Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: zIJ8wpMPbfaigW52r3YEGaHygQpz7b0sIWA2Tksypug=
Subject key identifier: A5:4E:50:47:28:A6:24:57:23:3F:BF:F6:82:74:24:83:5E:F8:20:EF
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 01976997D8F7D9E0B4695B6F9651A89CE0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 0281
Signing time: Fri 13 Jun 2025 14:00:48 +0000
Manifest this update: Fri 13 Jun 2025 14:00:48 +0000
Manifest next update: Sat 14 Jun 2025 14:00:48 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: 7yEWXqQ4O7Pklm/5HL9tVCQMs4YMzC0g+z3ES4J8Bpk=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d8:f7:d9:e0:b4:69:5b:6f:96:51:a8:9c:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Jun 13 14:00:48 2025 GMT
Not After : Jun 14 14:00:48 2025 GMT
Subject: CN=a54e504728a62457233fbff6827424835ef820ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:28:ea:19:29:93:6f:ed:ea:8d:f9:24:41:
8b:79:e4:b4:2b:9d:18:38:7b:f9:78:0f:9d:d3:db:
7a:97:6b:5d:54:0c:e2:50:ed:45:23:15:fa:f5:5a:
74:64:c4:ad:a5:4a:bc:99:57:5e:b0:1c:01:0b:6e:
49:98:3c:ad:00:da:ca:36:89:5f:9a:bd:c0:ab:7e:
bd:e9:e8:03:63:85:e1:9c:83:c6:c8:e6:fb:9d:93:
30:9c:d1:1e:12:27:42:9c:56:8e:11:f6:42:b8:64:
08:2d:50:8f:41:dd:cf:b5:bb:c3:0a:73:37:93:f1:
5d:c4:5d:50:ed:c7:d4:35:b5:82:ce:e1:b1:ae:e4:
32:5f:00:24:1c:3e:fe:bb:bf:48:da:80:6f:d3:5d:
46:3e:93:ce:34:dc:74:03:c6:f3:72:f7:9e:b7:2a:
73:70:49:ed:cc:15:30:fa:6a:b9:65:6e:72:c5:3b:
84:76:4f:02:88:f9:01:13:d4:86:9f:8f:1b:81:6f:
78:c1:ec:15:cb:41:59:2c:51:70:1d:0b:d7:73:11:
da:77:62:37:2c:3e:d0:ec:cb:5b:58:26:03:81:c1:
31:72:04:e9:85:de:f8:e9:8f:7e:87:34:c5:46:94:
e1:d7:53:fb:87:9a:7f:45:f2:01:19:18:a8:f8:f5:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4E:50:47:28:A6:24:57:23:3F:BF:F6:82:74:24:83:5E:F8:20:EF
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:cf:33:9d:12:41:f5:35:6e:1e:19:cf:59:09:50:e1:53:
af:e4:d7:30:15:dc:d2:f7:29:e7:0c:66:07:85:1d:08:d9:10:
bc:05:60:b9:e7:05:5f:48:12:ec:83:8d:c7:ec:1b:43:f2:b1:
38:0a:c7:c9:5d:b5:a9:ae:c4:15:ae:9b:7c:12:cc:7c:27:08:
3a:ba:bb:e7:d7:dd:c7:c0:db:6b:11:44:20:55:d7:75:8c:ba:
93:fc:60:d0:5f:5a:3b:c8:89:b8:80:de:69:1a:fb:98:fd:f7:
93:da:29:89:59:8d:c4:10:1c:ab:3c:b7:22:29:69:aa:a5:b0:
37:db:a8:b3:1a:51:18:6e:68:9f:dc:72:9b:cb:d3:a7:4b:98:
5c:18:5a:08:76:74:29:17:b2:fe:d6:88:02:21:ea:1b:4d:00:
0d:8e:ad:b7:d7:97:18:5b:69:92:8e:65:96:0a:3f:73:6f:ad:
f7:3f:72:ce:cd:30:47:62:1c:a2:89:d9:0a:7a:22:cf:dd:90:
d8:69:20:b7:f6:76:a7:bb:ce:93:d3:e6:99:47:3e:96:74:73:
73:e8:19:24:bb:5c:04:60:e0:aa:86:95:f8:c7:41:fe:23:04:
5f:db:30:26:0e:6d:53:61:8d:9e:e4:55:80:81:93:76:92:fe:
2d:b8:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:43 2025 by rpki-client