Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: RkvZfm31Q/6lQ5Y6vjI0CfPJNCO4D1sUtba0nFJdveU=
Subject key identifier: 9F:7D:22:FB:47:54:1F:10:9F:BB:D9:65:A3:8E:99:E9:35:26:CE:38
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 0198819DE5E73586ED6A9B2287EE70C5C5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 0312
Signing time: Wed 06 Aug 2025 23:01:05 +0000
Manifest this update: Wed 06 Aug 2025 23:01:05 +0000
Manifest next update: Thu 07 Aug 2025 23:01:05 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: bu5HFYdzAiScV4Fv+Gh1n8MsGBMqdQedcXtb6PwX+g8=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:e5:e7:35:86:ed:6a:9b:22:87:ee:70:c5:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Aug 6 23:01:05 2025 GMT
Not After : Aug 7 23:01:05 2025 GMT
Subject: CN=9f7d22fb47541f109fbbd965a38e99e93526ce38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:53:bf:c0:ba:b5:e5:1b:58:be:b8:68:ce:
8b:da:36:24:b1:d6:3d:fc:83:79:66:27:e6:66:49:
c8:01:c7:68:85:c3:9b:fa:de:05:e7:c7:28:a8:af:
90:dd:40:60:fc:8a:9a:42:13:86:e5:01:32:c0:05:
b4:de:6e:89:40:5a:50:17:a7:76:1f:39:4c:99:56:
8b:a4:10:e4:8a:c7:a3:1a:a1:1d:49:b9:f3:91:f9:
2a:40:9b:9a:e0:d7:82:94:dd:91:b7:f2:ee:cf:c5:
45:3a:87:59:88:75:d0:46:17:1c:75:a0:49:7d:ef:
e9:22:e1:aa:02:58:84:af:26:ce:8a:38:69:33:ab:
a5:a9:19:16:b0:02:b6:97:df:58:52:82:45:34:16:
69:1c:48:34:46:6f:b1:30:d2:32:c1:23:73:64:42:
55:69:9e:52:c6:16:cc:cb:83:ef:84:b3:95:0c:cc:
30:21:86:30:0a:23:64:26:68:a5:5b:9e:5a:90:29:
a5:9a:53:2e:fa:9e:3b:64:fc:75:80:bd:03:9d:75:
98:2d:03:97:72:f9:d0:c8:34:91:62:5a:2b:1e:d2:
8f:07:a1:c0:da:a7:d1:cb:63:b5:40:99:58:51:ef:
93:57:39:c3:a4:e0:fd:b3:a5:9a:99:0c:96:d7:da:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:22:FB:47:54:1F:10:9F:BB:D9:65:A3:8E:99:E9:35:26:CE:38
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:f7:29:0c:90:3f:02:29:3b:6d:69:3e:69:35:8b:f6:fe:
31:0d:e8:44:b8:3f:67:08:52:09:f3:c4:2b:09:5d:84:5d:48:
80:31:90:85:35:ec:06:5f:b1:b4:03:04:57:65:45:2c:a3:49:
f0:54:2c:af:94:a9:5a:4c:7b:31:64:ed:85:78:ca:bb:8d:b2:
78:76:3a:3f:77:e9:75:39:c8:a0:bb:2f:4f:92:67:2f:a6:7b:
7a:f9:52:92:c4:ff:2a:17:cc:93:bd:84:4f:be:ee:35:3a:23:
18:9c:43:fa:c2:e5:00:be:a7:3e:96:f7:a5:8f:06:e4:fc:46:
91:35:23:0b:90:5f:7b:80:bc:ea:9d:bf:9b:c7:74:80:b4:a7:
2d:5e:d6:6d:77:1b:72:8a:82:22:87:dd:a4:52:e5:ee:c3:85:
e6:46:c8:c1:a0:be:63:0f:92:c8:e9:e6:2e:90:f9:8e:08:45:
04:fd:8e:60:8b:59:59:45:bf:45:ee:52:bb:56:ed:93:2b:b3:
94:3d:49:35:ea:91:76:51:b2:d4:04:fe:c7:c6:2c:ac:5e:e1:
68:ce:70:9c:06:7a:6f:6e:95:90:5d:6d:55:58:40:8f:72:a1:
01:5b:4e:99:43:64:68:b7:80:0d:c2:81:10:f4:ba:02:26:69:
f5:4a:72:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBneXnNYbtapsih+5wxcXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4
MTllNDQwHhcNMjUwODA2MjMwMTA1WhcNMjUwODA3MjMwMTA1WjAzMTEwLwYDVQQD
Eyg5ZjdkMjJmYjQ3NTQxZjEwOWZiYmQ5NjVhMzhlOTllOTM1MjZjZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTJTv8C6teUbWL64aM6L2jYksdY9
/IN5ZifmZknIAcdohcOb+t4F58coqK+Q3UBg/IqaQhOG5QEywAW03m6JQFpQF6d2
HzlMmVaLpBDkisejGqEdSbnzkfkqQJua4NeClN2Rt/Luz8VFOodZiHXQRhccdaBJ
fe/pIuGqAliErybOijhpM6ulqRkWsAK2l99YUoJFNBZpHEg0Rm+xMNIywSNzZEJV
aZ5SxhbMy4PvhLOVDMwwIYYwCiNkJmilW55akCmlmlMu+p47ZPx1gL0DnXWYLQOX
cvnQyDSRYlorHtKPB6HA2qfRy2O1QJlYUe+TVznDpOD9s6WamQyW19otxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ99IvtHVB8Qn7vZZaOOmek1Js44MB8GA1UdIwQY
MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt
ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0
LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1n3KQyQ
PwIpO21pPmk1i/b+MQ3oRLg/ZwhSCfPEKwldhF1IgDGQhTXsBl+xtAMEV2VFLKNJ
8FQsr5SpWkx7MWTthXjKu42yeHY6P3fpdTnIoLsvT5JnL6Z7evlSksT/KhfMk72E
T77uNTojGJxD+sLlAL6nPpb3pY8G5PxGkTUjC5Bfe4C86p2/m8d0gLSnLV7WbXcb
coqCIofdpFLl7sOF5kbIwaC+Yw+SyOnmLpD5jghFBP2OYItZWUW/Re5Su1btkyuz
lD1JNeqRdlGy1AT+x8YsrF7haM5wnAZ6b26VkF1tVVhAj3KhAVtOmUNkaLeADcKB
EPS6AiZp9Upy1A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:11 2025 by rpki-client