Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: aN7Yv2F7aT9cza7bvkxBmrSmeXFdhsK5qIb3GmfbOsU=
Subject key identifier: 87:4F:44:58:9B:CD:EA:F1:A2:9C:48:5E:51:BA:70:02:0B:BA:2F:C1
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 0196C1262AF9EFC4A6CD95BCB739F4CD83B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0E43
Signing time: Sun 11 May 2025 21:00:26 +0000
Manifest this update: Sun 11 May 2025 21:00:26 +0000
Manifest next update: Mon 12 May 2025 21:00:26 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: Y2JVJTWr5KoYQC8a7x+WovSWCOHSjyMJQwqOoN+5hWs=)
2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:2a:f9:ef:c4:a6:cd:95:bc:b7:39:f4:cd:83:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: May 11 21:00:26 2025 GMT
Not After : May 12 21:00:26 2025 GMT
Subject: CN=874f44589bcdeaf1a29c485e51ba70020bba2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:c6:fa:56:c0:8a:06:44:b0:7b:af:09:59:
60:83:ae:84:ef:2f:e1:28:1f:9c:9a:95:e7:11:c8:
2b:67:47:7d:7e:b5:9b:76:ca:ed:d9:1f:ce:e0:c8:
d8:01:f0:30:c4:c2:9d:8a:dc:95:1b:f5:81:85:e4:
3c:96:d9:ae:e1:a4:43:4a:4c:fd:e5:3c:17:87:6e:
68:8b:f9:51:e0:a9:d6:08:61:35:ad:cb:70:c3:86:
48:f5:22:bb:38:cb:ab:a9:bd:b9:7c:4d:30:1d:6f:
93:81:b5:c0:84:e7:d4:9c:cd:03:0c:8b:04:88:3e:
a6:6f:19:c0:97:a9:61:3d:eb:f5:5f:60:d8:24:f5:
02:d4:c0:89:56:f5:ea:1e:5c:8c:7c:4d:db:bb:87:
40:f5:85:f9:87:f7:6e:f3:1b:0d:f6:cb:a0:86:6e:
23:d8:bf:e6:d3:b8:05:bb:0c:01:c1:75:2a:ba:2f:
e8:b8:9d:54:0b:45:02:88:f0:19:63:cf:b8:70:e6:
e6:42:d0:7b:14:8a:12:7b:0a:08:58:ad:36:8b:16:
65:aa:42:92:69:97:d2:6b:54:3f:30:2e:29:8c:ad:
aa:c0:07:59:bb:bc:d0:11:b8:ab:00:b2:50:8e:57:
ee:72:58:33:ba:f8:89:85:c4:6d:b6:ae:e4:10:a4:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:44:58:9B:CD:EA:F1:A2:9C:48:5E:51:BA:70:02:0B:BA:2F:C1
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:a2:f0:77:96:54:8b:29:b4:77:45:39:f5:5f:e0:18:a9:
51:72:ed:62:fe:29:21:6e:ee:97:bf:64:73:c2:52:96:78:bf:
b0:ae:ca:45:28:42:6d:f8:e6:82:c8:96:e5:80:de:01:71:de:
2d:e6:84:5b:0f:d1:39:47:d6:8b:19:15:c1:e8:38:b3:fe:83:
d7:17:e4:a3:fa:94:0a:3f:7d:87:b5:ec:76:23:fc:f5:89:3f:
17:d9:25:3d:8a:eb:7a:09:0c:7c:a0:fb:07:86:7d:c4:67:77:
62:78:4b:c3:4b:76:a1:50:40:7d:57:25:92:4b:b8:77:94:a9:
81:78:cd:de:88:ca:e3:e7:1a:30:01:19:59:de:27:a3:1a:5b:
9e:38:72:be:47:dd:e9:8e:a8:fc:c8:5f:ea:f4:84:71:6a:7e:
25:31:16:3d:bd:36:25:12:79:ac:8e:ac:f5:7e:98:f7:cf:17:
d1:0d:97:96:e1:af:7a:cf:90:2e:bf:94:f7:26:f6:90:da:e8:
c0:03:0d:c6:2c:02:e3:e9:7c:ab:f7:9f:a0:99:27:6b:26:fb:
2b:da:d5:21:a5:9f:64:39:a5:40:94:e8:23:e1:02:fa:eb:06:
60:f2:b7:33:09:63:1b:e7:c5:36:a6:c9:fc:aa:67:c3:12:ba:
e4:a9:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:54 2025 by rpki-client