Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: HATKa1taTT06aEOusxXKz8DDisneJrKl1/+JpEIZXBk=
Subject key identifier: 9A:65:B6:09:99:E1:F7:31:D9:A4:A9:20:C5:36:86:58:5F:5D:33:77
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019A71B7D4A0DB94942ADD0A8FC9A67FEEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: VQfb0WxaOokruSrOz2Ab78ro3Wp/G4ZKbvNhDDvROUU=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d4:a0:db:94:94:2a:dd:0a:8f:c9:a6:7f:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=9a65b60999e1f731d9a4a920c53686585f5d3377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:1d:95:ba:71:7b:94:94:fc:78:2d:19:6d:
81:a2:af:c2:ab:62:8d:0a:2f:59:96:8d:49:05:b0:
3e:51:b5:19:f5:95:e9:0e:0d:18:e0:14:76:67:3a:
bb:00:ce:cc:dd:1c:d2:7c:66:f4:b7:e9:ed:36:c6:
37:92:4d:d0:12:8a:5f:60:29:ca:60:97:5c:37:62:
41:cb:ad:46:89:21:de:40:88:e5:ce:96:91:f7:d3:
45:23:9c:df:2f:83:4c:69:2d:e9:f0:33:d8:04:71:
7f:5f:3f:f1:fc:9a:72:cc:fd:9b:b6:2f:0e:0a:2f:
3f:84:c5:fe:ca:78:63:13:92:33:ef:49:27:07:3b:
0d:2b:48:e9:6a:9b:21:67:3e:cb:2f:96:41:2e:14:
11:ad:89:7e:06:1d:61:de:5b:f9:63:25:5d:2e:9f:
9d:24:24:17:44:ed:2c:ed:56:a8:5d:86:0b:e4:60:
8c:e2:51:37:fe:38:12:84:b9:7e:aa:51:0f:f9:6a:
a2:34:83:97:17:4c:ef:9f:39:c3:90:c4:30:2b:cf:
9b:6c:ce:00:f6:78:90:88:42:99:ee:ae:8e:cd:c9:
8b:7c:25:4c:3a:20:a0:c6:a0:ce:95:42:2f:e9:e8:
b6:e9:07:61:c6:0a:6f:20:da:83:1c:8b:68:38:29:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:B6:09:99:E1:F7:31:D9:A4:A9:20:C5:36:86:58:5F:5D:33:77
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:e2:02:e9:f9:94:86:da:1f:dd:16:ed:04:0b:8d:d0:97:
7f:02:47:39:6a:1c:2f:f0:a5:00:9c:67:e8:c5:60:cc:d8:af:
9e:42:96:ff:68:09:4d:23:1a:d3:fd:75:fb:cb:0a:3c:5b:82:
b1:8b:32:e1:fc:59:0c:09:d1:4b:c1:24:51:23:db:1c:18:d6:
45:75:f3:63:b7:d1:06:5d:41:49:45:c0:11:8c:bd:ff:aa:f7:
66:01:32:45:4f:52:4c:7b:9a:d7:ff:6f:fe:7e:54:11:27:96:
9e:36:68:0f:88:23:5d:8c:10:5f:46:44:9f:67:e2:19:05:6c:
5d:50:33:3a:40:f5:fe:57:e0:64:3d:ab:17:f4:36:b4:a0:ab:
c6:14:8b:6f:2b:1b:41:b3:ed:01:aa:a7:aa:8c:cb:d3:bc:3f:
9b:f3:fd:5f:eb:bf:3d:f4:90:ca:c6:74:12:c4:24:cf:10:bd:
ba:3a:f0:13:17:15:38:27:c8:65:63:21:40:78:20:fc:af:ff:
61:b9:7f:db:e6:02:21:32:04:ae:c9:96:e4:8e:a3:c6:79:ab:
39:73:de:f1:38:a6:a7:06:3a:2c:f4:93:88:54:17:db:df:a9:
b8:a9:74:22:1c:25:76:e7:ff:02:09:3b:49:aa:8a:22:44:db:
da:99:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client