
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: 8xkIteiCajM2HjCzwCey0XBlZOduuyvHtDpOIh0BruU=
Subject key identifier: 88:F0:C2:51:10:17:98:06:88:84:43:DA:B1:41:5B:3C:F6:F6:A8:EE
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 01988CC5CC528D88286C116494E1751FD8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0F31
Signing time: Sat 09 Aug 2025 03:00:29 +0000
Manifest this update: Sat 09 Aug 2025 03:00:29 +0000
Manifest next update: Sun 10 Aug 2025 03:00:29 +0000
Files and hashes: 1: 2TMm2LCfr57u_4J2_1CZ5UV6wg4.roa (hash: 9V/G4F6RhZ4wdXFiY4sW5vKF1AdhLHo9sUbdwSftjVY=)
2: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: zQrCMkjZn/kzAj4mW0hdXxVoPiRaFReeHRfoKocVPyk=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:c5:cc:52:8d:88:28:6c:11:64:94:e1:75:1f:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Aug 9 03:00:29 2025 GMT
Not After : Aug 10 03:00:29 2025 GMT
Subject: CN=88f0c25110179806888443dab1415b3cf6f6a8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:be:ea:6f:9c:0b:4c:df:28:95:76:b4:49:
37:0e:41:8b:04:c3:d5:7f:a7:0f:97:75:fc:cc:40:
d9:af:8b:27:52:19:45:11:c7:f1:02:22:67:39:03:
f1:64:ac:75:8b:77:c7:48:65:b8:01:cb:74:db:1b:
78:39:e0:7c:fa:9a:d4:aa:91:14:6b:ad:c5:e8:f7:
d6:c7:9f:44:bb:c1:14:fa:22:92:c1:34:39:12:3a:
a7:5f:cf:07:73:b3:67:62:ba:62:fd:ee:9d:d1:44:
d7:57:d6:d7:cd:56:cd:1c:58:5f:fd:cb:db:09:66:
c2:a6:2c:af:47:c9:a7:b1:21:eb:78:a2:fd:48:55:
82:46:06:2a:cc:ee:13:39:a8:1f:9c:e1:64:ee:8c:
ae:ff:b6:1b:cb:7a:cd:08:51:6a:9e:31:8a:8b:3f:
45:73:9b:6f:0a:cd:f1:9c:fb:37:5c:e6:8e:92:a2:
a9:0e:66:7f:32:0c:25:a8:46:02:14:da:7c:7b:bb:
82:6f:00:40:d3:79:ee:90:fb:de:76:ce:e1:fc:f8:
17:2a:db:fb:25:29:54:25:8c:12:29:56:b0:6c:1d:
92:e9:6d:3c:34:67:85:9e:9b:73:97:2d:05:b6:ae:
10:41:dd:13:8f:91:9d:28:16:20:79:48:87:52:4e:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F0:C2:51:10:17:98:06:88:84:43:DA:B1:41:5B:3C:F6:F6:A8:EE
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:49:2d:7d:cc:80:0c:0b:29:cc:ab:ea:cf:a4:1d:a5:95:
02:55:e0:f6:39:72:ad:2a:78:89:f8:34:e1:e1:77:24:5e:11:
a3:da:8f:06:9d:8d:7f:8d:07:4e:ef:a8:69:99:70:71:87:fc:
3c:ad:d5:64:f4:c1:f1:44:bc:24:f6:70:1a:0a:27:98:71:42:
25:cf:79:e9:68:d4:eb:0a:d3:12:9e:94:ed:30:60:2b:dd:86:
77:6a:d3:d5:d5:b3:35:c5:ca:fa:a9:df:41:58:f4:b5:c0:83:
41:a1:00:06:1e:2a:a3:9e:57:8e:9a:30:02:f0:2c:0d:29:13:
9a:0d:a3:74:26:ff:d8:bc:e6:87:e5:35:85:6e:cd:04:d5:98:
4a:0b:ba:5f:8e:3d:11:27:c8:f1:fc:db:b5:88:6a:23:6b:9a:
be:38:58:9b:4d:7f:23:6a:48:5e:7c:cd:df:ef:1f:0e:f5:a6:
4b:23:9e:cd:fe:44:f6:3d:71:14:53:63:bd:0d:74:fb:4c:79:
91:ed:8c:12:e9:66:bc:d2:47:2b:e8:da:e9:26:7b:24:67:92:
a0:d3:7d:6b:6d:6c:fb:60:82:da:68:0a:72:6d:ea:be:ca:e2:
42:9f:f5:cb:8a:7c:7c:2f:cf:ff:2d:36:4b:15:cb:8c:f4:64:
1c:02:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:48 2025 by rpki-client