Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: h0xgyXzRh84qKMVE6d7IsFb7LQD2oUv11izF8UC3QAM=
Subject key identifier: 7F:D0:58:CB:CB:00:A5:43:C6:79:F5:92:28:22:CE:C1:F4:18:30:E9
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0198D5BC1B4AD7E1E472D687FA62B593F9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: RlB6Y+xG/w1cKYGiZWnedLOvSri183ogSye6cFgpTjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1b:4a:d7:e1:e4:72:d6:87:fa:62:b5:93:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=7fd058cbcb00a543c679f5922822cec1f41830e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:0a:82:c0:5d:4c:85:3f:b7:a3:b0:ad:ce:
8a:6f:07:52:da:2a:ca:7b:93:d4:12:4f:14:88:84:
4c:7f:c3:fb:c9:78:7e:56:4d:86:fe:9f:f8:0f:cf:
8e:68:49:c7:a6:90:08:89:20:a1:dd:e0:6c:a7:79:
ce:13:52:24:7d:8e:94:b2:45:7f:aa:0c:78:ea:16:
79:10:21:93:75:b3:d7:c4:a2:e8:53:53:25:2e:97:
87:22:d6:26:34:f0:f2:fa:42:dd:24:b9:ae:e1:fe:
12:41:f6:86:ee:23:9b:51:96:d3:7d:79:c8:8b:a6:
68:c1:6c:80:27:13:94:82:c5:bc:2d:36:ae:41:d8:
c8:6d:12:15:64:cc:a0:e0:77:6a:44:95:4d:de:8b:
f8:45:a9:66:97:ab:c4:d2:d3:37:ef:fe:0a:8b:fa:
07:ba:9b:bb:d2:82:17:d6:ae:7a:c7:b1:c5:af:97:
aa:c8:25:ac:7e:72:4b:ed:5c:b8:51:dd:02:1b:3b:
3e:48:eb:6f:63:03:f1:42:68:04:da:0c:d7:0f:e1:
c1:77:a4:c1:e1:2c:c7:32:aa:53:8c:42:6c:a5:e9:
0e:92:2c:11:2e:21:02:b8:43:94:81:2f:0e:fa:ee:
a3:32:92:e6:93:a0:e4:21:33:56:84:bc:50:c2:85:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:58:CB:CB:00:A5:43:C6:79:F5:92:28:22:CE:C1:F4:18:30:E9
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b8:e6:47:c5:e4:a3:76:76:61:c4:a9:24:db:bd:44:5e:68:
24:9e:9e:7a:ed:0a:0a:1e:a2:27:4b:d9:28:d3:07:06:a8:1f:
0f:20:27:53:d0:d7:0f:04:25:03:87:92:35:82:d9:73:7b:62:
d8:27:a7:cf:e6:8b:29:a3:4e:41:15:78:9e:41:cf:b0:8d:03:
d9:19:a0:16:64:53:ee:ba:68:c4:3b:82:40:6f:bf:61:8d:4b:
1f:50:40:8b:9d:d7:f3:99:6c:14:32:03:5c:08:02:58:7d:c8:
e4:ac:9b:be:1e:65:6f:b3:49:53:6c:2f:9c:8c:54:ca:6f:1b:
cf:1f:f9:bc:ac:33:47:77:e8:1d:59:c4:63:e1:a2:52:22:56:
05:be:1d:76:83:27:cd:50:b8:f6:79:44:60:b4:0f:f3:1a:91:
38:18:bd:6f:19:39:a4:50:57:b2:30:fa:23:35:55:53:a5:3c:
80:e2:c0:91:de:71:17:ad:bf:d4:e4:aa:73:7d:b6:2c:69:0a:
f6:75:3a:85:d1:d8:b7:48:91:c2:20:58:7c:8f:e1:4c:2f:71:
89:98:a2:04:4f:52:b4:aa:2e:7c:46:d9:ab:c3:e9:fc:2f:31:
cf:91:4f:d7:93:b8:b3:50:8a:c4:cb:b3:01:2c:1a:46:49:f5:
05:01:76:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvBtK1+HkctaH+mK1k/mlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0
NGUzM2MwHhcNMjUwODIzMDcwMjExWhcNMjUwODI0MDcwMjExWjAzMTEwLwYDVQQD
Eyg3ZmQwNThjYmNiMDBhNTQzYzY3OWY1OTIyODIyY2VjMWY0MTgzMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGkKgsBdTIU/t6Owrc6KbwdS2irK
e5PUEk8UiIRMf8P7yXh+Vk2G/p/4D8+OaEnHppAIiSCh3eBsp3nOE1IkfY6UskV/
qgx46hZ5ECGTdbPXxKLoU1MlLpeHItYmNPDy+kLdJLmu4f4SQfaG7iObUZbTfXnI
i6ZowWyAJxOUgsW8LTauQdjIbRIVZMyg4HdqRJVN3ov4Ralml6vE0tM37/4Ki/oH
upu70oIX1q56x7HFr5eqyCWsfnJL7Vy4Ud0CGzs+SOtvYwPxQmgE2gzXD+HBd6TB
4SzHMqpTjEJspekOkiwRLiECuEOUgS8O+u6jMpLmk6DkITNWhLxQwoV2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/QWMvLAKVDxnn1kigizsH0GDDpMB8GA1UdIwQY
MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt
Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5
LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7jmR8Xk
o3Z2YcSpJNu9RF5oJJ6eeu0KCh6iJ0vZKNMHBqgfDyAnU9DXDwQlA4eSNYLZc3ti
2Cenz+aLKaNOQRV4nkHPsI0D2RmgFmRT7rpoxDuCQG+/YY1LH1BAi53X85lsFDID
XAgCWH3I5Kybvh5lb7NJU2wvnIxUym8bzx/5vKwzR3foHVnEY+GiUiJWBb4ddoMn
zVC49nlEYLQP8xqROBi9bxk5pFBXsjD6IzVVU6U8gOLAkd5xF62/1OSqc322LGkK
9nU6hdHYt0iRwiBYfI/hTC9xiZiiBE9StKoufEbZq8Pp/C8xz5FP15O4s1CKxMuz
ASwaRkn1BQF20w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:35 2025 by rpki-client