Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: R/FHtNwfTirbxzfQwJlE4dfcCxO4jBFHeFM1LRnKFrU=
Subject key identifier: 35:A0:97:78:39:FF:1F:56:8A:72:7E:FE:AD:63:18:E3:58:0B:4C:F2
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 019919526527738B64550504F522B1250454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 10:00:54 +0000
Manifest this update: Fri 05 Sep 2025 10:00:54 +0000
Manifest next update: Sat 06 Sep 2025 10:00:54 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: GW8HTS0q48TVf/+t8E08x8nd8h5qhi36wZmGULMBeCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:52:65:27:73:8b:64:55:05:04:f5:22:b1:25:04:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Sep 5 10:00:54 2025 GMT
Not After : Sep 6 10:00:54 2025 GMT
Subject: CN=35a0977839ff1f568a727efead6318e3580b4cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:bf:2e:89:1b:cf:ea:d9:e0:ec:6d:62:9d:
2d:81:1c:7e:24:5a:51:2d:ae:8c:e5:f4:0e:f4:c7:
d2:40:f8:6b:f2:60:30:bf:d2:fe:dc:9a:94:7c:f8:
a8:bc:63:c9:73:85:71:3a:86:98:a8:9c:a8:34:5f:
8e:cd:f0:ec:ad:4a:5e:1e:28:73:d2:e3:d5:4f:74:
97:96:2d:f5:f6:a6:5d:0e:fa:b6:45:4f:89:c4:8e:
e2:50:d8:8d:a9:86:c0:3e:0b:9c:44:e1:4e:31:0e:
81:6f:e1:49:74:c2:e3:f6:fa:f5:9d:df:bc:3a:27:
32:01:a9:68:f2:f5:06:2b:e0:ad:22:7d:a3:51:6a:
ad:bb:15:ea:2c:68:f6:7f:32:7b:e8:98:c2:51:24:
10:ca:54:fb:ea:e7:79:b4:e7:a4:22:80:3c:8a:b5:
cd:f2:a2:1c:95:56:ad:43:5f:c2:d1:eb:44:27:68:
ac:15:bd:06:38:2f:fc:8b:11:8e:7d:cb:12:35:76:
0c:0e:52:71:52:61:07:bd:6a:eb:a2:58:cb:8d:85:
df:b8:64:b1:b8:a3:c9:28:d9:18:43:45:3f:86:cf:
0b:af:6b:c8:06:e4:b3:7e:6e:6f:7d:1d:36:b9:a0:
05:67:00:35:dd:c0:ec:95:06:f1:56:90:60:72:68:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:97:78:39:FF:1F:56:8A:72:7E:FE:AD:63:18:E3:58:0B:4C:F2
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:f2:4a:a2:fc:22:8c:30:ce:c7:b6:0e:7c:02:1b:53:95:
4e:18:60:a9:c6:44:fe:8a:43:5b:fe:90:30:00:28:69:cb:7b:
68:c3:1d:1c:c3:b9:11:36:72:be:43:51:65:8d:f7:c0:f8:60:
11:cb:29:10:b0:db:4c:64:48:c7:3d:7d:20:ed:71:53:46:1a:
9e:7b:ab:32:14:46:af:61:64:87:9f:10:8b:ba:b4:44:89:5d:
94:ee:e6:2b:d0:ed:49:48:3b:a2:ec:cf:e0:f2:4c:a8:c0:68:
58:d6:6b:f3:56:c2:3d:d1:6f:59:f0:54:53:52:e3:9f:34:3b:
f7:78:52:6f:44:b3:44:7e:98:d4:97:29:b3:87:b6:aa:be:58:
33:06:aa:16:48:1d:62:f6:84:62:98:8d:4a:26:ee:93:c5:a5:
12:cc:80:06:2b:be:76:52:fa:39:4c:af:10:f5:c5:c6:0e:87:
6b:4f:c3:c5:73:8d:e5:05:00:35:90:51:87:9c:d5:dd:40:19:
95:58:91:59:7b:7a:91:eb:fd:d0:86:8b:93:1e:d3:cd:2e:6e:
39:16:7a:99:9b:59:0f:d1:c0:5c:49:5b:da:9f:e4:8e:46:10:
22:3c:61:e0:ad:b9:72:a6:a4:87:b0:b9:c6:81:92:8e:ef:a6:
94:79:e1:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkZUmUnc4tkVQUE9SKxJQRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0
NGUzM2MwHhcNMjUwOTA1MTAwMDU0WhcNMjUwOTA2MTAwMDU0WjAzMTEwLwYDVQQD
EygzNWEwOTc3ODM5ZmYxZjU2OGE3MjdlZmVhZDYzMThlMzU4MGI0Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv+/Lokbz+rZ4OxtYp0tgRx+JFpR
La6M5fQO9MfSQPhr8mAwv9L+3JqUfPiovGPJc4VxOoaYqJyoNF+OzfDsrUpeHihz
0uPVT3SXli319qZdDvq2RU+JxI7iUNiNqYbAPgucROFOMQ6Bb+FJdMLj9vr1nd+8
OicyAalo8vUGK+CtIn2jUWqtuxXqLGj2fzJ76JjCUSQQylT76ud5tOekIoA8irXN
8qIclVatQ1/C0etEJ2isFb0GOC/8ixGOfcsSNXYMDlJxUmEHvWrroljLjYXfuGSx
uKPJKNkYQ0U/hs8Lr2vIBuSzfm5vfR02uaAFZwA13cDslQbxVpBgcmioIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWgl3g5/x9WinJ+/q1jGONYC0zyMB8GA1UdIwQY
MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt
Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5
LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbDySqL8
Iowwzse2DnwCG1OVThhgqcZE/opDW/6QMAAoact7aMMdHMO5ETZyvkNRZY33wPhg
EcspELDbTGRIxz19IO1xU0YannurMhRGr2Fkh58Qi7q0RIldlO7mK9DtSUg7ouzP
4PJMqMBoWNZr81bCPdFvWfBUU1LjnzQ793hSb0SzRH6Y1Jcps4e2qr5YMwaqFkgd
YvaEYpiNSibuk8WlEsyABiu+dlL6OUyvEPXFxg6Ha0/DxXON5QUANZBRh5zV3UAZ
lViRWXt6kev90IaLkx7TzS5uORZ6mZtZD9HAXElb2p/kjkYQIjxh4K25cqakh7C5
xoGSju+mlHnhfw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 18:56:48 2025 by rpki-client