Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: ZVBCo+Bp7U3QeFIF6EteWiZunnTTiLePz11lrfPC0PI=
Subject key identifier: C4:CD:0E:95:B1:71:96:CA:11:37:D1:09:73:41:FD:4C:28:E1:7F:47
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019A4F62A904F5FCE9353FE53DB7997399A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: iQMBmFUxaJToA23Pu+HIn2VPPMng1/V6rzXer4XdocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a9:04:f5:fc:e9:35:3f:e5:3d:b7:99:73:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=c4cd0e95b17196ca1137d1097341fd4c28e17f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:6b:0f:dd:8e:84:ce:92:69:a7:a1:f6:ec:
54:28:c4:ef:95:3d:71:ba:be:8c:85:9f:a5:69:77:
03:aa:50:90:55:df:eb:1d:05:b8:fd:d8:e1:43:5a:
e2:4b:a0:4f:ad:e7:aa:8b:54:fb:2f:9b:f0:29:f9:
4e:9f:75:55:30:cc:00:df:ce:7b:eb:e0:32:a8:88:
6c:a6:bf:bf:35:9f:10:1d:1f:92:f4:69:14:f2:b6:
b6:f2:26:eb:9b:c1:96:b5:cd:d6:f8:01:16:c6:32:
62:99:86:ee:25:b3:ce:19:bf:76:86:7f:51:6a:34:
38:68:b3:ac:86:48:e6:58:85:ee:56:22:81:e3:f1:
85:01:40:41:f5:75:21:50:d9:65:d3:a8:c2:de:0b:
1d:97:b4:50:aa:8d:c7:5e:5b:c8:4f:a6:70:ac:e7:
80:13:cc:65:30:9a:61:50:ac:8a:3d:1f:42:ff:94:
f8:d4:a0:17:e9:88:11:f9:56:cf:ea:ba:0f:4e:67:
47:27:aa:88:e3:4b:de:ae:f5:0c:fe:0f:df:7b:aa:
0a:83:59:ff:07:f1:88:01:29:55:04:00:39:26:08:
13:3d:4a:b5:7f:a0:aa:1b:ea:6b:ef:e8:06:2f:de:
9c:bf:93:c3:ff:b3:d1:48:8a:87:39:3b:70:83:73:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:0E:95:B1:71:96:CA:11:37:D1:09:73:41:FD:4C:28:E1:7F:47
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:c0:92:45:67:2a:f9:6d:72:0d:68:c2:e0:d7:ae:3d:02:
dd:2a:6c:4b:ce:6b:b7:38:b6:9b:f8:1a:2d:25:12:8b:27:56:
16:1f:56:4c:32:61:94:ee:8f:9c:5c:a6:39:6a:f5:a2:39:8e:
d3:db:0b:93:8d:48:1b:a7:01:ef:f2:c0:84:14:19:23:37:da:
41:56:3c:b3:6d:ad:44:c4:5a:14:50:4e:9f:77:b2:10:66:26:
eb:08:cb:79:74:7e:2e:59:df:a4:b8:16:6b:6c:5d:14:74:2d:
b6:24:d0:3f:1f:58:c4:58:49:1d:43:d1:11:c6:6d:0b:86:23:
ad:c5:8a:dd:d0:55:0e:c2:2b:52:f2:6a:e4:5a:78:ae:b0:60:
11:af:d7:f0:fb:b3:93:0e:7f:5e:fc:73:df:b3:72:36:17:ae:
bb:b0:01:aa:50:0a:75:d8:db:c5:70:ed:73:32:6f:1a:4a:0c:
47:1f:66:aa:f0:1f:b2:b2:66:ba:c8:61:6f:60:a2:8f:59:0d:
01:82:a4:c2:ef:51:5d:6b:65:77:87:6b:26:c8:18:32:68:0f:
c2:e8:dc:2a:e3:1a:7f:57:d0:d6:bf:ed:81:d8:f3:13:c6:63:
2d:f8:87:27:e6:8e:3d:a5:3c:e7:bc:d2:16:aa:90:43:a8:3d:
23:40:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:34 2025 by rpki-client