Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: 40vozCpXZ/47013Tr25mcE6h0B+taiyaX/54IVUmFfo=
Subject key identifier: 12:97:B3:90:3D:A4:7A:57:9C:A1:E0:85:B2:31:85:94:56:F5:5D:C1
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 0197C802A0F9ACCEC469A42C9633D932105B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0ECB
Signing time: Tue 01 Jul 2025 22:01:44 +0000
Manifest this update: Tue 01 Jul 2025 22:01:44 +0000
Manifest next update: Wed 02 Jul 2025 22:01:44 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: 2nLSryB2GEoy9hyEHsFPt/tTarde+qMSbXlptKbgbJo=)
2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:a0:f9:ac:ce:c4:69:a4:2c:96:33:d9:32:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jul 1 22:01:44 2025 GMT
Not After : Jul 2 22:01:44 2025 GMT
Subject: CN=1297b3903da47a579ca1e085b231859456f55dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:ff:fb:d1:d8:5e:5d:cb:84:c5:f2:eb:69:
7c:06:10:d9:d6:02:ff:65:93:c1:be:b8:17:41:c2:
a1:1e:87:ed:07:b5:5e:cd:66:05:ec:57:e5:48:df:
d0:45:73:71:15:dc:54:0e:33:c5:4e:4b:3e:09:bd:
7a:a6:44:99:21:eb:97:f9:b8:04:5a:3a:dd:37:f9:
64:90:0d:2f:02:a4:f5:13:56:13:a6:20:8f:51:01:
8e:1b:24:fe:51:91:9e:5d:4e:bb:cb:c1:ac:fd:66:
1d:fb:0b:49:41:b4:a5:45:ba:24:d3:f0:df:de:dd:
9c:eb:f8:24:38:7b:33:49:c0:f3:9f:18:94:46:22:
20:36:31:26:53:8e:82:56:90:17:6e:36:d8:19:01:
6d:2c:13:e0:92:5a:14:8d:ab:67:e4:65:92:75:de:
40:7c:b0:3e:09:83:9a:ac:58:a9:ed:fc:cb:7a:ee:
e3:7a:90:8f:e7:14:79:e4:e6:58:5e:91:1e:48:cb:
9b:67:4f:c7:0d:59:83:c7:4a:4e:51:07:70:de:8d:
00:7e:d8:91:af:79:35:a5:0f:18:85:d4:f0:9e:f9:
ff:e6:37:2d:bb:a9:8d:57:f9:e7:97:f9:14:41:20:
3e:8d:04:42:68:6f:34:18:00:20:b4:5f:7b:d1:e2:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:B3:90:3D:A4:7A:57:9C:A1:E0:85:B2:31:85:94:56:F5:5D:C1
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:48:52:43:43:7d:c7:8a:2c:2a:42:3a:5c:97:65:e7:3b:
ff:64:5c:dd:47:0d:f9:e0:fe:a5:04:23:89:86:d6:a0:a7:a1:
f0:fd:e2:ba:4c:d5:d6:ce:fa:e5:8e:55:4f:60:9a:59:6e:a9:
30:5b:b5:d2:9c:51:cd:66:5f:4f:c9:77:1c:7a:8e:92:ea:27:
e0:56:ec:e6:99:4e:20:01:9d:2c:3a:a6:1b:0a:c6:f1:19:ee:
2b:4c:98:0e:87:b4:60:6b:f8:d0:6a:6f:b7:4a:db:e8:3f:ce:
5b:5f:65:8f:13:80:1a:55:90:db:3d:60:bf:92:24:05:40:20:
d3:31:f6:10:7f:b2:04:70:0c:b1:80:54:51:35:e3:7e:69:98:
26:15:67:4a:8e:44:e1:91:28:f2:da:24:d3:56:43:9f:e9:c5:
d1:15:4a:36:47:7f:21:f5:1d:17:71:ca:a2:0c:a1:c2:85:3b:
3a:bf:86:7e:93:33:ce:d5:93:09:dc:dc:4f:f2:e4:34:95:d7:
9f:57:c6:cd:7f:b7:d1:be:9c:83:d6:ea:61:05:48:f3:b6:33:
55:98:ce:31:29:1f:99:41:70:18:4f:a5:b8:54:c9:9a:2b:88:
14:34:50:cb:d9:16:9a:27:62:af:cd:00:49:9e:f6:4e:fe:af:
d7:a0:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:30:48 2025 by rpki-client