Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: GzrC1rfcI+3iumP0RuKAFkM8LUzcoCREU6mptp++itA=
Subject key identifier: C0:61:57:D9:E9:ED:F1:26:A0:4C:08:E3:81:1E:CB:8E:3E:50:8E:14
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 0198D404D428C932961AC172C03911B5612C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:22 +0000
Manifest this update: Fri 22 Aug 2025 23:02:22 +0000
Manifest next update: Sat 23 Aug 2025 23:02:22 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: Dm9ZX18d66HCqQvWUJ5paGTonFAgxUASVui+xvdmeRA=)
2: Cre1atzMDwt4GowPQslT1BJNz70.roa (hash: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d4:28:c9:32:96:1a:c1:72:c0:39:11:b5:61:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Aug 22 23:02:22 2025 GMT
Not After : Aug 23 23:02:22 2025 GMT
Subject: CN=c06157d9e9edf126a04c08e3811ecb8e3e508e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:81:98:89:96:6f:36:17:cd:2a:09:9f:96:
ad:42:be:af:6e:2d:9d:5c:55:f2:f6:9c:90:73:38:
43:77:9f:d4:33:28:28:21:cc:e9:0a:a2:7d:3e:d8:
9c:72:47:b9:94:10:e4:de:5e:a5:e4:17:01:ce:ac:
12:83:c0:9d:dc:02:39:0a:40:f6:04:13:44:ea:0d:
ce:e3:72:47:75:4e:18:a2:ec:4e:b3:6b:68:fa:fa:
13:ab:ef:38:d5:4d:cc:5c:2e:0f:39:0b:53:92:c7:
fe:75:75:05:56:7c:fa:2a:bf:b3:b1:fc:4e:02:7c:
57:66:61:64:04:ea:45:56:01:96:d2:50:37:77:7d:
9c:eb:63:a5:f4:1a:b2:d0:ed:85:22:79:8d:21:cc:
61:37:17:b7:29:0f:4c:1b:6a:31:84:7e:d3:5f:0b:
15:01:43:5e:3f:71:47:d1:ff:2a:30:88:50:44:98:
33:16:4a:1d:10:bd:29:aa:0d:f3:88:e1:ca:d0:10:
04:00:01:ea:22:30:4f:3c:54:0c:22:8b:71:07:47:
46:2e:5b:00:71:e8:f6:d6:17:c3:50:a8:a4:f7:5c:
c3:76:38:66:90:a1:55:00:46:2d:09:f9:44:c3:7c:
1f:ba:01:c8:7c:52:28:f9:45:46:07:86:5e:f3:e4:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:61:57:D9:E9:ED:F1:26:A0:4C:08:E3:81:1E:CB:8E:3E:50:8E:14
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:e5:e0:11:00:b1:05:90:1e:d9:aa:14:f2:7c:aa:fa:ad:
60:0c:4a:c8:2e:f4:dd:ae:1d:51:84:ca:39:e4:f0:5b:7d:a9:
43:16:82:39:f9:4f:72:8f:ba:3c:19:3f:2b:ea:dd:b3:fa:01:
cf:4c:85:9c:71:34:a7:19:cb:e9:6f:16:53:68:70:0a:d6:f6:
93:79:b1:50:a0:8e:b4:6c:21:44:27:f0:21:24:83:b2:b7:a3:
57:fb:b2:c0:da:cc:d3:86:fb:a8:fb:4a:1b:92:2b:94:ec:ef:
ae:cd:6d:e7:dd:d6:ac:03:06:2a:30:99:6f:2f:d3:2f:57:35:
10:0e:02:58:69:86:bd:c2:e8:57:e0:a9:5e:d1:33:4a:de:4a:
fa:9f:88:55:fb:9e:e9:47:ca:fb:54:03:34:45:1d:bc:89:ad:
37:c4:37:76:59:2b:f8:85:2b:9c:eb:67:27:f3:3b:d2:58:d8:
4b:b5:08:64:a6:cc:34:ed:59:3d:3a:52:25:2e:dd:f3:6f:5b:
19:a5:4a:31:74:7d:61:b1:dc:26:14:c7:4b:f4:cc:9c:d8:9d:
25:b1:63:e0:8f:2d:d9:07:6e:87:d6:53:2c:18:cf:f3:18:f6:
ad:ea:18:d3:8b:9d:0e:7f:eb:bb:b9:86:cb:63:07:e9:0c:b3:
b4:50:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:54 2025 by rpki-client