Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: 1DfJaeMhvljGuYAllGvcsLsI6vd9U11qtKhSMf7jPnE=
Subject key identifier: 1F:6B:AB:77:22:9F:6A:5C:DC:20:39:6C:AF:5C:85:ED:6D:1C:DF:3E
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019853444F6FBEBFEA8B49B2F926FE250D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1598
Signing time: Mon 28 Jul 2025 23:00:42 +0000
Manifest this update: Mon 28 Jul 2025 23:00:42 +0000
Manifest next update: Tue 29 Jul 2025 23:00:42 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: N6Gln97Ye66C2fUYtPJX4mBdtnl+UL9k8lq1HlJaFio=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:4f:6f:be:bf:ea:8b:49:b2:f9:26:fe:25:0d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jul 28 23:00:42 2025 GMT
Not After : Jul 29 23:00:42 2025 GMT
Subject: CN=1f6bab77229f6a5cdc20396caf5c85ed6d1cdf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:ac:85:ef:53:65:ac:22:c2:a0:32:16:eb:
0c:e9:7f:7f:96:d2:7a:5a:0f:64:7e:2a:ef:79:c0:
81:4e:94:2f:8d:75:46:26:52:ce:6a:a8:e7:b2:6f:
10:47:fe:61:7e:bb:c4:c5:32:61:4a:1c:c9:a6:43:
55:26:17:c6:06:53:36:54:8a:1b:66:75:79:a1:dc:
26:c2:19:0c:79:fc:dd:bb:82:c9:a3:84:43:4e:87:
23:d9:29:2a:0e:99:47:95:c9:ed:ad:f0:ac:42:51:
aa:0d:cb:be:7e:a6:91:b7:54:fb:b9:a9:cd:0b:fb:
97:05:4e:14:4e:e6:61:73:4f:e8:bd:59:cf:e9:af:
7a:fb:e3:f8:d7:e2:23:3b:72:dd:3b:e4:cf:dc:87:
d4:f8:f0:84:28:5d:5f:20:6f:80:6c:12:1d:f5:e7:
4b:4e:01:b4:d1:36:3b:be:f1:9f:d3:96:81:ff:c5:
e4:17:62:71:6e:a9:83:7d:69:23:6b:7c:6f:e5:d6:
08:7a:16:a4:a9:14:42:8c:0e:86:9f:28:72:5e:20:
f6:67:ee:60:39:f5:13:be:f2:f8:39:14:d1:48:76:
33:08:30:a2:d1:0c:0f:67:8f:b0:a3:a2:70:39:df:
ce:26:95:0b:c4:68:5c:e5:1a:fb:50:a4:e7:8f:d6:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:AB:77:22:9F:6A:5C:DC:20:39:6C:AF:5C:85:ED:6D:1C:DF:3E
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e3:c0:43:03:cd:2b:e7:e7:2c:14:b2:51:fd:55:55:3a:de:
14:03:46:bb:11:d6:6d:78:a8:04:49:6b:b3:f1:30:50:d2:c1:
76:82:47:df:18:98:5b:cf:24:bd:b9:ac:98:11:1a:9d:4f:71:
53:dc:dd:3a:f6:c7:f5:79:76:ca:d1:b8:26:83:18:ed:d1:d5:
bf:e8:8b:2e:7c:98:a6:8b:fc:9c:84:dd:de:66:b4:24:f9:55:
f6:78:ff:62:5b:51:f7:ca:94:5c:79:c7:4f:9d:e1:24:9a:7a:
cb:a1:aa:54:5a:e9:3d:06:91:ab:e1:5f:02:dc:ac:e4:3a:0f:
e3:38:2b:f8:75:e9:98:b7:ac:43:30:fb:ca:c3:e6:f6:bb:6e:
66:2e:8c:61:ba:2c:78:64:50:7f:75:2e:76:6a:46:8f:88:f7:
69:11:54:e6:4d:fc:6f:e2:ed:4e:63:40:7a:ed:4e:9d:46:21:
66:a4:77:b5:83:96:e6:13:04:ae:ec:14:2a:25:35:46:2b:42:
33:d0:14:45:22:a9:b4:15:16:1e:8f:db:86:57:9f:4a:5b:46:
61:40:e6:92:c6:7f:17:7a:c2:05:2a:a8:9c:41:03:62:79:72:
14:4f:48:6a:ce:1d:b6:58:08:75:bf:4e:e4:29:a3:f4:2f:ee:
73:06:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:19:10 2025 by rpki-client