Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: S2hPGp9Bs1Z8V+ebfYxXX2IXNlwl/QpULbtCBxo5WdI=
Subject key identifier: D1:25:68:EC:4C:40:8A:52:DF:E8:ED:FB:F2:0E:E1:AC:4C:0F:8E:DB
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 0198D516015F9AEED00591C15BC1E295635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 0DB1
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: Ox4uyfqLprm1Vt1dtmRxijN5Itg58pvT22qkYg8B5dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:01:5f:9a:ee:d0:05:91:c1:5b:c1:e2:95:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=d12568ec4c408a52dfe8edfbf20ee1ac4c0f8edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:52:77:23:dc:cb:95:ff:88:49:ea:b7:55:
14:0c:2e:84:31:b5:62:df:1e:68:91:67:98:af:4f:
4b:27:fc:d9:12:8b:90:d3:5a:4e:be:44:e1:3c:23:
5c:d3:58:cd:dd:18:db:db:25:c0:a8:ff:ac:bc:0c:
14:2a:06:7d:ce:b4:42:c6:5a:92:ba:65:3c:91:e7:
15:8f:33:9a:e7:02:fc:fe:88:9c:94:fe:30:66:0f:
93:0a:93:97:41:13:2a:29:3a:92:7f:ca:dc:7a:bf:
20:5e:00:7d:ab:3e:55:e8:bc:55:89:f1:55:fc:70:
00:93:ee:d5:99:78:fb:8c:90:52:62:36:18:67:b9:
cd:4f:c9:5f:13:8c:1a:b3:01:fe:03:6b:69:0f:c0:
22:05:c0:e6:64:15:46:f9:ac:89:f8:f9:59:83:6f:
6a:bb:70:a0:0e:61:f9:bd:bb:ea:3d:ae:19:07:f5:
2e:f6:ff:18:19:36:3d:15:7f:79:9a:fd:de:08:94:
45:40:a4:46:e5:d5:f1:df:59:ab:1f:82:fb:04:d6:
8a:fb:1e:7d:21:5d:ad:40:bf:d6:b7:54:e4:be:d0:
71:2f:9e:d4:6c:b3:36:fb:f2:bb:97:6d:c9:7b:98:
68:6b:21:d9:ef:e8:a0:2c:d4:36:48:ad:d5:2c:1e:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:68:EC:4C:40:8A:52:DF:E8:ED:FB:F2:0E:E1:AC:4C:0F:8E:DB
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:34:dc:af:0e:59:45:f3:e7:67:d6:8b:02:0d:fb:e3:2f:e3:
16:a4:aa:70:6a:41:ca:10:b4:f7:f2:a7:e6:04:b2:14:f0:1b:
6c:62:fe:0a:e3:43:f9:2c:ce:92:c0:ed:07:ea:8d:05:26:33:
38:38:4f:c1:80:0a:3d:80:ae:35:f1:2d:9d:80:9a:bc:3d:54:
64:78:e9:28:62:70:07:03:e8:5c:29:79:f8:0d:23:eb:b9:d8:
ad:a0:9a:76:b1:ac:3d:9e:a5:64:9b:1c:25:5c:30:37:7c:e6:
97:67:a4:36:c7:bd:c8:4c:d4:77:d5:14:8c:4f:94:b3:ba:2f:
d6:97:d9:6f:41:bc:fe:bf:89:30:a5:95:ac:88:e8:d4:d4:af:
33:09:de:cb:d4:a5:c6:9c:a7:1f:53:0f:65:9e:a7:a1:0d:c7:
e9:31:72:10:af:b5:5c:7a:7a:8f:07:bc:41:0f:c3:2c:94:a0:
59:15:cc:95:61:e8:eb:c4:2e:85:9c:19:dd:36:c6:4a:0a:4f:
72:34:fc:db:10:66:cf:30:3d:0a:63:51:82:ac:e4:7f:c1:6b:
c7:28:1d:ef:a3:e3:52:58:2f:4b:79:2d:b0:d4:c7:15:a1:e4:
31:8c:fd:0b:3a:a6:c9:ae:be:29:98:80:b0:58:cc:59:d8:95:
f8:26:f6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:04 2025 by rpki-client