:a7:db:72:75:
b1:9f:0c:ff:0a:69:06:33:8a:3f:5b:2c:6c:f5:75:91:b5:9b:
2f:66:8e:44:39:04:af:97:6d:05:8e:bd:18:3d:ae:4f:f8:7d:
f7:df:ca:6a:2a:b1:fd:48:3f:97:33:b0:7e:dd:c9:a2:aa:7c:
04:94:c9:6d:7d:06:5b:44:ea:66:35:31:e1:b3:19:5a:09:24:
e2:a4:44:77:b8:98:4c:a2:e8:40:e7:44:15:2d:b0:49:f1:c2:
e9:45:12:e6:40:df:4b:d8:32:22:df:f9:fa:1e:28:00:49:d5:
ae:d9:ed:ef:f4:f0:36:c1:ae:26:55:8e:9d:25:1b:25:13:74:
40:4c:eb:02:a7:db:e6:1d:cd:e9:f1:c7:25:2b:ae:37:a1:eb:
1c:d1:3a:80:fa:38:16:aa:76:b9:3d:78:41:82:03:5a:8a:47:
33:d7:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:36:48 2025 by rpki-client