Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: Jituv3oAVl3L4qYkZsqcRzS8g300fK7QgUs/jXa9KfM=
Subject key identifier: D2:BD:BE:8F:0F:18:F0:76:D8:2F:EB:18:3C:58:AB:F0:27:D4:99:0A
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 0197B6A19BF4CE5A2E444DEED87752A472E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: j7LJSazep10AhVz0ye7CmG3I0J4EjaKUvFRvfu6epXc=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9b:f4:ce:5a:2e:44:4d:ee:d8:77:52:a4:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=d2bdbe8f0f18f076d82feb183c58abf027d4990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:40:82:20:04:bb:fc:b9:bc:f1:ac:8e:f4:
b0:01:46:d7:0c:1b:0c:b5:47:9c:d7:e7:18:21:37:
29:78:37:63:80:64:6e:ec:1b:22:a0:e2:9d:70:85:
ba:5c:c7:3f:40:33:59:f0:2b:67:cc:86:58:5e:df:
7a:82:d5:22:c3:1e:29:74:92:48:83:13:05:5e:fb:
15:6a:ac:9b:33:47:17:59:4d:79:73:9a:d9:09:d4:
b1:72:78:f7:98:c2:a0:89:7d:e7:ab:f4:6b:f9:f1:
80:3d:36:46:cc:ba:85:b4:c7:5d:7a:fc:e5:a4:7a:
63:1e:59:b3:d4:97:87:f4:59:d1:a3:ff:bc:a2:31:
6b:16:2d:55:ed:a4:a6:dc:d5:27:17:3f:b8:c4:70:
44:23:76:57:94:44:71:91:d0:20:4b:55:8f:4a:96:
1c:e3:35:4e:44:1e:2c:89:2f:fc:24:fc:42:61:f4:
6a:81:cf:72:29:f9:e1:62:e0:70:38:8b:92:9d:d9:
03:6a:03:b1:da:09:b0:bf:ca:24:d2:be:6e:eb:11:
13:14:f5:b8:8f:2f:dc:d8:b0:2b:82:cb:37:d8:2f:
35:08:05:64:11:ef:cf:29:98:6e:c2:c4:12:df:04:
70:d1:74:a6:8d:e0:72:9a:0f:e8:31:d2:17:6a:81:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:BE:8F:0F:18:F0:76:D8:2F:EB:18:3C:58:AB:F0:27:D4:99:0A
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:9a:82:c4:88:bc:58:2b:ce:65:28:c6:88:37:49:ef:92:
8e:fe:64:e0:83:6e:99:dc:c7:40:6c:d4:cd:ad:8c:c9:0a:0d:
83:dd:16:98:84:97:1f:8a:5b:9a:9a:db:8e:e1:47:5f:3b:8b:
4d:53:56:f2:39:9b:b3:74:7c:91:56:73:05:27:ab:9d:38:52:
a5:6e:0b:42:e5:c1:c8:72:f7:51:46:0f:78:37:02:84:24:17:
31:6b:ad:6e:1d:8d:1e:30:ce:dd:1d:c1:43:cd:2e:cd:f3:74:
ca:3d:c9:60:3e:86:39:cf:fc:bf:e0:7b:71:1a:48:84:73:09:
8f:61:8e:34:fd:cc:b7:42:84:3d:be:77:5f:3c:6a:be:5f:54:
cc:40:82:24:f9:6b:f2:ed:f7:83:76:6f:33:75:c2:67:b3:78:
a9:bd:35:d3:a7:19:73:94:98:78:dc:74:73:48:b6:bf:86:2e:
59:aa:0a:25:ab:9a:48:7b:77:9d:09:08:6c:24:92:8a:65:5a:
06:9e:40:4b:be:d5:de:cc:d7:c3:a9:55:01:fd:c7:c9:6e:30:
bc:ad:db:48:0c:ab:75:95:3d:1a:80:a5:ea:d3:95:fb:9e:2c:
3f:0d:a6:66:4e:7e:55:1f:5d:39:26:ca:a5:8b:f0:93:fc:97:
78:6c:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:15 2025 by rpki-client