Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: df1k90SXXf03t1ZYkwKJgERgrMZVHDwOKAmJiQiva64=
Subject key identifier: 09:77:A2:72:10:B4:AF:11:F4:0B:3A:B4:82:C6:94:B1:22:80:4B:FA
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0199FC21712081FD57B0A0EC2540512D0A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: FqNFC12Nm+IQpiQH1AvYb6hWavWHoLP8jgxVKJuCA4w=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:71:20:81:fd:57:b0:a0:ec:25:40:51:2d:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=0977a27210b4af11f40b3ab482c694b122804bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:3b:38:41:10:fe:b5:0b:26:16:4c:da:2b:
7e:9a:ca:6b:33:86:5f:c7:d8:d2:1d:64:db:55:53:
c4:89:37:92:ab:5e:d3:7e:03:2a:25:06:08:9c:24:
6f:13:e2:20:d4:5b:83:3c:4b:b0:f4:02:b5:8d:4f:
8e:01:cf:ea:ec:41:56:06:e1:1f:bd:30:c8:14:48:
4e:27:c3:bb:bb:30:12:a7:c1:21:89:0c:a8:1e:95:
8d:90:65:1a:f3:09:92:e5:b6:55:72:8f:62:4e:68:
f7:71:09:1e:d0:7d:1c:b4:04:43:01:96:e2:5b:75:
ad:b9:0b:69:f5:c7:c2:96:a3:c2:11:bf:ad:d1:df:
78:a4:2e:7d:44:7a:14:29:65:5a:fb:68:be:b1:58:
0e:cf:b4:4d:50:b8:0e:ad:e5:72:b4:67:75:1a:4a:
95:68:f1:20:a5:f1:02:de:d1:1c:c5:61:34:b1:03:
23:9b:dc:e4:c7:83:bf:48:ac:ca:1a:f9:a7:8f:a1:
27:ae:fe:c4:da:83:b0:63:8a:7b:55:d3:ca:83:95:
de:26:1c:ca:08:01:30:94:86:d0:20:ac:61:04:5e:
d5:48:8c:cc:7d:bb:0e:18:93:e0:c7:c1:56:48:1b:
a5:11:cb:5e:16:26:8c:ae:7d:d5:69:5a:66:d6:05:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:A2:72:10:B4:AF:11:F4:0B:3A:B4:82:C6:94:B1:22:80:4B:FA
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:5f:e6:0f:e2:15:b2:48:5c:ba:f3:78:46:9e:10:05:19:
74:f3:36:be:8e:d6:11:10:54:9d:e4:c3:1c:47:d2:4d:6d:84:
2a:82:ea:65:fa:76:af:79:78:2e:c1:a7:f7:e2:e4:a3:a3:05:
b7:96:8d:f4:52:bd:02:1b:4c:e7:1f:08:ee:91:a6:1a:fa:f9:
e8:1a:20:98:47:56:72:09:80:3b:67:42:ab:11:ae:21:da:8c:
ef:a3:a1:83:98:3a:e5:3a:7e:1c:e1:fa:22:94:82:37:98:4f:
47:ae:dc:e1:75:a6:7b:07:9e:82:1f:80:69:48:a1:99:de:14:
d7:44:cf:80:f5:04:50:02:7a:8e:79:1e:49:58:da:07:df:d7:
2c:0c:e4:76:ff:7d:44:91:91:3b:34:0c:17:a4:4d:5c:81:42:
a1:64:d2:de:cc:c8:87:41:1d:b1:ab:4e:90:2b:9a:c3:6d:2c:
47:10:4c:f0:a0:50:f2:4e:f1:32:42:6e:3d:a9:cb:79:68:aa:
90:23:1f:d0:3d:41:b8:60:59:7c:b4:cb:cf:3f:a2:71:51:0b:
8c:09:f7:dc:5b:02:f2:39:f0:73:cd:44:33:98:37:4d:24:24:
a2:be:9d:53:c8:7a:d1:e1:6f:51:95:3f:c1:3f:ac:8e:fd:e3:
f4:95:71:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXEggf1XsKDsJUBRLQpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
EygwOTc3YTI3MjEwYjRhZjExZjQwYjNhYjQ4MmM2OTRiMTIyODA0YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ07OEEQ/rULJhZM2it+msprM4Zf
x9jSHWTbVVPEiTeSq17TfgMqJQYInCRvE+Ig1FuDPEuw9AK1jU+OAc/q7EFWBuEf
vTDIFEhOJ8O7uzASp8EhiQyoHpWNkGUa8wmS5bZVco9iTmj3cQke0H0ctARDAZbi
W3WtuQtp9cfClqPCEb+t0d94pC59RHoUKWVa+2i+sVgOz7RNULgOreVytGd1GkqV
aPEgpfEC3tEcxWE0sQMjm9zkx4O/SKzKGvmnj6Enrv7E2oOwY4p7VdPKg5XeJhzK
CAEwlIbQIKxhBF7VSIzMfbsOGJPgx8FWSBulEcteFiaMrn3VaVpm1gXXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl3onIQtK8R9As6tILGlLEigEv6MB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADABf5g/i
FbJIXLrzeEaeEAUZdPM2vo7WERBUneTDHEfSTW2EKoLqZfp2r3l4LsGn9+Lko6MF
t5aN9FK9AhtM5x8I7pGmGvr56BogmEdWcgmAO2dCqxGuIdqM76Ohg5g65Tp+HOH6
IpSCN5hPR67c4XWmeweegh+AaUihmd4U10TPgPUEUAJ6jnkeSVjaB9/XLAzkdv99
RJGROzQMF6RNXIFCoWTS3szIh0EdsatOkCuaw20sRxBM8KBQ8k7xMkJuPanLeWiq
kCMf0D1BuGBZfLTLzz+icVELjAn33FsC8jnwc81EM5g3TSQkor6dU8h60eFvUZU/
wT+sjv3j9JVxRg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:35 2025 by rpki-client