Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: f3DAM0fmmaWmpZPwPKRUodUCWjO7imxCxtr+YZdqdqE=
Subject key identifier: 03:8F:32:F8:EB:E6:2A:4E:EB:E5:E4:D0:7A:7A:B0:E4:23:62:E9:48
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 0196718AA7F903D6239C39EC44A0C075C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 10:00:34 +0000
Manifest this update: Sat 26 Apr 2025 10:00:34 +0000
Manifest next update: Sun 27 Apr 2025 10:00:34 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: N7wS2+03b7G8+mrCTXC4c/jyJ/b5DlmiSX7UrsqTQHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:a7:f9:03:d6:23:9c:39:ec:44:a0:c0:75:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Apr 26 10:00:34 2025 GMT
Not After : Apr 27 10:00:34 2025 GMT
Subject: CN=038f32f8ebe62a4eebe5e4d07a7ab0e42362e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:b6:26:55:93:1b:0d:72:73:78:99:9d:d9:
50:8b:6f:46:1c:f3:37:b2:74:22:a2:a2:1a:87:b8:
1b:11:09:4c:83:dd:1a:d4:38:43:f1:a6:0e:d6:b2:
74:bf:a2:47:6a:8d:aa:53:04:52:3d:4e:da:e3:12:
10:fa:9c:32:9c:b2:dc:8c:f1:03:2c:6f:41:20:87:
53:2c:f2:bb:c9:c1:27:03:6a:4d:36:6d:d1:78:8d:
5f:bf:c0:c9:6d:06:2a:d7:93:a9:c1:05:6f:7c:10:
64:f7:4a:7b:10:8d:c9:9a:bb:9b:dd:44:70:29:9e:
ef:32:e8:cc:9c:00:2d:6f:29:1b:0c:3a:c6:c6:bf:
7e:06:7c:dd:69:57:6b:19:07:5f:28:43:49:bc:64:
e5:c2:2e:76:65:9a:0a:33:c7:31:cf:6a:2f:88:b0:
98:e4:30:dd:7a:08:b3:66:27:ea:24:82:8a:68:94:
84:f1:05:d8:f3:75:27:74:0d:a1:68:ca:d2:a5:0c:
72:8e:fd:75:d8:ab:ed:f8:e5:06:92:40:db:b2:d3:
75:4d:7c:84:d4:4b:56:b0:0d:5b:0f:aa:c0:28:00:
28:94:c5:65:60:17:66:ac:fe:e4:b3:66:fd:2c:2e:
34:ad:0b:e8:1c:8e:94:25:d9:42:10:5e:e9:f2:7d:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:32:F8:EB:E6:2A:4E:EB:E5:E4:D0:7A:7A:B0:E4:23:62:E9:48
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:96:4f:36:9f:65:42:d6:fc:5b:7f:5a:fa:af:78:69:1a:ad:
ab:8b:6b:1c:aa:91:14:12:48:c8:1b:c3:ec:8d:26:51:1a:8e:
f8:61:45:05:5d:ff:ee:4e:37:00:ea:7a:51:3c:12:44:45:b4:
b4:95:5f:bf:66:d4:37:30:34:97:f0:96:72:3e:35:de:37:b1:
e8:28:d1:d5:36:34:5e:07:37:62:94:c8:53:c4:db:7a:c8:df:
e1:be:50:90:82:c5:be:5f:a7:b4:a5:84:b8:f3:42:71:88:50:
47:6f:3c:66:2d:81:4f:77:bd:8b:9f:3a:d4:7d:f0:4c:12:46:
ca:0a:21:00:4f:46:e3:36:b6:ea:03:92:c1:84:be:ab:6d:17:
ca:40:3c:59:cd:33:61:66:1c:4b:ac:15:f9:b4:6f:08:a6:47:
cf:34:03:32:ff:e8:7b:f6:94:ff:73:3d:b1:47:04:91:6e:05:
f7:1a:04:6a:3b:85:e1:98:51:9a:33:35:0a:95:b5:99:47:63:
45:a4:20:3a:3a:c0:29:84:d9:5a:f8:cb:7e:f8:46:2d:ca:c5:
4d:9d:16:47:d0:5f:ea:21:c2:0b:18:04:3a:f6:3d:d5:26:75:
f8:ad:98:a2:f8:6c:dc:ec:f3:35:30:dc:cb:19:4c:83:b6:4f:
e1:01:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:57 2025 by rpki-client