Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: I5N8lV4TgROig2GiyZRGnESYxYcRfjuIW51AHjRp5BI=
Subject key identifier: 0C:45:12:41:E7:09:BA:5F:A5:EC:CD:2B:55:30:E4:FF:76:AB:49:71
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 0197B745605F2BC27EA969C2EC22FBED6313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 0D1D
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: V8cHedRHg72ygJ4cTigWlyYf7Vsvo1EAr+c57IfjB4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:5f:2b:c2:7e:a9:69:c2:ec:22:fb:ed:63:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=0c451241e709ba5fa5eccd2b5530e4ff76ab4971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:b2:3d:94:a9:5e:02:90:5e:79:01:45:d0:
d6:71:ad:19:7e:08:6d:7c:da:9c:b0:33:be:5f:ae:
fb:31:33:4b:0b:e5:25:71:6e:4a:05:63:4a:0f:a5:
5c:a6:22:7b:79:de:3e:f8:4f:1c:3d:8d:ac:48:7e:
2e:02:59:45:c8:bd:cf:5d:a5:85:fd:8a:c3:4c:f9:
3f:02:45:18:43:04:3d:cd:db:f8:ae:92:e3:47:83:
a6:e9:9b:b6:86:f5:4c:df:6b:01:61:ee:82:c4:8a:
f7:2c:00:3e:00:77:1c:e1:6f:b6:27:dc:a4:12:5d:
02:e7:00:13:a8:fb:88:9b:66:d1:14:5c:53:6f:78:
23:9b:e2:94:e6:78:69:00:e7:b9:66:28:fb:0a:c3:
87:0f:08:6c:59:09:18:c2:5d:85:a1:77:90:5c:1d:
f0:3d:31:24:c5:9f:18:6f:c9:38:ca:e1:bf:bd:98:
49:0b:ba:d7:2c:7e:ae:c6:40:17:9c:20:79:70:c1:
4f:01:25:da:4a:aa:e1:fe:8c:b0:8e:18:27:54:b8:
ba:30:91:b0:ee:74:ec:40:38:b7:73:24:2b:d0:2e:
67:7b:cb:7d:a5:e2:b1:9d:f4:3b:7e:1c:86:26:a4:
a3:d5:76:0f:d9:ed:d6:68:cb:4e:59:f1:bf:70:88:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:12:41:E7:09:BA:5F:A5:EC:CD:2B:55:30:E4:FF:76:AB:49:71
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:13:68:72:ac:28:1f:7c:b6:29:38:52:68:96:55:4f:73:
2c:de:3d:9b:a1:a4:4a:7d:67:70:00:81:66:ee:8e:60:50:71:
cf:8d:fc:ba:ae:f6:9f:db:2f:4b:2b:c1:fa:a1:c6:2f:81:4e:
5e:4a:2d:6c:9c:3c:11:2b:15:0c:aa:e5:04:7c:02:9a:34:97:
eb:d4:f9:de:1d:de:0a:34:a6:cf:6a:7c:5e:7f:22:62:6b:c6:
0b:eb:2e:96:58:bb:d1:76:af:4b:61:e4:a9:af:68:a1:6d:16:
fe:2b:73:30:ff:01:1f:c8:56:16:4b:fe:b5:31:13:5a:de:05:
79:bd:4a:41:11:3c:49:00:f4:8b:40:ca:c1:86:b6:5e:24:b4:
ca:89:5f:86:6d:4b:5f:17:b3:db:89:34:26:4b:f1:91:87:89:
df:5f:5d:af:31:70:54:41:40:0c:48:58:1f:3d:0f:af:56:d3:
f2:3e:b3:58:c8:88:82:06:3c:1c:4b:12:2c:f1:ff:6a:5e:f6:
f9:92:28:6a:83:43:36:5a:92:8d:e4:61:77:23:b9:2d:6c:4e:
cd:b2:29:25:34:f6:d0:1c:05:0e:e0:d5:b8:5b:73:db:28:f5:
84:c3:1b:5d:21:4c:3b:8b:bf:39:d7:18:69:ab:48:ab:eb:0f:
5e:92:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:31 2025 by rpki-client