Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: eNxEUBs/SVZhH5vaIq/hy/6kr+hJfWpL1l+D5+LYhhc=
Subject key identifier: 59:A9:D0:09:7F:F1:40:51:59:31:A1:8F:42:B0:5A:56:5B:57:B7:37
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0198D697E9FC516EDB4A34607CAD60C99C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: n+RMPbhGE6vLF/vUV6sihmAwRAN6UyRqtnvJYd1WVEg=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:e9:fc:51:6e:db:4a:34:60:7c:ad:60:c9:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=59a9d0097ff140515931a18f42b05a565b57b737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:77:bc:b1:88:13:87:c0:12:ee:88:3d:db:
f5:1c:be:54:fd:64:14:1c:d5:82:cf:47:77:13:89:
a6:70:fa:32:2d:b6:96:2c:12:97:8a:b5:eb:b2:3f:
8b:91:14:e7:a2:5e:6b:b2:39:2c:eb:71:d3:ed:2d:
c4:5e:a5:3c:c3:33:29:5f:ed:d9:ef:6f:ae:4b:d8:
fe:87:cf:5c:1b:65:9f:cd:2e:cc:a9:07:eb:73:2a:
1f:7b:05:96:40:0f:da:0a:4b:cb:23:aa:41:9a:92:
3a:e2:77:fd:90:3d:8b:f4:07:bf:27:2c:be:f4:e2:
71:5b:3b:2e:90:3c:92:c7:46:55:f8:6e:34:84:68:
35:95:ca:2a:fb:66:67:64:a4:b8:7e:0e:14:79:d8:
78:43:d2:66:0b:79:53:8e:88:51:cf:92:88:51:56:
2b:c7:d1:2a:f0:72:d5:36:30:f5:36:4d:a5:bc:14:
12:6b:01:79:d3:4e:43:83:ba:38:07:73:7b:56:da:
b1:0d:d2:6a:3c:ce:8a:13:37:e0:d3:ec:5c:e6:c4:
2a:b4:47:fb:e0:ac:30:a4:66:f8:ee:c3:dd:15:12:
64:96:0a:e9:a2:13:b9:21:df:65:f8:2f:3e:e9:a0:
dd:c9:cd:91:06:81:96:61:eb:d7:e6:68:57:a9:59:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:D0:09:7F:F1:40:51:59:31:A1:8F:42:B0:5A:56:5B:57:B7:37
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:0c:ed:50:16:6a:57:a5:29:da:a7:fd:4b:05:bf:95:33:
72:c0:37:a6:7a:4e:28:96:80:8a:28:63:56:a2:0a:71:0e:0b:
1f:be:38:e2:19:9c:54:29:01:fd:1c:31:24:4e:20:8b:3b:94:
96:2f:a6:25:50:e9:45:7f:89:2c:e5:ef:e9:20:17:68:ba:d2:
14:00:f3:2e:a5:72:19:59:14:11:26:bc:3f:f1:87:d3:0b:1e:
94:8e:63:ec:97:67:8f:3d:0d:a8:fa:33:1e:e4:b2:91:dc:10:
54:c6:5a:b1:05:6c:6c:c7:24:ec:8a:60:16:b1:ac:a3:1a:87:
44:11:d3:1b:f2:d7:80:c4:69:66:bd:95:ea:66:e8:1a:ea:48:
d0:d0:bf:2a:57:cb:ef:87:8b:cf:85:c2:cd:8f:5f:0d:ff:73:
0a:45:d6:62:1d:64:ab:28:ed:14:5a:55:77:db:c8:e3:0f:c2:
bb:1d:36:de:16:a9:fc:02:c4:7a:cb:d7:35:6f:54:a3:f8:9b:
02:c3:86:1e:24:c2:ca:71:0d:93:f9:0e:a0:57:7c:c8:0d:d4:
8c:61:24:d0:82:90:39:d3:b6:b2:93:0e:27:33:96:06:74:d7:
ca:6e:35:72:80:d3:df:06:2f:a1:68:3f:5c:98:26:17:96:b5:
33:c5:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:57 2025 by rpki-client