Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: uwORi5AxMEFXzKVZYpDB4s3CbPAZRUR2WgexFiJPkec=
Subject key identifier: 35:CB:50:C1:22:A7:CD:61:4F:A0:96:D0:43:F4:DD:66:BD:73:26:D7
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 0198D65FFE2EE1BE4222EB720F047AA2B368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: QTjp5I7PsuHRKlgRvb17DF43VrdxjWp7gBCJSaHMZtw=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fe:2e:e1:be:42:22:eb:72:0f:04:7a:a2:b3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=35cb50c122a7cd614fa096d043f4dd66bd7326d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:3d:9b:aa:fc:4d:e5:d7:25:4f:c5:b5:c0:
b9:75:70:5b:fa:32:2d:ac:e0:9d:50:33:b5:97:c1:
4a:93:56:bd:73:8b:f9:e6:db:9e:a5:fc:cd:1c:60:
4b:76:8c:4d:cb:a6:78:e0:5d:5c:e9:eb:da:12:91:
ad:36:66:19:9a:76:f9:46:34:17:bc:56:23:f1:72:
00:9b:74:d4:11:9c:04:e8:6e:bd:60:69:9f:e9:22:
34:b5:1c:8d:55:56:a4:c6:e4:5a:0b:9d:1a:f6:76:
2e:34:85:91:17:55:7d:51:47:0d:7f:cc:3e:b2:6d:
6a:13:d6:de:03:3e:04:19:68:b0:43:27:34:8c:a9:
7a:af:3a:cf:de:33:66:9d:50:0c:68:26:e6:e8:95:
79:30:0e:0e:64:d1:86:76:0a:4d:41:d2:db:9b:f7:
c0:23:ad:92:40:7b:d7:cd:1a:12:f0:b2:df:98:b5:
4d:47:33:21:30:9b:ef:ff:8e:0e:ec:e0:35:20:75:
8f:9b:e1:c7:01:d1:c3:95:a1:0f:48:5e:72:2c:52:
10:ad:dd:83:be:37:99:88:20:08:94:7d:73:07:c3:
0c:5e:9a:a2:aa:02:3f:86:5e:45:84:c2:07:0c:a4:
22:78:19:5d:27:96:65:60:d1:6c:6d:5a:62:6b:33:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:50:C1:22:A7:CD:61:4F:A0:96:D0:43:F4:DD:66:BD:73:26:D7
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:df:7b:f7:ac:bc:1d:11:4c:ca:e7:c6:1d:53:8f:54:d9:f5:
e3:82:74:63:6b:8b:e6:5f:b4:5b:b5:20:15:fd:e6:81:44:59:
b3:5c:d7:df:4e:c4:f7:4e:f5:c2:de:a9:68:87:fc:b3:32:9b:
9f:a2:6e:b7:b0:52:3f:d5:dd:0f:7b:f2:22:94:ae:d0:0d:b3:
4c:86:1a:b8:76:39:11:1e:64:bf:54:a8:93:e0:01:a3:39:c8:
99:bf:42:08:81:5c:09:b0:a0:ed:20:f2:c9:19:01:e2:c3:d2:
31:1b:b3:ef:69:e1:9f:92:09:35:4a:5d:ca:b3:cf:84:ac:0a:
db:71:f9:b4:08:9f:87:fa:cb:67:81:86:3c:e1:bf:51:f7:08:
d1:0e:41:37:26:7c:3a:12:e5:43:ec:ec:89:75:81:07:40:9d:
6c:80:a9:68:c6:1e:a8:01:c8:6d:28:c2:68:ff:e1:46:cc:61:
1c:f8:1b:13:cd:5a:ba:61:a4:22:a4:38:fb:5f:93:3d:a5:f1:
22:19:98:a7:a8:3c:3a:5f:a6:47:05:dc:e4:a4:74:1d:13:ba:
fa:28:db:db:0f:f9:a3:51:d9:dd:24:80:c9:8d:dc:d6:8d:fc:
01:6c:ee:88:69:2a:b4:9c:34:7a:25:e4:80:70:1c:9e:e0:40:
d2:9a:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:42 2025 by rpki-client