Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: ZB+Gai7yj8bxXQevmtqP+9BP/c8iXIvZqYpY2+gAKD4=
Subject key identifier: 64:2D:DD:32:CE:6C:2D:DA:25:5E:5F:9E:BF:B0:75:BD:80:44:6D:69
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 0196A49C48F533A9A86DA62F85993681D5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 02E9
Signing time: Tue 06 May 2025 08:00:27 +0000
Manifest this update: Tue 06 May 2025 08:00:27 +0000
Manifest next update: Wed 07 May 2025 08:00:27 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: oHUT5cukMbyyCqysz0nUfW6HwiDzwqdeLelG4Zhwees=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:48:f5:33:a9:a8:6d:a6:2f:85:99:36:81:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: May 6 08:00:27 2025 GMT
Not After : May 7 08:00:27 2025 GMT
Subject: CN=642ddd32ce6c2dda255e5f9ebfb075bd80446d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:a8:02:06:66:de:69:14:fb:44:9e:b2:15:
8c:2d:a1:d2:be:5b:c0:49:a4:4b:30:c5:2f:6f:d0:
ce:89:26:63:d9:47:4d:a6:7c:08:08:e4:40:a8:2a:
63:fe:84:c2:9b:cf:60:3c:0d:fb:23:9b:47:a7:f1:
76:32:cd:6a:e4:b0:23:78:25:c9:68:f7:38:b8:69:
5a:05:7c:7a:9e:13:ac:f5:b5:4a:0e:9b:64:7b:7b:
ec:84:f7:d3:88:57:90:b3:b5:07:1a:78:da:42:0e:
c4:30:f5:02:44:8d:ea:72:89:f7:7d:16:b6:cf:48:
0e:95:04:e1:f5:3c:dc:e5:4f:f0:6f:f1:73:52:89:
f4:90:1f:0f:c1:15:a1:40:7f:42:03:72:3a:e7:71:
21:4f:c0:eb:89:0d:e1:96:5a:af:78:df:89:53:84:
09:96:f4:6e:88:4e:82:4b:b0:86:b6:f0:aa:74:26:
f0:1c:48:3c:09:a0:35:e5:70:7f:01:15:3d:1c:e5:
d6:31:34:b6:6d:29:61:c8:f0:80:eb:c3:68:07:48:
26:31:22:e2:01:28:4c:9e:b7:f5:12:76:74:ef:b3:
9c:97:be:a3:8b:f3:d4:6f:29:99:0d:55:f1:29:b2:
81:3a:c0:d2:94:8b:b1:2f:cb:ca:b6:d6:13:74:e8:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:DD:32:CE:6C:2D:DA:25:5E:5F:9E:BF:B0:75:BD:80:44:6D:69
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:8b:b3:e9:18:01:3b:79:fa:2c:d6:8f:b0:45:7a:21:35:
19:7b:7d:bc:1e:85:ae:dd:3a:73:0e:c1:a1:ec:3b:38:1b:69:
2f:4f:52:6e:38:98:dc:1c:92:4d:80:fb:ad:49:1c:0e:f7:ef:
e6:b2:6a:02:8f:14:7c:7b:8f:d2:d1:0a:86:c0:75:30:81:23:
fa:27:92:f2:c8:fc:cc:07:af:bb:a1:3d:33:d8:64:a3:48:24:
fe:5b:df:1d:ed:15:f4:d6:38:cd:36:06:00:42:87:57:52:be:
ee:53:f8:e6:2f:39:5a:f5:0d:5e:30:de:0d:75:19:f0:c8:72:
6a:0d:27:6e:94:e4:6e:ab:b2:07:f4:1d:ee:71:68:21:54:5a:
be:e0:20:e0:9e:2c:49:56:c2:40:b2:cb:70:55:bd:5b:52:99:
6f:2d:c1:cf:eb:60:8f:ac:53:30:60:61:c3:a8:96:8e:48:ea:
8f:c3:cc:25:e7:f0:13:b4:37:96:9e:c1:cb:1d:8a:d1:e6:ad:
c3:4c:5a:df:95:a6:3b:09:32:e8:9f:0b:a9:98:62:3b:5a:be:
d1:5d:f6:c7:c2:01:cd:6e:af:89:12:bf:e8:da:92:1f:e9:93:
b0:e6:8a:80:7e:8a:92:56:a9:cc:5d:6d:58:46:ad:d5:70:8f:
e0:da:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:07:26 2025 by rpki-client