Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: YwN8+D4t1hocXPCMhg5MGjhCCnsU1b56ZgLnVkfqVSQ=
Subject key identifier: AC:20:42:FC:FD:28:DE:F3:77:01:C7:42:4A:86:C0:7D:02:52:F5:33
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 01977E682D5887A9E21238BE9D70B61C4F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0EA5
Signing time: Tue 17 Jun 2025 15:00:45 +0000
Manifest this update: Tue 17 Jun 2025 15:00:45 +0000
Manifest next update: Wed 18 Jun 2025 15:00:45 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: gt/ey+BT2Ooe5haPZytkdIvK4TJIWbe6xLsXZ0rNl3A=)
2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:2d:58:87:a9:e2:12:38:be:9d:70:b6:1c:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jun 17 15:00:45 2025 GMT
Not After : Jun 18 15:00:45 2025 GMT
Subject: CN=ac2042fcfd28def37701c7424a86c07d0252f533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:16:cb:41:02:05:c1:56:cc:1e:74:71:be:
1d:de:9c:10:17:3d:dd:21:66:bf:9b:aa:54:8a:8d:
d6:2a:5a:12:1e:a7:29:bf:2b:88:45:ff:bb:57:e8:
c9:b1:fc:32:3c:d5:a4:d4:44:4f:e7:80:6c:42:a1:
94:bf:02:33:aa:bd:a9:13:71:d7:c7:f3:33:c3:c4:
84:87:2a:15:6e:c3:b4:a3:f3:52:80:f4:22:6d:2c:
04:1d:45:d3:5c:a5:c2:6d:da:7d:b0:f0:3e:73:1a:
35:8e:3d:36:64:88:d3:15:b7:0c:c9:02:45:ba:1f:
08:c7:6c:b6:26:a5:21:13:b5:4f:a9:74:39:0b:ab:
c8:9d:df:74:c8:6b:21:2e:f8:f1:87:c4:52:d5:47:
e3:52:28:54:58:06:66:26:d0:77:40:0d:5f:49:2c:
26:21:ff:17:df:0f:84:ff:aa:0d:cb:0f:b1:b5:8a:
d9:1f:0f:6b:22:02:d5:17:85:27:70:d5:cb:bf:94:
93:2a:80:31:c2:87:e3:55:02:cf:c7:fd:e6:44:9c:
f5:bb:d9:bc:2f:97:5a:fe:66:3d:e3:98:01:85:48:
69:f1:80:7f:8a:c4:22:99:74:03:b9:53:23:7e:8d:
af:20:10:81:e6:fb:83:cd:22:0b:04:9d:a8:a5:90:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:20:42:FC:FD:28:DE:F3:77:01:C7:42:4A:86:C0:7D:02:52:F5:33
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b7:0e:61:93:f2:e5:3a:7c:82:23:17:5c:5f:b9:9a:84:20:
d4:d4:e8:06:d0:25:4a:6a:69:f2:a5:20:d1:45:c5:0f:ab:7b:
83:35:84:a1:34:c6:6b:92:1c:1b:5b:fd:f3:71:80:59:b6:ea:
73:ce:92:f0:7e:77:22:d1:bf:ca:51:6e:70:f5:28:48:fe:d5:
ff:73:b5:6a:2b:f8:67:e8:ad:58:e5:cd:d7:30:f1:4b:91:68:
a2:2c:b7:e9:dd:46:19:61:5a:87:be:7f:f2:79:e6:21:9e:be:
4b:29:97:0c:6b:8a:51:26:8b:1a:80:e5:da:20:0b:72:d5:9c:
ba:f5:f2:3a:29:7c:1d:4d:f0:00:48:81:2c:72:cb:7c:d0:d3:
ec:bf:d7:8d:3d:db:de:73:95:a0:c7:69:77:d8:78:85:43:e4:
2e:ee:97:86:22:25:93:6c:e4:80:6a:8d:da:3b:89:3b:c5:e4:
d1:14:20:19:fa:46:29:79:e7:42:42:4c:ea:a9:0a:a5:a7:c4:
89:a0:50:35:cb:9d:fd:f1:5f:46:5d:0b:b5:d8:3c:43:21:cc:
b8:b4:9f:0c:50:c1:25:4b:d8:3f:8d:c0:15:09:d0:bb:24:dd:
ff:e5:b9:6c:ec:de:41:f8:76:25:f1:1e:22:98:10:c1:64:e6:
37:a8:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:43:45 2025 by rpki-client