Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: Zzc9kaHKX3/yXEirq/kBe8wmExI1o5FuqGL9Vx9ByxM=
Subject key identifier: 94:CF:DA:4E:85:DC:5F:6B:74:ED:24:DA:45:2C:EA:33:24:F0:BD:9C
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 01969DF5E76F79C71FC92D1B66855AC24002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 01:01:00 +0000
Manifest this update: Mon 05 May 2025 01:01:00 +0000
Manifest next update: Tue 06 May 2025 01:01:00 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: effih8g6QlxwnMRYpindC2g3ZZoCbFHynK29oBpbER8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:e7:6f:79:c7:1f:c9:2d:1b:66:85:5a:c2:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: May 5 01:01:00 2025 GMT
Not After : May 6 01:01:00 2025 GMT
Subject: CN=94cfda4e85dc5f6b74ed24da452cea3324f0bd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:d5:84:a3:ac:a8:c9:72:62:27:1b:6c:9b:
3b:0c:d9:38:4b:06:f0:93:51:14:54:ec:e0:32:02:
36:68:f4:e2:b3:1c:5f:7c:3f:c0:bd:91:0b:6d:04:
c8:61:a5:62:c0:aa:6b:ad:a9:2a:b6:57:aa:89:b9:
e6:7a:6a:b0:69:e0:f8:1b:15:0f:e5:48:3b:86:cc:
9a:19:fd:b7:c8:ee:20:25:ae:92:94:d2:01:0e:d9:
09:1c:09:24:32:48:88:bf:aa:cc:f9:ca:83:a7:42:
0f:86:b3:bc:7d:2f:20:07:ea:15:1f:a9:fb:0a:e7:
fd:6c:c4:43:27:f9:3a:94:5f:4f:9e:2d:38:25:58:
2e:da:d9:c1:9d:3d:f6:2f:a7:1b:32:99:aa:75:29:
85:52:b4:55:36:8f:d8:35:b0:bd:a7:df:e1:f1:7c:
26:01:6d:5e:16:34:bd:2a:86:76:0a:32:b9:4a:4e:
ad:52:c6:13:83:8d:c6:9b:6f:ba:cc:9f:8a:31:7b:
fb:b9:4e:41:42:e0:ba:2f:4e:7f:2c:7b:19:d4:74:
e2:56:e2:59:ee:cf:31:8e:6a:97:6e:dd:ae:d9:6f:
44:be:3a:47:82:2f:24:f7:54:d2:03:95:8f:98:3c:
8d:e6:6e:af:df:41:4f:5e:73:6f:68:00:af:b0:d0:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CF:DA:4E:85:DC:5F:6B:74:ED:24:DA:45:2C:EA:33:24:F0:BD:9C
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:be:e9:2b:f4:86:ea:69:1a:96:22:a5:85:f1:2c:b7:65:74:
1f:fe:06:1c:39:7e:9b:f2:b0:74:26:cf:e0:07:3a:b0:31:f3:
9a:7f:15:8a:5a:04:a5:71:a0:9c:49:fb:be:b4:af:74:84:5d:
aa:35:bc:80:0c:3a:31:12:79:3a:83:ac:86:38:ec:50:6c:9b:
87:ed:55:6d:24:4a:1c:2d:65:14:b3:db:b3:f2:39:61:96:8d:
1b:ae:42:c9:f5:9d:e7:f9:75:6f:30:c5:78:7b:2f:b5:6d:99:
0b:af:30:f1:df:40:b5:58:11:04:77:43:ec:c6:89:b0:b8:7f:
56:25:b0:82:1a:ca:38:a0:c0:82:08:ca:cb:f4:41:f1:7a:dc:
ad:81:3a:ed:c8:16:09:4f:7c:77:3e:a2:7d:b9:72:07:56:ba:
7a:6e:8e:6c:30:54:21:60:91:1c:dc:74:31:cf:99:5a:a7:d8:
7c:cd:af:22:9d:c3:1d:94:dc:6f:7b:e4:a6:9c:ec:40:b9:41:
b6:61:42:94:a1:03:3a:c1:2a:8c:1c:e6:2b:0d:af:38:d3:85:
40:85:14:8b:28:bf:70:f4:61:ae:0f:fc:7a:19:86:bf:95:04:
f1:45:c3:c0:a0:fa:45:ce:34:5e:89:6c:ae:c8:f2:b1:a0:18:
d7:99:12:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9edveccfyS0bZoVawkACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0
NGUzM2MwHhcNMjUwNTA1MDEwMTAwWhcNMjUwNTA2MDEwMTAwWjAzMTEwLwYDVQQD
Eyg5NGNmZGE0ZTg1ZGM1ZjZiNzRlZDI0ZGE0NTJjZWEzMzI0ZjBiZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6/VhKOsqMlyYicbbJs7DNk4Swbw
k1EUVOzgMgI2aPTisxxffD/AvZELbQTIYaViwKprrakqtleqibnmemqwaeD4GxUP
5Ug7hsyaGf23yO4gJa6SlNIBDtkJHAkkMkiIv6rM+cqDp0IPhrO8fS8gB+oVH6n7
Cuf9bMRDJ/k6lF9Pni04JVgu2tnBnT32L6cbMpmqdSmFUrRVNo/YNbC9p9/h8Xwm
AW1eFjS9KoZ2CjK5Sk6tUsYTg43Gm2+6zJ+KMXv7uU5BQuC6L05/LHsZ1HTiVuJZ
7s8xjmqXbt2u2W9EvjpHgi8k91TSA5WPmDyN5m6v30FPXnNvaACvsNBeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTP2k6F3F9rdO0k2kUs6jMk8L2cMB8GA1UdIwQY
MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt
Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5
LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr7pK/SG
6mkaliKlhfEst2V0H/4GHDl+m/KwdCbP4Ac6sDHzmn8ViloEpXGgnEn7vrSvdIRd
qjW8gAw6MRJ5OoOshjjsUGybh+1VbSRKHC1lFLPbs/I5YZaNG65CyfWd5/l1bzDF
eHsvtW2ZC68w8d9AtVgRBHdD7MaJsLh/ViWwghrKOKDAggjKy/RB8XrcrYE67cgW
CU98dz6ifblyB1a6em6ObDBUIWCRHNx0Mc+ZWqfYfM2vIp3DHZTcb3vkppzsQLlB
tmFClKEDOsEqjBzmKw2vONOFQIUUiyi/cPRhrg/8ehmGv5UE8UXDwKD6Rc40Xols
rsjysaAY15kSyA==
-----END CERTIFICATE-----
Generated at Mon May 5 08:23:44 2025 by rpki-client