Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: V6EECHBxkKFTQilo7rRC4bnwTN2jv6qNBFrOYNGXvU8=
Subject key identifier: DE:7D:82:C5:4B:27:00:FD:E6:17:69:01:7D:32:8C:FA:5D:F9:33:29
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019A71EEC8B9392FDF60471E7B2600CD4C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: cfbAaLVXC6V8cWZUe5pbgG6SITT0KvP8S+c/dT+XxKM=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c8:b9:39:2f:df:60:47:1e:7b:26:00:cd:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=de7d82c54b2700fde61769017d328cfa5df93329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:37:6c:42:d3:ba:3c:9d:a9:f6:c6:26:de:
cb:ea:e3:c9:65:8a:af:5b:4f:55:fe:a6:28:b8:09:
61:ec:5a:6e:96:91:0b:7a:2e:47:d3:5c:c6:b7:38:
ae:bf:79:13:5f:16:1d:be:e0:7a:02:62:54:ff:58:
f7:b6:7e:6b:3d:57:ae:51:6c:ba:89:22:44:7b:32:
7b:c2:b0:f2:59:0c:a0:75:38:f2:50:a6:f5:5b:c6:
bc:d2:ea:50:dd:a4:95:28:cc:07:02:a9:1c:45:42:
11:11:ed:43:fc:1a:fb:fa:a4:3f:9b:f5:c0:04:9b:
2b:ad:d8:22:e4:03:2c:81:fc:43:7b:e6:ac:43:e6:
a7:77:70:08:f9:c4:57:e0:97:18:79:7a:83:43:2f:
e0:e0:59:17:3d:7a:a6:3d:fb:5d:b4:83:69:e8:62:
50:1e:0d:51:cd:7a:cf:86:08:d9:57:61:62:e5:d0:
74:3d:01:d8:17:c3:b2:80:9f:e1:29:e9:80:8c:5d:
67:24:8c:6b:cd:99:c1:f8:7b:75:13:cc:6c:d2:2d:
b5:7a:92:0d:a1:52:e2:b4:a0:40:e9:62:cf:e9:2f:
25:86:d3:58:1d:94:f0:c7:d6:db:54:90:bb:36:eb:
0b:3d:0c:6a:76:b7:b1:24:ea:11:7d:76:31:a6:2d:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:82:C5:4B:27:00:FD:E6:17:69:01:7D:32:8C:FA:5D:F9:33:29
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:93:0e:58:27:fd:9a:34:e4:7b:e6:34:1d:f7:dd:a0:e9:b2:
0e:bc:40:ec:44:5f:91:1e:6a:df:e4:51:01:ea:27:68:7e:3c:
be:65:7e:79:e2:f9:43:57:8b:a3:55:17:3d:c5:52:1a:8f:0a:
5b:7d:d0:d4:b3:1e:4c:38:a5:26:53:14:54:f5:ba:eb:2e:11:
dc:e3:a8:e4:79:08:d4:4e:83:eb:13:de:97:14:a0:4e:70:15:
ee:7f:aa:5e:08:16:6a:34:46:ad:e3:12:16:ee:8c:1e:74:54:
3a:b0:e4:f8:36:21:80:67:e3:0a:81:75:65:24:90:e4:95:55:
32:4a:41:60:ca:da:c3:43:3a:4a:07:94:32:41:e1:90:61:8a:
f8:c3:13:ad:ac:c3:b9:83:3d:1c:e9:9e:83:67:3c:e8:ef:95:
ed:1f:64:6e:87:45:f4:46:06:40:42:51:70:42:78:61:17:fd:
bc:2a:e5:ff:47:ec:31:a5:d3:67:97:d9:8d:74:6b:de:bd:b2:
a2:a9:77:8c:f0:e1:0b:22:ff:c6:2d:4d:c8:12:71:71:9d:3a:
da:c3:49:fe:c9:e4:2b:e4:98:2f:d9:30:cd:29:aa:29:22:8e:
91:69:36:43:a9:fd:d9:73:85:8c:7b:97:2d:fc:88:15:32:6b:
32:a6:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:36 2025 by rpki-client