Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: R8Dq8eSyByJQHYU5HtS8l1Y+DJ2Cu4ka3NWTCQBTr7U=
Subject key identifier: 07:C8:F6:2A:C8:AF:55:6A:F5:79:39:D0:87:D5:68:28:77:B9:43:3E
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0197B7EA82FFBD38CEE2959A3E65560EB937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: qrhgI7tWtDv+NOxeFECG8gl99bd2HC3HJ+sJhmr7bbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:82:ff:bd:38:ce:e2:95:9a:3e:65:56:0e:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=07c8f62ac8af556af57939d087d5682877b9433e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:71:71:18:63:14:4e:6a:f0:09:9e:08:3a:
24:89:67:4f:af:f9:39:d1:62:58:e2:15:6b:97:1a:
ee:f0:35:5e:d9:5b:2b:6d:e8:e5:e9:76:66:dc:e7:
e5:0d:de:30:ba:12:f1:a4:26:3b:83:56:7e:8a:6c:
e4:6c:30:23:48:ce:5f:42:03:6d:3f:5d:41:6a:6c:
f2:93:cf:33:3f:44:3a:81:4f:9c:e1:cb:e3:04:f8:
1f:cf:3c:43:60:d5:17:fa:fd:3a:7e:e4:df:e8:e0:
1d:af:51:fb:a0:2c:52:62:fe:27:68:00:58:a2:e1:
ba:bf:cf:c8:ae:20:f5:5e:ce:a3:c1:e9:bf:64:d2:
ce:5c:88:da:7e:c8:de:34:9c:60:b9:0d:fe:64:09:
2f:12:1e:67:64:ec:d0:bd:ce:d0:8e:a3:c2:4f:d5:
a5:cc:2a:80:25:ef:99:b8:87:f9:14:2a:4e:d5:24:
29:63:c0:1a:b4:d2:07:ed:1c:57:4f:36:0a:69:b1:
f9:bd:83:05:f5:c7:33:39:1e:09:b0:d1:eb:a4:88:
60:d3:76:54:8f:b5:e4:3e:47:4c:a2:bd:a5:93:39:
36:4a:7a:3f:29:bc:14:76:b4:4e:1e:b3:02:c7:59:
b4:6b:76:43:27:7c:82:07:4f:72:19:18:19:8d:73:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C8:F6:2A:C8:AF:55:6A:F5:79:39:D0:87:D5:68:28:77:B9:43:3E
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a4:a7:e2:aa:4a:e2:2c:f2:1d:4a:f3:53:8d:b5:db:84:dc:
05:4e:b1:6a:dc:01:ef:9d:67:f2:83:42:68:a2:4a:47:af:17:
85:9d:60:1f:15:8e:e9:86:c5:bf:2f:b4:a7:61:e8:80:1f:d2:
82:93:31:d6:24:64:12:59:c8:4e:4b:25:65:1b:f5:25:aa:dc:
3c:53:5f:c2:49:31:38:be:b8:96:bb:52:de:9b:91:56:19:e1:
bb:4c:e4:2f:2b:85:24:00:39:f5:87:f5:6f:19:0e:50:bf:88:
b5:98:f2:8b:6e:e3:98:be:0e:a2:70:87:06:27:42:ca:12:96:
08:b5:3d:a5:5f:05:02:d7:0d:22:8d:1d:1d:a4:df:b0:98:c4:
21:8f:51:7f:70:ed:35:c6:b5:27:e3:c7:a7:17:d3:ab:3d:c2:
56:15:6b:e2:2f:39:e3:dc:ee:f0:e1:0d:b2:41:73:7b:4f:da:
cb:5d:28:cd:85:d5:4e:c1:fd:7d:e5:c3:c7:69:d8:11:56:91:
f4:0f:ad:65:34:7c:0c:25:a7:6f:b3:a7:1e:db:40:6c:e8:16:
19:fa:c4:c3:2b:70:42:1c:66:70:fc:e4:e6:e1:de:3a:b2:cc:
11:c3:6d:7b:f2:04:fa:83:9f:23:e9:e1:a8:c9:bd:e3:88:c1:
e0:4d:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:13 2025 by rpki-client