
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: BZEiz1aJbbfV0dtpCto/pFi1aVqwRysk8MBgJN7v1q0=
Subject key identifier: 35:48:4D:C5:97:45:9A:DF:9A:BA:B5:30:56:D7:ED:D4:82:76:07:6B
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 0199FAA15D5C8BDE8C3101D4E6DCFD52EA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 0E49
Signing time: Sun 19 Oct 2025 04:01:43 +0000
Manifest this update: Sun 19 Oct 2025 04:01:43 +0000
Manifest next update: Mon 20 Oct 2025 04:01:43 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: /8Jb8aFDqS4g85tfAe0s4PC950/HOXRB6bUlKdW9dCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:5d:5c:8b:de:8c:31:01:d4:e6:dc:fd:52:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Oct 19 04:01:43 2025 GMT
Not After : Oct 20 04:01:43 2025 GMT
Subject: CN=35484dc597459adf9abab53056d7edd48276076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:df:1e:d6:3d:f5:ff:9c:fa:d2:7e:7d:09:
ba:03:2d:cb:aa:1b:65:d6:09:17:55:f1:a0:a8:fa:
aa:58:bc:ed:22:2b:86:95:0e:5b:90:86:e5:a9:ea:
1a:b1:02:8c:4e:3c:97:f4:71:cd:c5:9d:0c:94:17:
81:12:83:ba:49:b0:d3:ba:e1:5f:2b:69:65:41:7f:
c3:93:aa:9c:1c:f9:70:d2:b9:f7:e5:76:28:c3:ad:
83:83:6c:fd:11:e4:75:cb:e6:e7:4d:c0:16:9e:bb:
62:71:25:c9:73:85:93:52:f5:4d:4e:f1:9c:74:be:
22:c7:d6:d5:d4:1c:c3:df:b3:f7:66:bd:e9:14:97:
f3:30:4b:47:3d:10:05:7e:78:18:4d:16:a0:40:98:
96:71:39:94:c3:ae:55:1b:13:3f:a3:b5:05:14:34:
6e:2d:51:43:86:6d:d1:ab:d8:a9:e7:f5:ca:6a:b4:
10:c1:8b:15:52:b4:86:ab:f5:e8:e6:25:39:66:1f:
81:65:5a:56:a9:de:76:08:cd:02:b4:01:ba:f0:fb:
02:aa:d5:6c:ec:8f:f4:7a:74:65:cb:35:87:96:92:
15:d9:83:58:97:f1:a5:3e:6f:da:a3:e2:3d:1b:5f:
66:5d:e0:ec:31:25:ba:eb:55:20:0a:c2:25:de:8c:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:4D:C5:97:45:9A:DF:9A:BA:B5:30:56:D7:ED:D4:82:76:07:6B
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:df:ec:a3:34:17:40:18:36:ab:cf:5f:b8:c6:c0:0e:cc:
ea:7e:e0:05:51:bf:a3:fc:ec:4b:c0:a7:d4:64:a3:15:78:1a:
7a:c7:1d:6d:85:6e:a2:c9:b4:36:3d:6e:d9:21:9f:58:f4:2b:
fe:ec:88:32:f1:90:7e:1e:1d:8f:56:41:bd:b3:36:67:b2:c0:
b2:26:e1:f2:65:96:ed:aa:f9:25:b0:a1:75:5e:7b:a0:41:db:
29:d8:51:8b:bb:57:2d:bb:7b:68:0c:35:ed:9e:a3:ea:3c:6c:
f3:49:25:ad:bf:bc:a2:e9:22:d4:82:a3:9e:0f:ee:27:8e:ce:
d7:c0:cc:93:2a:1e:ea:3b:94:78:99:3f:10:97:16:0e:c1:87:
cb:0e:04:50:4a:47:7f:75:9e:1b:a7:42:22:ad:31:d7:79:71:
14:7d:14:d5:08:02:87:39:cd:13:c3:55:1e:4e:bd:b6:9c:9a:
60:83:6e:06:ea:3d:d5:b7:8c:c4:c8:df:98:52:46:15:15:cb:
2f:f8:d8:8d:f1:e6:4e:0c:6b:ae:3f:4a:f8:4f:d1:bf:97:e4:
89:d8:94:fb:a2:42:8a:12:10:d1:f1:1f:d1:c2:ce:3c:20:e1:
b3:32:a7:d1:56:76:d6:a4:11:fe:f4:3f:de:45:ea:0a:c4:b4:
52:37:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:34 2025 by rpki-client