Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: NGIQ0TS7acWRA9CfDhqDfloBBp6hzx164hoPEhQI+C0=
Subject key identifier: BD:F2:2A:88:B5:7C:93:B3:5A:53:C6:3D:95:4B:BA:A9:D9:DD:48:3A
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 019768BC5AFBC9D530B76E1E1A12DF7C5D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 10:01:03 +0000
Manifest this update: Fri 13 Jun 2025 10:01:03 +0000
Manifest next update: Sat 14 Jun 2025 10:01:03 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: J68z9W873/UrktZLoXXXXZi2gid22+rfsBWscQBaAx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:5a:fb:c9:d5:30:b7:6e:1e:1a:12:df:7c:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jun 13 10:01:03 2025 GMT
Not After : Jun 14 10:01:03 2025 GMT
Subject: CN=bdf22a88b57c93b35a53c63d954bbaa9d9dd483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:34:c2:48:36:d8:fe:58:e1:29:c9:2c:46:
b7:4d:31:42:b8:14:98:34:02:a8:d7:6a:f0:24:7b:
7d:07:16:e7:d0:13:0d:51:66:84:5c:b6:c2:00:7a:
ef:45:55:95:bf:21:7a:ff:b7:8e:a4:b9:a4:45:51:
ac:67:88:55:42:b0:a3:44:ef:fb:86:16:a5:de:c9:
35:f2:a0:7c:a1:28:44:13:98:74:30:1d:f7:89:e4:
ce:eb:2b:25:51:0f:f8:ff:1f:04:36:59:39:af:2a:
fe:9c:3b:f4:1a:6d:b6:0d:d0:d2:70:21:7f:0f:d8:
c7:aa:d8:23:c8:f2:7c:e6:0c:b2:8d:db:07:b1:a6:
31:6c:98:7c:0a:8c:aa:ca:5d:09:41:a8:f4:35:8e:
b5:57:bc:6a:88:e7:1c:3f:d5:10:ea:9f:1d:85:43:
6e:2e:ef:91:a9:61:1e:88:02:c0:94:4c:dc:46:b6:
8c:59:68:8f:ec:83:74:2f:8e:ae:0f:b8:c3:4a:85:
f7:6f:9e:ff:16:b5:f3:5d:d3:6a:09:ec:d1:24:37:
80:98:cc:a9:8e:05:20:1f:23:70:45:90:d8:9e:29:
65:59:15:28:2f:87:e6:b8:08:d0:65:22:11:2c:26:
9b:e5:86:2c:4f:4c:59:6d:b8:55:65:c0:1a:ef:4f:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F2:2A:88:B5:7C:93:B3:5A:53:C6:3D:95:4B:BA:A9:D9:DD:48:3A
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:e9:43:2b:95:bf:9e:ff:18:22:0b:6e:5f:84:30:b8:9f:
23:80:ac:3a:db:32:bd:2b:12:65:b7:2f:20:9c:47:78:df:15:
0f:54:74:5e:8b:d7:56:28:a9:31:49:4f:fa:b8:09:aa:a5:bb:
33:45:2d:d7:28:10:a2:8a:06:e4:65:0c:cf:b1:1e:42:cf:ca:
84:05:d3:80:5a:41:86:35:30:2d:1c:2e:d5:65:a7:b8:75:68:
4c:68:67:dc:5a:0b:b8:9d:4d:1c:aa:11:03:66:bb:a5:d1:68:
55:d6:9a:72:0c:30:af:ec:6c:79:07:6a:41:e1:eb:e6:7f:37:
a0:a6:2d:d8:a8:9a:64:9f:59:f3:ff:7b:d9:00:a9:38:aa:37:
2e:03:91:6d:19:88:7f:7e:cd:eb:6a:82:9e:7d:49:c6:0c:77:
7b:10:e1:46:6a:29:07:a9:d0:3f:68:f4:23:d5:84:7c:e8:58:
93:b0:46:d5:5b:17:ad:04:b1:db:a7:3b:94:df:17:cb:a5:ae:
2f:5a:0e:48:87:71:84:f4:08:ed:c7:31:9d:c0:d6:68:d9:5b:
2e:8b:d1:10:2b:77:5c:01:d1:42:d0:c8:73:81:6b:ee:89:8f:
e4:7b:7b:9a:92:fc:0f:01:b2:57:f8:2c:26:2b:fa:5e:ea:80:
ec:74:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:23 2025 by rpki-client