Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: ZsYbQ/4RKGTVqfUELFU4mDMqm93swtXWBQamCutU+oY=
Subject key identifier: 58:E1:90:30:C8:01:1B:E9:7A:6D:33:D7:67:A7:4F:B0:E0:69:E3:96
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019A4F2B28922F51B1C72FC21410AD700375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 101B
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: MuiNbHw13NvS1i/n8j22D96RHP0pNJ7zyJdqe4AMC80=)
2: gJcVJ0djrH5rQDUfK1fCsLicbs0.roa (hash: FiBwswjBHp729mKlojR2ulY+J6meIBspX0VFQpsAgtk=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:28:92:2f:51:b1:c7:2f:c2:14:10:ad:70:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=58e19030c8011be97a6d33d767a74fb0e069e396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:1d:ac:31:02:16:54:e7:6c:3b:03:18:9b:
8c:f9:f7:01:37:5b:2b:98:fa:a3:fa:ed:75:81:03:
d3:f4:c8:c9:7c:15:58:eb:cf:d3:d2:00:be:75:06:
d8:c9:54:99:02:c9:f6:27:ad:bb:33:3e:a4:8f:87:
4f:ed:b9:87:b2:30:1b:30:35:14:15:0d:27:e7:9c:
04:fd:ee:77:07:76:fa:4e:5e:d2:a6:42:26:21:f4:
74:c0:8d:1d:a6:4b:ca:6d:05:57:c6:da:07:6d:b4:
70:fe:3d:53:3e:4a:22:73:58:61:60:5e:18:b5:41:
3c:d3:59:47:31:67:92:a7:2b:d1:a5:77:a4:9e:16:
bf:0c:a6:f0:a9:dc:de:a1:2e:f7:fe:7b:65:a8:ec:
38:37:06:68:29:4e:a2:5d:4d:31:36:cb:51:c8:80:
fc:e3:11:1e:83:f8:ff:89:e6:d2:a1:fc:0b:10:7c:
11:74:5c:e2:e6:f5:df:b7:14:1c:2f:76:6e:b6:0c:
1b:64:c8:06:6d:3b:86:d4:29:99:c9:4d:3d:04:8e:
9b:4b:b9:af:d0:59:c2:9f:86:fc:7c:53:73:fa:55:
81:58:ba:f7:0f:07:b9:0c:60:da:49:30:62:3b:5b:
37:18:a7:38:f1:44:a4:e5:3c:41:7a:b4:d8:96:11:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E1:90:30:C8:01:1B:E9:7A:6D:33:D7:67:A7:4F:B0:E0:69:E3:96
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:0e:c9:eb:02:73:a3:a0:1c:bd:7f:bb:09:4d:c7:7b:e8:
32:1b:4a:fd:39:43:b9:56:bd:52:f2:81:db:c5:40:bc:a6:d6:
60:d6:33:5f:cd:76:2c:b2:6a:a8:7f:0f:b7:46:7a:06:4d:50:
d3:7b:1f:0a:17:e0:83:72:73:9c:8f:7c:b6:15:79:7f:95:8c:
ad:da:fc:84:be:c2:61:49:e9:25:cb:a8:d2:35:50:c7:5f:88:
1b:9c:61:7e:ef:9b:7e:7e:de:7a:2b:dd:07:c4:d6:eb:f7:3a:
12:6e:e7:25:50:62:f8:d4:33:d8:7e:76:e6:f4:f1:00:8f:eb:
01:fb:32:cb:b0:32:85:cb:3a:ee:11:de:17:16:eb:19:90:9b:
6c:14:5c:ea:8f:73:3e:66:7e:5d:32:be:24:a3:9f:f3:b8:04:
d6:e1:bb:4b:37:e7:74:be:fb:42:31:16:d6:5e:16:eb:1e:4c:
61:76:b7:85:97:72:f9:29:eb:ac:a9:ac:ae:ab:f2:da:3b:c3:
37:53:5f:62:2a:bf:bd:11:4d:40:a1:99:9c:af:83:b5:3e:70:
bb:79:c2:84:9a:86:ef:c5:ed:74:96:27:ee:11:68:41:f4:bc:
c8:61:9b:4b:b5:81:fd:5c:d5:4d:66:4e:8f:8b:b1:b2:f6:53:
2d:2a:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:25 2025 by rpki-client