Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft (raw, json)
Hash identifier: YfapBgkqQMsSfOmrvcqYbSKX9A8TwMTaG4rTnQtFpL4=
Subject key identifier: 28:D1:70:D1:8B:06:CA:26:B7:29:40:B7:D1:00:7C:23:00:60:BD:AB
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 019671F8396AD0A30D4B75D4F21B08FB48EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
Manifest number: 0418
Signing time: Sat 26 Apr 2025 12:00:15 +0000
Manifest this update: Sat 26 Apr 2025 12:00:15 +0000
Manifest next update: Sun 27 Apr 2025 12:00:15 +0000
Files and hashes: 1: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl (hash: MtXDeKIkh01054S3sHzz5sPVz+OrMl2hAVJpQHgbZYc=)
2: RzCT0T6lenhrM__LsTG4BuTaY1c.roa (hash: tV5Y+kdqm/i7NbITAbNfFa3giabHc3nUwFdTcDJkx8o=)
3: nEbJ8kj8EsOb0Pl1MdpImgbdyyw.roa (hash: N5YOsZE+UbwNvaVhf6SZUKY1g4DzBzMgeef/sv8kcFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:39:6a:d0:a3:0d:4b:75:d4:f2:1b:08:fb:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Apr 26 12:00:15 2025 GMT
Not After : Apr 27 12:00:15 2025 GMT
Subject: CN=28d170d18b06ca26b72940b7d1007c230060bdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:d0:b6:2e:34:cd:8a:ed:8c:36:5e:4d:89:
75:e2:8d:a6:c4:5a:d6:e6:ef:09:44:61:9a:d2:e7:
e0:97:c2:69:18:da:1a:ee:40:5f:7f:42:4c:ec:26:
10:8f:47:53:f5:c1:47:2d:f1:56:99:d2:11:5a:0d:
1e:d6:55:5a:da:33:9e:de:a2:a9:b4:46:dc:32:23:
23:1f:83:37:a2:00:f2:3e:55:fc:ff:56:52:df:54:
30:ea:c9:fc:ff:38:01:47:06:7f:18:ad:a2:f3:3d:
52:5e:5c:6e:84:52:2e:f6:93:c2:c0:3d:86:8a:31:
4d:2c:9f:05:32:b9:07:13:41:74:8d:6f:2d:af:84:
ac:e0:ea:e1:6b:c8:39:7a:67:48:33:07:24:c8:86:
93:31:8e:2c:ef:e1:09:2d:a1:90:c5:d7:2e:51:53:
c7:5f:23:03:9d:f3:cc:65:a5:3e:af:27:d2:13:d6:
df:f8:82:2b:b6:a2:6b:b7:16:aa:ae:af:8c:5e:d7:
7a:91:fc:13:af:aa:31:93:40:68:0d:11:67:9f:3a:
78:5f:12:d1:66:40:e9:84:05:1c:92:7f:6b:1f:10:
22:62:52:bf:01:ad:e6:e9:b9:12:a4:89:cd:a7:51:
9d:88:5f:c1:dd:a7:c2:7b:1a:f0:37:5b:3a:06:0d:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:70:D1:8B:06:CA:26:B7:29:40:B7:D1:00:7C:23:00:60:BD:AB
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:32:5c:51:4e:bd:6d:18:36:36:ea:a8:fe:75:7f:e2:86:
c5:a4:cf:fa:20:25:a7:d8:ea:a9:1f:f5:f8:11:f8:0d:71:02:
ed:17:e9:78:c3:9b:f1:8c:83:0c:c4:da:48:a6:f9:31:9c:d2:
06:6a:a7:eb:69:bf:54:67:ca:98:b2:1d:82:6c:41:45:65:89:
47:c6:cc:22:a0:bd:c8:46:ec:56:19:e1:e1:b1:7e:d6:4a:8e:
72:75:77:0f:54:18:40:d1:0f:af:9b:03:72:45:f4:52:ba:04:
9b:e8:19:62:0c:de:0f:56:4c:9a:d5:78:26:19:ec:ed:cd:47:
83:35:8a:c4:74:5c:9a:2e:10:f6:21:40:1d:6b:4e:fe:d2:56:
78:b8:02:02:aa:3b:6f:af:d4:4d:15:f6:41:77:10:53:e7:d4:
ec:b4:aa:59:7e:34:92:30:b8:47:0f:9a:54:40:58:2a:5b:36:
d1:0f:3a:98:7a:14:25:54:57:5f:71:33:1a:6f:41:21:f6:43:
20:e3:ce:1c:67:9a:a3:79:c2:c2:7a:91:0d:87:01:73:36:f6:
ea:b9:5b:b8:85:9c:64:d4:65:ed:7b:87:00:36:1d:1e:ef:19:
fa:16:4a:69:f4:15:0d:c1:4a:0b:c1:d2:f7:f6:e8:4f:03:26:
46:96:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:29 2025 by rpki-client