Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier: W4OLq45VfqgsWS6/V1Siv/aUH6tcg7yuhj44RwCEnh4=
Subject key identifier: 42:5B:DF:8A:82:7B:A1:F1:30:42:B6:2C:F6:FB:70:51:84:FA:A1:52
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial: 019A4EF5A93D3F73B932C6FEE7B1DC6E870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number: 0D5F
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: qVlaL3xweJqVY67tDWgEXujgUEWHuKCDDflrsGwJQqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a9:3d:3f:73:b9:32:c6:fe:e7:b1:dc:6e:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=425bdf8a827ba1f13042b62cf6fb705184faa152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:de:9a:0d:0b:9c:30:f0:51:a5:a4:39:57:
9e:8c:b6:03:c6:29:a6:91:df:30:5d:ee:f4:d2:9f:
dc:c6:82:dd:25:19:36:3c:fd:81:ab:3e:30:18:6b:
59:38:ee:c4:2f:03:c6:ba:46:09:1a:1e:60:6c:52:
84:63:8a:6f:4d:37:79:e5:b6:6c:19:61:ff:97:ae:
09:9a:6a:18:b0:6d:a6:b9:5c:fc:b3:3f:e3:fe:6c:
19:98:8e:9b:cc:3b:a0:0b:36:84:8b:11:49:20:98:
d9:c5:5e:b2:ea:99:9a:bc:a8:7d:98:28:db:ea:1b:
d8:36:fe:c1:8c:24:bc:69:08:79:b6:72:fb:16:33:
da:9d:ea:a7:fb:26:9d:e4:64:c3:15:b6:fe:1f:f4:
ba:ef:b4:e5:18:95:3a:97:bd:cf:24:cb:9d:0d:d0:
46:db:c3:0c:94:db:11:ab:5d:27:e4:30:97:0c:0f:
61:77:e8:42:31:c4:2d:39:47:c5:a7:6f:19:26:ea:
13:59:e9:ce:3f:3f:8e:5e:9e:96:eb:9f:47:52:a4:
7a:ff:e9:69:9b:fc:6a:4b:3d:1d:5f:17:49:dc:b4:
c7:56:41:65:f8:74:5e:6c:d8:68:56:e9:8b:70:22:
6a:98:af:0e:01:a9:8b:d3:0a:75:2c:77:29:5f:7a:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:DF:8A:82:7B:A1:F1:30:42:B6:2C:F6:FB:70:51:84:FA:A1:52
X509v3 Authority Key Identifier:
keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6d:d0:22:47:d0:d2:f4:8b:e1:5e:47:e5:63:24:e1:ed:b5:
12:d1:ff:cc:d8:cd:cb:76:90:e2:60:5d:d4:94:42:35:a9:32:
a5:2d:bf:c5:17:db:3c:7d:02:b2:77:e7:b0:4c:35:98:79:ed:
1c:4c:a7:4f:9e:65:fc:77:11:0b:b9:db:a3:13:2a:82:98:97:
e6:87:7b:25:27:36:f3:df:dc:64:42:6e:7f:26:03:c9:e2:69:
2b:5b:dd:76:22:e4:88:f4:ae:98:3c:d9:44:ab:73:fd:70:33:
1e:2d:10:55:70:d4:13:5c:78:e2:fc:3f:56:2d:32:ca:28:d0:
f0:01:8e:59:cc:46:e2:ca:f1:c1:b3:fe:18:d2:09:8e:79:16:
e6:98:95:54:8b:cb:b5:a9:f9:60:05:bc:54:5e:21:62:0a:95:
dd:c1:00:18:be:53:4d:2f:2b:31:1f:d3:da:cc:41:12:f5:45:
58:9c:9f:e8:f3:2f:96:37:db:20:ff:3f:1d:ff:af:0a:3d:c0:
c5:3d:27:7a:cd:9f:da:ef:50:cf:b1:2e:19:b7:9b:dd:65:b5:
45:39:c9:b0:87:ec:a3:2d:86:30:42:5e:07:0f:6a:a8:01:5c:
90:28:1b:86:33:d7:3c:72:71:a9:b1:fe:b3:28:fc:2d:70:6e:
75:9a:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client