Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: 15Cu+J9jX0xKa6tPBhiJhwl7Hn/DhVV90TpQW8Wam5M=
Subject key identifier: 80:1E:43:DC:4F:B7:30:24:3C:C3:68:86:FD:8F:41:FF:ED:D5:96:5D
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019921B22B7D9C263457A7807C1DEF34A41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:28 +0000
Manifest this update: Sun 07 Sep 2025 01:02:28 +0000
Manifest next update: Mon 08 Sep 2025 01:02:28 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: QIIRbmVuUwt0jSecqTAAwBDhs+E07duQK4WTjvkMc5g=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:2b:7d:9c:26:34:57:a7:80:7c:1d:ef:34:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Sep 7 01:02:28 2025 GMT
Not After : Sep 8 01:02:28 2025 GMT
Subject: CN=801e43dc4fb730243cc36886fd8f41ffedd5965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:5d:be:2f:16:1c:8b:68:18:0d:1a:7f:bc:
65:a7:2a:68:8f:81:72:43:d9:11:6f:a2:55:ea:b5:
d9:65:31:00:2c:68:cc:86:08:01:21:7d:cf:9b:89:
48:c7:95:37:dd:9e:98:3f:4a:71:29:35:6b:ec:38:
1a:07:95:2e:a8:2e:b8:45:70:44:e5:e1:30:99:49:
7b:6d:8f:42:a2:be:13:14:03:d1:bf:56:8d:84:91:
d4:ab:04:bc:47:4f:d0:7e:4d:8c:2f:c5:92:5a:14:
fa:24:38:ed:be:c8:13:ec:8e:dc:ee:05:db:b7:9b:
f3:c2:6e:65:a5:f8:e7:07:ea:3c:c9:72:78:80:d4:
2b:b7:15:8e:dd:10:87:63:af:05:e3:d1:86:0e:a8:
16:6c:0c:e1:92:8d:f4:a7:c4:1d:d8:44:3f:6d:07:
a6:d8:d7:e7:a5:fd:a5:99:72:ed:5f:bb:23:89:85:
0e:b4:79:90:87:4c:e2:5a:d5:46:0c:40:45:b8:fa:
29:2e:8f:a9:0f:17:94:38:ff:24:94:d9:0c:89:cd:
b5:5b:ea:15:ea:41:61:0d:f9:73:f1:58:29:d0:35:
ef:aa:44:17:1c:71:26:b2:16:73:42:4c:70:cd:44:
c2:95:6a:ce:4f:9c:47:83:8b:7f:8c:77:95:48:09:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:43:DC:4F:B7:30:24:3C:C3:68:86:FD:8F:41:FF:ED:D5:96:5D
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:68:f6:88:83:de:1f:6a:cd:e3:8a:88:b4:e0:bf:c2:8f:
b0:ed:4c:a4:1a:97:ee:8c:8e:7a:02:aa:2b:2f:81:36:2c:98:
e7:9f:7c:03:21:2e:24:31:20:5d:98:f1:da:8b:c1:a8:6c:17:
58:af:b5:ba:0b:fb:7d:d1:0c:67:88:64:d1:b0:3c:fa:b8:f4:
21:b4:a3:85:49:79:45:c9:16:c5:fe:bb:bd:b2:f6:64:5c:b6:
fd:bb:00:b0:5b:c1:53:af:0d:1c:70:6d:66:b4:dd:8b:3b:0d:
fb:fc:56:85:e2:ae:ca:87:b2:39:c6:82:13:96:7c:34:2a:e6:
30:e4:8b:68:b2:08:90:1d:17:01:86:c7:dd:9b:a3:e8:62:5e:
49:42:f6:f6:47:2a:af:d0:c7:d8:90:e8:ee:a0:32:62:14:46:
be:3a:c3:54:5f:09:98:73:ad:c5:e1:24:66:ae:fe:c4:35:d1:
79:bb:f5:d6:0f:12:99:5e:6d:15:bc:d6:41:59:c1:64:c2:c9:
63:3f:3c:78:03:86:4f:f9:e4:c3:e0:e6:7a:4b:7b:89:70:5a:
0c:24:99:f9:19:ea:b7:28:80:fb:1a:50:57:e5:18:32:48:38:
32:27:73:e3:89:bc:0e:bc:91:13:3e:ba:8d:7d:b8:a6:78:59:
bd:29:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:59 2025 by rpki-client