Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: cbE9H7Q6U+9gheGo4xkuRRSigPqYGHHkyo3NHRNyps0=
Subject key identifier: F5:25:AC:FD:EC:BC:B6:DC:18:E9:6D:82:14:77:18:F2:A6:23:0D:EB
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0197B6D7750756D6030704EA1DF13927EF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: tTAWyvcrIOzO4sbWKbgHhz0CrpT4UTCcO5OHpy7bt+I=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:75:07:56:d6:03:07:04:ea:1d:f1:39:27:ef:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=f525acfdecbcb6dc18e96d82147718f2a6230deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:1b:3d:fc:77:1d:88:0c:d1:59:d3:12:3c:
f0:01:39:c7:46:56:d9:78:cd:4b:d3:50:2b:c3:45:
20:63:3f:bd:97:b0:7c:c0:fb:ef:08:9a:e1:23:00:
fa:e3:ff:fa:48:73:85:89:8d:9b:d9:71:e5:0a:bf:
5d:77:2a:7d:5b:e2:ce:25:78:3d:94:ee:98:74:9d:
fa:15:35:5d:bb:08:3d:c4:45:d1:e9:98:09:fd:10:
d5:73:3f:97:03:2d:50:87:03:dd:50:f8:e0:cc:8c:
6c:80:5f:93:3d:3c:e5:e1:65:14:de:36:00:c7:8b:
9e:cb:30:42:08:18:0e:da:16:f0:f3:25:88:ec:4a:
63:c5:a9:8e:4e:93:11:c3:ce:7c:12:e1:29:5f:89:
92:31:73:fa:8b:de:83:bc:91:10:9d:fb:6c:9e:c6:
f3:2c:5f:4b:3d:bc:f9:be:41:27:be:63:ae:81:2c:
63:5c:f1:91:4b:79:a1:24:67:78:9c:67:fb:51:21:
fe:b4:7b:25:cb:66:11:19:de:e3:f4:28:e9:36:fa:
c6:b9:56:e0:bb:ff:9b:21:59:12:59:57:80:8b:40:
92:d6:a4:32:5b:a7:65:0f:67:62:cd:e4:50:ed:e4:
81:1a:2f:37:92:77:1c:a9:ed:b6:73:a5:e6:fa:db:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:AC:FD:EC:BC:B6:DC:18:E9:6D:82:14:77:18:F2:A6:23:0D:EB
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:80:0e:73:73:74:5e:20:84:ee:69:2a:66:8e:33:23:3a:01:
c6:00:48:f1:7b:dc:ad:35:b2:f1:8b:f1:18:44:89:db:32:b5:
6f:4c:fe:24:a7:b9:02:27:16:09:20:a3:95:08:2d:f7:9c:29:
4e:15:90:7b:fd:e0:26:25:9d:da:26:4f:8b:66:de:87:59:dc:
d3:57:e4:cd:7d:8a:fd:28:d5:ef:41:8b:97:2d:ac:49:cf:dc:
89:14:c9:84:38:3d:cb:af:f6:bf:43:26:63:d7:bd:d2:fd:b4:
06:5b:e3:c9:ff:4a:dc:6b:a0:13:80:5d:7f:5e:97:5e:e2:f6:
69:4f:73:e0:c3:81:6d:e5:48:8a:e0:d0:d6:0b:f3:56:70:98:
0e:4e:4b:a4:22:1a:ab:2d:74:e3:f4:3a:88:e0:98:61:97:89:
5e:de:e4:d2:33:07:38:e4:27:d2:d6:2b:c5:bc:ab:26:84:e4:
1c:a6:68:c4:69:c5:3d:6f:d2:f6:b3:e9:67:83:79:b1:2d:77:
67:b0:a1:69:14:ef:60:bd:b7:7c:be:75:7b:8a:d3:7a:4e:27:
d3:4d:26:0b:2d:70:dc:df:21:fd:7f:21:90:3a:c9:1a:77:cb:
b3:52:b6:46:7a:74:35:16:ed:88:59:d0:be:2e:6f:f3:96:5c:
c5:5b:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:01 2025 by rpki-client