Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier: kIj+EwhMcZ0Dv8HuyBl2GCGnymaTyKLV60vKnqqIzBA=
Subject key identifier: 2A:1A:58:57:AA:4C:40:72:A4:B2:9C:13:B7:1E:A0:A9:13:29:AB:0C
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial: 01968736998ED0A898F02B853488D0E1651D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number: 0B6A
Signing time: Wed 30 Apr 2025 15:00:24 +0000
Manifest this update: Wed 30 Apr 2025 15:00:24 +0000
Manifest next update: Thu 01 May 2025 15:00:24 +0000
Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: EHcwI/sH2RXEg3OB1cjLh+Rm8FwBL1Num59ZcuGR3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:99:8e:d0:a8:98:f0:2b:85:34:88:d0:e1:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Validity
Not Before: Apr 30 15:00:24 2025 GMT
Not After : May 1 15:00:24 2025 GMT
Subject: CN=2a1a5857aa4c4072a4b29c13b71ea0a91329ab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:37:8e:95:33:13:69:48:ed:3b:00:50:dd:
d0:2c:f5:74:84:64:3d:6e:8f:a9:b8:29:fa:3d:e2:
8f:78:9c:04:67:72:8f:d6:5c:07:42:c2:30:d7:a0:
63:40:02:1f:d4:6a:d6:f1:9b:21:ab:4a:54:69:f2:
08:c6:79:fb:41:3f:6b:07:61:5c:20:39:89:2f:62:
22:b8:04:02:79:95:c7:81:55:9b:5e:10:20:d2:bd:
b4:e1:72:1f:2a:ef:79:98:48:a1:4c:b7:46:c6:c8:
19:1b:41:9a:ac:66:c8:14:72:d4:6a:59:b9:9c:9d:
6f:eb:75:9e:b8:d2:05:07:07:ff:5e:8e:b0:81:9f:
c3:f6:34:70:9f:47:c8:d4:f1:36:a0:c1:bc:42:7e:
81:9d:b8:08:90:0c:8c:75:6a:39:74:51:2e:c7:8e:
67:20:8f:1b:14:bd:30:60:69:ba:65:46:87:ff:95:
49:38:c1:95:29:84:ee:c6:1f:af:95:32:4e:93:2c:
4b:56:bc:f9:96:01:b0:63:68:1a:35:ef:16:9d:88:
f1:90:ae:df:48:1e:72:57:be:a6:6d:81:61:95:dc:
63:46:dd:6d:c7:3e:da:f2:e5:76:76:13:74:0d:f0:
51:af:39:0c:fb:99:5d:3c:79:3e:e2:36:f9:31:07:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:58:57:AA:4C:40:72:A4:B2:9C:13:B7:1E:A0:A9:13:29:AB:0C
X509v3 Authority Key Identifier:
keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1f:c5:48:d5:0b:19:db:c9:ed:6f:a4:67:ac:cd:53:dd:6f:
54:15:1a:1d:0e:22:bb:b4:7b:89:73:84:88:51:bf:9b:6d:cb:
70:41:65:5c:22:c4:72:19:31:97:11:05:ac:8d:ce:14:2c:44:
3b:ef:4e:90:a2:84:ab:12:a3:00:9e:62:0b:59:78:d9:a0:1b:
60:fe:4b:4b:69:6d:41:5b:0c:41:da:6a:87:f6:a1:a7:4f:3d:
c2:46:c1:d8:60:8d:d6:c1:42:33:88:9c:ea:af:87:50:9c:d1:
e8:fb:c5:95:a1:e5:45:be:a3:9b:10:78:f8:6b:66:c2:81:c3:
86:1f:36:0f:f1:5d:17:6d:d3:42:17:73:21:92:1c:0e:90:fc:
a7:c7:31:b0:f8:1d:b0:e7:94:7a:f2:d9:14:ea:90:a5:62:92:
60:d6:f3:05:5d:c2:9d:b9:3d:84:eb:9f:32:38:67:5e:95:fe:
e3:b9:7a:d4:87:ab:4d:18:54:f4:d7:d9:7e:bc:2d:f5:d2:6d:
cb:fd:1c:cb:c4:83:80:10:3d:46:19:0c:2f:07:51:c7:4a:f2:
91:f4:c2:57:31:94:39:50:3f:68:90:00:2c:46:90:f1:69:b9:
83:2d:23:cd:12:da:96:6e:84:1d:27:b7:62:76:78:f3:ae:9a:
f9:d6:1c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNpmO0KiY8CuFNIjQ4WUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTA5NzZhZTI1Yzc4OGZhYmZjMmE4NTM3ODFkNWRmZjBj
YTU2MGYwHhcNMjUwNDMwMTUwMDI0WhcNMjUwNTAxMTUwMDI0WjAzMTEwLwYDVQQD
EygyYTFhNTg1N2FhNGM0MDcyYTRiMjljMTNiNzFlYTBhOTEzMjlhYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf83jpUzE2lI7TsAUN3QLPV0hGQ9
bo+puCn6PeKPeJwEZ3KP1lwHQsIw16BjQAIf1GrW8Zshq0pUafIIxnn7QT9rB2Fc
IDmJL2IiuAQCeZXHgVWbXhAg0r204XIfKu95mEihTLdGxsgZG0GarGbIFHLUalm5
nJ1v63WeuNIFBwf/Xo6wgZ/D9jRwn0fI1PE2oMG8Qn6BnbgIkAyMdWo5dFEux45n
II8bFL0wYGm6ZUaH/5VJOMGVKYTuxh+vlTJOkyxLVrz5lgGwY2gaNe8WnYjxkK7f
SB5yV76mbYFhldxjRt1txz7a8uV2dhN0DfBRrzkM+5ldPHk+4jb5MQdRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoaWFeqTEBypLKcE7ceoKkTKasMMB8GA1UdIwQY
MBaAFO+gl2riXHiPq/wqhTeB1d/wylYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMt
ZDE2NTQ5NzVjM2JjLzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMtZDE2NTQ5NzVjM2Jj
LzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh/FSNUL
GdvJ7W+kZ6zNU91vVBUaHQ4iu7R7iXOEiFG/m23LcEFlXCLEchkxlxEFrI3OFCxE
O+9OkKKEqxKjAJ5iC1l42aAbYP5LS2ltQVsMQdpqh/ahp089wkbB2GCN1sFCM4ic
6q+HUJzR6PvFlaHlRb6jmxB4+GtmwoHDhh82D/FdF23TQhdzIZIcDpD8p8cxsPgd
sOeUevLZFOqQpWKSYNbzBV3Cnbk9hOufMjhnXpX+47l61IerTRhU9NfZfrwt9dJt
y/0cy8SDgBA9RhkMLwdRx0rykfTCVzGUOVA/aJAALEaQ8Wm5gy0jzRLalm6EHSe3
YnZ4866a+dYcRA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:52 2025 by rpki-client