Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: ZDPKkazOr5T+ozigVw4RuM3AUkzCFjcBPNFW6m+LGq4=
Subject key identifier: DE:F7:FD:39:A9:B4:65:AD:0E:85:6E:BA:14:FC:AC:60:10:4D:00:E2
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0198733D95C4A3C748B9EE04125BA8D13BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:01:12 +0000
Manifest this update: Mon 04 Aug 2025 04:01:12 +0000
Manifest next update: Tue 05 Aug 2025 04:01:12 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: Icw6PYxH/rx4jY6lP0IpN4oO7fkHIC7cODV0A65ku+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:95:c4:a3:c7:48:b9:ee:04:12:5b:a8:d1:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Aug 4 04:01:12 2025 GMT
Not After : Aug 5 04:01:12 2025 GMT
Subject: CN=def7fd39a9b465ad0e856eba14fcac60104d00e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:d4:b9:f5:c5:6d:1f:b7:62:b8:de:59:8e:
f0:a4:a9:ab:85:61:6c:1f:e4:55:e1:c5:00:37:fa:
31:3c:d0:f5:79:83:76:c9:55:b0:2e:5a:f7:c8:cc:
76:bc:e6:5e:e0:81:5d:ff:bf:19:9e:16:19:a2:24:
73:96:eb:ea:1a:97:43:a3:1a:ac:b8:4e:5c:38:b1:
98:8b:72:f1:b5:10:ac:19:ed:17:c1:34:8b:bd:42:
c9:ec:29:e5:83:4c:5c:90:e8:32:1d:5b:ff:5f:59:
dc:9b:64:5e:0e:29:3a:13:e9:b4:29:bf:9b:41:91:
99:ed:f0:7b:07:06:85:c8:f7:2b:72:b0:68:b6:99:
ed:e5:63:1a:85:5a:15:f7:1c:ea:c6:7e:79:9d:e2:
d3:c7:fd:ee:32:8c:32:a0:2a:dc:73:bc:ce:8b:e3:
39:f3:5a:bc:cd:61:40:4e:63:d8:d9:ee:5e:3c:18:
de:78:9a:6b:2a:a9:7f:f0:6c:80:9a:68:7f:8f:02:
60:b1:e3:3a:b7:7d:59:7c:bf:79:d4:3b:41:0b:25:
e6:73:f9:1b:d6:f8:eb:36:eb:c4:2a:53:c7:38:d4:
71:e4:22:36:0d:f9:94:5b:47:57:f2:1d:b6:40:b1:
c3:f4:8e:ef:0f:34:dd:f5:6f:1c:2a:83:6c:35:72:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:FD:39:A9:B4:65:AD:0E:85:6E:BA:14:FC:AC:60:10:4D:00:E2
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c8:fe:7b:ab:d6:72:3a:c9:a9:63:af:78:dc:76:f6:73:b7:
d6:8a:b2:61:d9:e7:c8:65:6a:1e:78:88:93:a9:7f:65:61:8a:
c3:1a:b9:a0:0d:ef:83:c6:45:4c:cc:01:8a:5a:02:2c:a4:1c:
a8:91:1b:1b:5d:8e:8a:11:c9:c4:75:eb:a1:f0:4a:52:78:27:
a0:e4:7b:8f:ec:03:94:b3:67:c1:54:e6:45:4e:9d:c6:e4:ce:
2d:33:5e:98:01:20:d2:1f:1a:a9:29:90:b8:d0:5c:8a:91:c0:
50:bf:21:e9:1f:11:35:b2:8b:b1:b3:f2:99:94:ca:99:58:40:
9c:eb:d4:b3:fc:42:53:4d:4c:06:ee:ee:8c:76:13:10:fc:a6:
49:50:1b:c8:e3:fc:6a:2b:9e:1e:bd:99:f3:99:77:b1:1d:31:
57:50:91:df:58:9f:2e:1e:bc:fd:2d:c7:97:1a:33:20:c9:a7:
d3:60:37:ba:15:cd:a6:74:43:8a:66:e9:82:00:30:05:73:5f:
b8:7e:ee:ba:af:07:cf:eb:b8:39:21:ea:d7:29:e3:75:76:9a:
bf:8f:2b:c2:93:b9:1d:c6:79:48:56:5c:74:1d:d1:5b:ca:06:
b5:e1:dc:69:db:95:0b:12:65:f0:37:fe:1e:bb:40:d6:ed:98:
09:70:1d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZXEo8dIue4EEluo0TvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0
NGUzM2MwHhcNMjUwODA0MDQwMTEyWhcNMjUwODA1MDQwMTEyWjAzMTEwLwYDVQQD
EyhkZWY3ZmQzOWE5YjQ2NWFkMGU4NTZlYmExNGZjYWM2MDEwNGQwMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrUufXFbR+3YrjeWY7wpKmrhWFs
H+RV4cUAN/oxPND1eYN2yVWwLlr3yMx2vOZe4IFd/78ZnhYZoiRzluvqGpdDoxqs
uE5cOLGYi3LxtRCsGe0XwTSLvULJ7Cnlg0xckOgyHVv/X1ncm2ReDik6E+m0Kb+b
QZGZ7fB7BwaFyPcrcrBotpnt5WMahVoV9xzqxn55neLTx/3uMowyoCrcc7zOi+M5
81q8zWFATmPY2e5ePBjeeJprKql/8GyAmmh/jwJgseM6t31ZfL951DtBCyXmc/kb
1vjrNuvEKlPHONRx5CI2DfmUW0dX8h22QLHD9I7vDzTd9W8cKoNsNXI+nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN73/TmptGWtDoVuuhT8rGAQTQDiMB8GA1UdIwQY
MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt
Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5
LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8j+e6vW
cjrJqWOveNx29nO31oqyYdnnyGVqHniIk6l/ZWGKwxq5oA3vg8ZFTMwBiloCLKQc
qJEbG12OihHJxHXrofBKUngnoOR7j+wDlLNnwVTmRU6dxuTOLTNemAEg0h8aqSmQ
uNBcipHAUL8h6R8RNbKLsbPymZTKmVhAnOvUs/xCU01MBu7ujHYTEPymSVAbyOP8
aiueHr2Z85l3sR0xV1CR31ifLh68/S3HlxozIMmn02A3uhXNpnRDimbpggAwBXNf
uH7uuq8Hz+u4OSHq1ynjdXaav48rwpO5HcZ5SFZcdB3RW8oGteHcaduVCxJl8Df+
HrtA1u2YCXAdXA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:35 2025 by rpki-client