
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: U0c5pwHg2/oe7MlB6U3T3ZaBtiBucvjcTHB8ernyCmo=
Subject key identifier: B5:C2:B8:93:A4:DB:C1:4E:E2:C3:32:D2:A9:73:B4:F0:41:C3:B4:12
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019873E2D7726DD78DF04A99F5548E986216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: WRuIBqLMIFA64Uf4cIyagbKglcOS0voXcUPwe4/w2Ng=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d7:72:6d:d7:8d:f0:4a:99:f5:54:8e:98:62:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=b5c2b893a4dbc14ee2c332d2a973b4f041c3b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:ee:98:66:86:7b:07:96:b1:d3:15:66:ad:
1b:f5:29:27:88:91:ce:3e:e8:ad:b7:35:df:3d:2d:
79:7f:67:14:be:e8:c7:45:6c:37:82:0b:b0:c4:3d:
4e:f9:44:31:38:e5:9f:d2:8e:32:6c:61:70:62:66:
e0:26:d8:b9:e5:b4:23:d3:f2:ac:b6:ac:c5:0d:15:
43:f5:6a:f9:63:3c:84:91:9f:12:9d:15:e4:90:b4:
40:53:b1:8d:14:3a:b3:da:10:1f:bc:92:06:b0:a0:
b2:66:96:54:3d:c2:3d:f7:ea:ee:fd:78:16:de:bc:
77:c1:09:a7:cf:e2:57:53:bb:0f:24:ec:8d:25:55:
30:ef:35:e6:e6:e7:f2:47:e7:50:1d:a1:ce:24:98:
48:4b:89:0c:26:1a:78:e3:cc:eb:e0:77:85:4e:97:
c5:5d:75:46:db:0f:87:d1:b5:68:7b:e5:0e:c4:8b:
82:96:77:85:8c:8f:b7:a1:ea:c7:bc:80:57:b2:77:
5f:d3:0a:47:10:e9:2d:c2:4a:1b:b6:5c:67:27:76:
28:8e:20:12:99:bf:02:08:93:8f:4d:74:4e:83:00:
69:c9:3f:5d:97:27:43:99:fc:6d:47:e6:89:cc:ce:
b6:74:3e:8e:14:48:05:ef:7b:f1:84:46:96:3f:3f:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:B8:93:A4:DB:C1:4E:E2:C3:32:D2:A9:73:B4:F0:41:C3:B4:12
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:30:95:4e:d4:46:47:aa:1f:a6:6a:a3:91:1e:79:a3:9a:
4d:6b:ea:51:24:2d:55:4d:b4:ff:35:54:a4:fa:05:77:a4:bd:
af:33:8b:39:94:0d:79:30:a1:a5:7f:6f:b7:9e:21:bf:5e:65:
ee:50:c2:9c:ed:bb:74:44:d5:df:1e:6e:bd:77:6c:a4:98:c1:
f2:ed:dd:39:40:b1:3a:70:64:08:06:e9:89:4f:ff:46:b0:96:
aa:65:35:67:18:21:d6:b9:46:c3:12:a1:73:53:20:68:2b:bc:
95:cf:6b:e0:9c:59:90:bf:16:16:29:c0:a8:99:bd:15:e7:a1:
9f:13:c0:70:ca:10:6e:d2:a0:2b:5c:63:b2:93:38:4e:64:5b:
50:e5:99:0b:d3:66:d2:e3:73:8e:e5:dc:9b:7f:a5:11:7a:57:
9d:75:fc:32:74:09:9f:1c:4c:66:0f:1c:bd:98:b5:71:90:41:
9e:40:75:65:92:d0:e2:05:4f:10:91:b3:62:39:2b:95:4b:26:
aa:24:1d:08:81:e8:6c:2c:08:a8:73:f7:5a:3f:d0:1d:b1:ee:
93:89:8c:ee:0d:dc:66:a1:3b:4b:d0:f3:55:b4:ec:65:42:28:
87:42:e5:e1:e6:be:29:95:e6:92:a9:15:e4:62:54:48:b4:f4:
32:0d:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:29 2025 by rpki-client