Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: x0Bm5/IyGDyT3ps9G43lE3jssr2HxWewNdosUqCFb8U=
Subject key identifier: 95:4E:E0:26:D1:68:BE:F6:8C:F7:04:06:06:59:02:1B:58:C2:AF:C5
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0199FF2277E8770BB2F93D2188C68E3AC1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:12 +0000
Manifest this update: Mon 20 Oct 2025 01:01:12 +0000
Manifest next update: Tue 21 Oct 2025 01:01:12 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: y9GSP3rAl3VJNqIJoH1/iKt5QVqfZeKGevgpEoS67As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:77:e8:77:0b:b2:f9:3d:21:88:c6:8e:3a:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Oct 20 01:01:12 2025 GMT
Not After : Oct 21 01:01:12 2025 GMT
Subject: CN=954ee026d168bef68cf704060659021b58c2afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:06:8d:3a:89:f6:7e:61:8b:b5:67:5f:30:
8b:40:cd:aa:b7:db:06:0f:96:e0:99:22:62:d9:ee:
5d:95:04:9c:35:c4:ea:9c:31:08:6b:8b:cd:e2:81:
58:e3:ed:73:b7:f9:f0:76:01:02:33:18:2c:8a:6f:
e7:92:0d:ca:0b:26:72:8f:97:19:7c:7f:6c:de:c8:
ea:e8:f4:1a:9f:59:d9:e5:c5:6c:62:43:20:66:26:
05:65:2f:3f:1d:d3:09:c9:99:05:ba:bd:3b:3b:52:
1a:f4:3d:1c:c4:6c:e9:f7:ab:ba:30:6c:bb:52:5f:
9b:48:4b:8a:d6:f3:51:7f:30:1d:ab:fc:03:8c:41:
da:98:a9:17:19:50:c0:77:45:bb:ee:e7:d6:25:09:
fa:b9:52:d2:57:66:65:69:9e:4c:ac:01:19:25:43:
52:93:fe:7c:ea:1c:13:70:75:22:38:14:12:a8:d2:
60:06:a5:1a:b5:84:f9:d2:4e:39:10:b1:ab:74:8a:
8b:5e:f9:d8:c2:59:94:d0:5c:7d:a7:6c:af:fd:7e:
1c:40:1d:2c:5f:10:bb:a8:a6:c0:66:82:07:14:89:
64:5f:db:df:1d:97:7b:3a:e4:1f:96:13:a9:ca:75:
80:63:4c:1d:81:29:c4:22:eb:d9:fe:0f:1b:cc:e3:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:E0:26:D1:68:BE:F6:8C:F7:04:06:06:59:02:1B:58:C2:AF:C5
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ac:54:48:0a:c2:5f:28:9b:3b:07:6a:f4:b2:61:a5:e8:dd:
9e:88:6c:ae:18:41:13:ff:fa:87:26:2f:e5:5f:cd:72:16:98:
d4:16:04:c6:85:d0:47:86:35:2e:c3:be:20:94:ec:67:12:74:
f9:69:70:cf:a0:f3:db:2d:9b:39:5d:04:4c:01:d7:b6:e6:b4:
f0:00:5b:64:50:85:8f:92:b6:2d:50:4f:b1:ac:b2:54:52:76:
a4:f0:66:12:42:49:5e:7d:fa:30:1d:ff:d5:94:80:e4:6e:ab:
f5:ae:0b:9c:e8:ca:8f:45:2d:f5:a7:33:a1:96:9f:00:07:89:
d9:84:a5:d9:8d:a5:37:45:59:4a:45:76:5d:9d:51:02:3f:a1:
ad:08:6c:05:be:95:44:94:f5:79:91:77:52:06:21:c5:99:84:
56:41:cf:bf:d6:f7:e8:a1:b4:9e:83:3e:f2:d7:50:81:19:9d:
04:40:9f:59:58:70:d7:5e:5c:4d:5f:a7:8a:63:8c:f2:e9:df:
1c:98:95:29:ed:d8:cf:be:b2:b7:96:60:12:9f:0d:ca:2b:21:
05:65:c6:4d:a8:75:cf:5a:2a:2f:1a:15:1a:de:2a:ef:2a:23:
97:4d:ae:1c:f0:dd:77:f1:a3:d8:32:39:62:90:4d:3a:4b:78:
01:3b:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:04:17 2025 by rpki-client