Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: bO6K+VcV2TwdjiFi7tpV0HnQGKI+zWB8xpWnfaMBf9g=
Subject key identifier: 31:A5:D8:24:25:9C:12:0E:5A:FF:B0:4B:FB:B2:A0:D6:27:15:15:33
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 019A7112A1267491C03211B84646CCA1A691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0FB0
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: Fomg/pyhmIy5CNtJ+RdsV9RSPh7iPYj1hUnQLRj/N8k=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a1:26:74:91:c0:32:11:b8:46:46:cc:a1:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=31a5d824259c120e5affb04bfbb2a0d627151533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:16:d8:9a:01:c9:8c:72:95:d0:38:d1:52:
84:e3:d4:fd:f8:3d:03:de:19:05:7f:32:42:95:84:
41:53:db:2f:ff:1b:c8:b8:cc:2f:53:13:f9:5d:21:
06:bc:1a:ab:99:4a:99:bb:de:d9:d5:f2:ec:84:6a:
94:44:00:f3:2a:48:26:05:d8:ab:05:78:85:be:59:
e8:b8:e8:45:61:57:4d:8f:7b:2a:c9:b0:3a:7d:23:
60:2b:e6:67:b0:91:8b:bb:97:e1:16:c7:88:54:c6:
45:cb:9d:d7:fb:d6:96:91:1d:7d:10:49:3e:85:2b:
fd:bf:1b:75:a4:c8:95:90:17:6d:26:3e:a0:f1:da:
8b:d8:07:8e:84:63:b9:b4:8d:95:08:cc:a4:d4:7e:
75:ae:39:c5:87:3c:c7:07:08:11:1a:9b:ec:76:0c:
1e:46:67:25:dd:48:48:de:f4:52:a5:b3:cc:9a:9b:
7d:e5:c0:c9:0f:b8:11:e9:0f:4c:e3:38:79:0e:c1:
dc:2a:93:23:f1:57:dc:eb:25:5f:dc:04:f6:08:b3:
28:0d:97:30:e2:55:b7:46:65:58:63:5c:06:8a:03:
21:53:d4:1e:20:2c:d1:01:1f:02:7f:dd:8c:5e:97:
59:db:0a:11:af:d4:9e:3c:01:cd:b0:e4:5d:91:53:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:D8:24:25:9C:12:0E:5A:FF:B0:4B:FB:B2:A0:D6:27:15:15:33
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:e9:70:94:23:a0:39:be:cb:4b:3a:30:3b:29:94:25:c0:
a1:9d:b5:23:7c:16:07:1f:b6:2d:f5:92:f1:66:4d:30:74:07:
04:71:bf:c0:01:48:a7:ca:cf:a9:8d:ec:2e:d3:f9:37:de:04:
ff:3d:e7:86:37:a8:0d:b3:44:93:cf:b5:ed:21:a5:be:2b:56:
ae:23:a2:d7:cb:bc:e0:fd:3d:b1:2d:45:dd:73:1c:f2:dc:ec:
99:7e:38:68:dc:70:80:d0:2a:d9:8a:7c:f7:32:0f:e6:97:2a:
d3:2b:0f:14:df:3e:c4:39:ad:7f:59:04:a8:24:13:15:1c:fd:
07:0f:11:d4:d0:c2:ba:7d:c6:67:fa:26:ef:94:1d:64:75:e3:
cb:c3:81:08:02:55:2c:3f:ac:7f:dd:93:d6:51:40:ab:f2:95:
b0:d8:bb:35:d5:d6:8e:9a:a2:c7:68:13:99:c4:01:14:29:6f:
72:7a:0a:6d:6d:d9:92:be:e6:dd:fa:9f:4e:0f:86:af:4f:43:
5f:be:18:e0:5b:b1:6e:e7:4b:a3:58:3d:c1:93:c6:9e:6d:be:
f7:df:2e:02:3f:bd:84:22:8c:f7:29:75:28:1a:fb:64:8a:2a:
0f:70:6f:c6:0d:f0:c5:96:7f:7d:3c:c1:3a:f6:55:31:10:fc:
bb:be:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:50 2025 by rpki-client