
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier: rx+CXUKfu0rENlA6g3wQp5h623xs+ZKywpmKUaAwHlA=
Subject key identifier: D9:A6:0D:24:26:99:21:2C:27:32:CB:DD:F7:C7:58:F8:04:6D:98:02
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial: 0199FC21799F390AF1584CC75503E8A0A997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number: 04A4
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: kSH7zFVRC2JPuAnb2laYIsQzEmoqdYvmdqFw+6Znc/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:79:9f:39:0a:f1:58:4c:c7:55:03:e8:a0:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=d9a60d242699212c2732cbddf7c758f8046d9802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:71:dc:c6:62:ca:26:77:eb:63:36:aa:cb:
39:66:51:46:bd:75:e3:9b:0f:b8:f5:bc:5b:64:40:
13:dc:e2:86:99:8e:5a:c0:e0:e0:ed:ac:4a:f1:31:
5f:d4:09:f8:af:b8:d3:87:8b:f4:57:fa:8d:43:e1:
b6:c3:96:36:19:ac:4c:66:4d:9f:8f:93:75:68:da:
32:ae:0a:eb:83:65:e0:1a:99:c2:73:9b:10:37:ab:
41:b8:1f:ee:98:2e:4e:97:c6:0e:45:c4:b0:88:4c:
7c:d2:3a:ea:fd:1b:45:54:8e:1c:a5:94:88:35:f2:
23:d8:d2:0f:8e:72:e6:e6:9b:74:19:d0:5b:95:8b:
82:5d:20:74:5c:e0:48:db:60:52:32:f7:98:d6:80:
56:0c:ac:a4:5f:0a:52:98:9d:0d:06:77:0b:85:16:
1a:5c:3a:5e:34:c1:d3:ad:d1:d4:f5:a5:2b:52:3a:
63:a4:21:d2:d7:da:de:a9:2f:c5:b0:51:00:02:77:
b7:dd:9e:bc:38:68:cb:bd:bf:8c:84:de:22:66:95:
ee:d8:b3:95:1a:46:91:51:34:c9:89:6d:9b:96:24:
ea:ef:9c:2b:f6:cd:8d:99:26:6a:a7:96:7e:b3:e2:
49:bf:a0:1f:56:dc:b0:de:8a:a8:b8:52:a5:ca:0b:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:0D:24:26:99:21:2C:27:32:CB:DD:F7:C7:58:F8:04:6D:98:02
X509v3 Authority Key Identifier:
keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:98:d0:9a:0f:0c:53:53:4a:88:de:97:56:48:1a:b6:45:
6e:db:d1:bc:8a:53:0c:57:d3:53:e4:e0:0b:7d:00:5c:4b:98:
f9:52:2d:89:60:32:ef:13:57:ec:13:c9:5d:a3:8f:f1:7f:96:
33:d6:72:89:8d:27:38:0e:6f:09:b5:d5:00:15:3b:b9:64:e0:
68:85:6a:37:a4:0a:7b:d3:0a:bd:ef:b5:66:79:df:c7:25:33:
f0:9a:d4:fb:b0:55:4d:4b:d5:5e:ef:bb:d4:e4:6d:dd:21:8f:
92:35:ca:0a:ce:8f:f5:25:e3:06:c5:ee:83:85:8d:fb:3c:b4:
a7:98:cd:7f:ce:30:d5:55:5d:f4:04:a4:44:70:c5:9a:d7:0d:
64:70:c1:b1:4d:6a:72:e0:57:ea:a2:f0:e3:13:69:01:d6:3e:
42:c9:ac:5c:fd:ef:62:81:ab:c4:77:93:f4:fb:ba:5b:c4:8b:
a2:0e:ad:23:6d:97:bb:e6:36:17:9e:06:0f:70:89:0c:73:04:
03:58:3e:bf:d8:99:b6:b3:da:98:52:1e:e5:95:44:96:42:ac:
cc:61:41:a0:91:5b:b1:f6:43:ca:92:c3:ad:a9:a0:cc:d3:c9:
47:6e:07:1c:88:ea:c4:84:45:21:23:35:2a:3b:58:92:32:d6:
cf:05:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:24 2025 by rpki-client