Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: xItF1mzzPumugOYvdcNamD9PjtY0osSbJRvIqNK9OS0=
Subject key identifier: A2:04:63:F1:39:14:4B:0C:B8:A7:C9:EE:DD:BF:51:2F:EE:06:A7:26
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 0198752BD20D5C44AC41A9C516B8A1D81CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0EA9
Signing time: Mon 04 Aug 2025 13:01:02 +0000
Manifest this update: Mon 04 Aug 2025 13:01:02 +0000
Manifest next update: Tue 05 Aug 2025 13:01:02 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: UGK4UzPKxV0yw6RxKa4J21zJFjiX8pVnnN5lsPsUGv4=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:d2:0d:5c:44:ac:41:a9:c5:16:b8:a1:d8:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Aug 4 13:01:02 2025 GMT
Not After : Aug 5 13:01:02 2025 GMT
Subject: CN=a20463f139144b0cb8a7c9eeddbf512fee06a726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:de:cd:05:51:62:37:36:df:bc:66:9f:ac:
bc:62:8d:95:64:f6:b1:2e:2d:e7:61:09:12:4d:bd:
48:b2:70:aa:0d:3a:63:1a:17:25:3c:b7:b1:95:09:
3b:e4:49:6d:64:b1:a3:94:a0:24:74:be:3a:24:3c:
d8:55:09:43:a5:f2:c6:bd:f4:d8:a7:81:0c:d3:3a:
a0:53:4c:40:b5:bf:1e:be:b6:b8:78:ac:66:7f:94:
03:c6:30:8e:bc:df:b1:39:70:39:d4:ee:45:21:4c:
38:ba:60:79:30:b6:24:5a:ba:33:01:e9:1f:51:0c:
f0:f4:67:ab:54:8a:27:ed:f4:c4:84:97:00:04:e2:
cf:44:35:78:75:95:2d:15:f2:28:65:09:8c:6d:cb:
d4:4a:0e:13:5c:99:a8:d6:a5:7b:6c:46:c0:85:66:
ee:06:59:ec:17:7b:a4:ba:0c:1a:35:fc:b3:8d:f3:
42:c0:17:df:c6:fa:bb:f3:6a:93:96:24:fd:3a:c7:
04:68:04:f0:64:bd:72:76:62:15:f0:db:84:84:a9:
4e:5b:44:4c:53:b0:69:2f:4b:40:ad:2a:8a:9b:1c:
b1:05:ef:f2:02:b3:7b:f7:7a:43:da:1f:2c:01:ab:
54:fc:3a:e6:89:3a:47:f1:7d:16:69:b3:ec:c3:3b:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:63:F1:39:14:4B:0C:B8:A7:C9:EE:DD:BF:51:2F:EE:06:A7:26
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:db:17:3a:99:69:26:08:f9:5a:78:e8:1b:ce:d7:24:ff:c4:
d6:d0:33:0e:26:92:9d:51:09:d5:ea:86:21:e9:64:43:d7:23:
31:0b:34:67:e8:91:53:45:20:ea:7a:9b:87:ae:67:0c:3f:3c:
53:7f:1b:e2:14:fa:a0:a7:4a:64:b6:d3:20:9d:93:38:25:a5:
3a:fe:f7:53:46:30:68:af:65:ec:66:6c:0c:36:44:93:ad:73:
b8:02:95:0a:d1:82:9e:62:a2:31:dc:87:f4:03:c8:fd:03:76:
3a:9c:c9:84:66:37:13:0f:4a:47:43:72:e5:5f:be:22:53:0b:
9b:ab:64:86:ee:66:d8:58:ee:a1:1c:75:87:e1:d1:af:2a:08:
76:d2:0a:04:02:ab:46:91:84:6c:13:61:2e:9b:e1:cc:72:6d:
fa:51:d3:71:54:35:9e:3b:d8:f0:ce:15:cd:0d:14:88:b7:00:
ad:12:9d:c8:6f:ae:06:52:7e:64:0e:6e:89:82:f4:7d:62:c7:
be:52:7a:26:44:1a:03:c0:b3:04:3d:39:55:01:ed:04:f4:3d:
50:6b:a9:36:52:be:cd:96:5e:79:37:65:7f:e3:bd:52:2c:d5:
97:97:02:27:f1:90:d1:aa:14:e5:f5:e7:d2:c4:04:b6:fb:3d:
18:e9:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:40 2025 by rpki-client