Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: HJmGjlywFcZAKrAT9g7xZwLe5PieQX7KdaFy6uJt4Ss=
Subject key identifier: 07:62:41:B1:FC:D4:6D:DB:22:79:8A:2C:45:A5:24:5A:57:97:01:88
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 019A4E4FA8AA5ABE1E03E8DD72E23D35E78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0F9E
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: RKAtWqoI6/coPwd3M5FcWOhKu1ne7k5llwFkIR7nQss=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a8:aa:5a:be:1e:03:e8:dd:72:e2:3d:35:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=076241b1fcd46ddb22798a2c45a5245a57970188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:a6:18:bc:26:10:c4:33:24:09:8f:f8:d7:
70:1f:7b:2c:15:c5:6e:ee:81:9f:8c:de:16:e0:e2:
cb:b5:43:41:79:30:77:6f:26:77:91:dd:da:07:a6:
52:2a:6a:51:af:19:d2:38:d1:6a:05:1a:61:1e:67:
6a:dd:f6:aa:f8:00:b3:77:22:7d:4f:ae:d4:08:a3:
56:c4:06:36:ba:20:a1:65:e9:bf:d7:e0:fb:83:03:
19:05:f1:5c:66:3f:68:1f:74:f2:21:af:b5:d7:66:
6d:c4:38:75:8e:de:de:50:c4:bb:7a:2e:dc:10:b3:
f4:19:e2:61:4e:c9:8b:63:7c:6b:55:36:52:46:77:
2b:60:51:07:ad:24:bf:0e:eb:94:df:8b:a4:88:58:
95:30:b0:be:cf:53:32:cf:9b:90:c4:b2:7b:7d:da:
f3:a7:48:d7:8e:e2:98:d7:0a:2f:67:f4:94:f5:be:
9f:b7:ee:e5:cf:1d:b8:b2:73:61:b6:44:a9:1f:0d:
99:a6:25:cb:fa:a7:b7:c8:3b:f8:99:55:d8:bc:cd:
43:ad:52:59:2e:fa:8d:56:5e:8f:ec:c1:c8:58:d4:
6b:03:99:29:c8:da:3f:db:79:7b:86:d9:98:94:29:
e5:1b:c2:14:19:9e:22:89:60:0e:95:13:4d:e5:a1:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:41:B1:FC:D4:6D:DB:22:79:8A:2C:45:A5:24:5A:57:97:01:88
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ca:15:71:79:e3:31:07:3a:c0:20:77:3c:ee:fc:58:1e:45:
a2:83:67:bc:15:88:58:1a:f0:19:c8:00:8c:d0:54:98:e5:7e:
4a:4a:30:31:aa:d1:61:85:8e:2a:fc:23:db:32:7d:bd:93:b6:
05:ae:14:00:11:ac:e5:65:fa:13:9c:cb:cf:a3:67:4e:0e:1e:
cb:33:36:3f:3a:f2:74:e6:b8:b6:30:57:52:27:93:b0:27:d4:
fd:40:ca:84:c0:26:2e:2e:2b:fe:61:4d:af:95:9e:64:f5:da:
b8:e2:a3:2e:a7:49:ee:d5:03:be:32:bb:aa:22:78:e8:e8:b7:
db:1d:eb:8c:d5:f5:12:68:7a:d0:c1:26:3c:73:43:f6:11:00:
ee:dd:a1:af:d2:7e:1c:64:92:08:41:47:0e:90:4d:0e:6e:4a:
79:d8:ba:2a:42:40:11:25:e4:8f:08:d3:6e:fa:04:47:9b:f9:
93:ed:3b:40:23:67:0f:a0:ee:2f:ed:fc:48:3a:d5:c8:40:f2:
a1:27:b7:c8:bd:64:40:9e:c9:a9:41:3f:6d:15:b5:b0:f9:89:
7b:b4:07:53:14:55:7a:63:99:d8:fb:8e:b8:f7:2c:8b:87:21:
8b:c5:8e:02:0b:7a:69:4d:0e:00:5e:e0:4b:c7:b6:95:a0:4e:
af:71:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:51 2025 by rpki-client