Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: uB52YZjWkSj+/DqwbmdErsG9PHa/OnTVZN4KcMLHMk0=
Subject key identifier: BD:BF:9D:CE:5B:C6:F5:D8:75:D7:BC:DF:8E:E5:A8:5C:F7:86:27:60
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 0198D6298B518547A8A875BF79BCE0B50D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0F57
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: 2TMm2LCfr57u_4J2_1CZ5UV6wg4.roa (hash: 9V/G4F6RhZ4wdXFiY4sW5vKF1AdhLHo9sUbdwSftjVY=)
2: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: lrKPIRir8aZQE4Fq4aVmJGJkb3cVDhmotHYspLoESv8=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8b:51:85:47:a8:a8:75:bf:79:bc:e0:b5:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=bdbf9dce5bc6f5d875d7bcdf8ee5a85cf7862760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:b4:b8:da:f2:ac:5e:2f:6c:e6:d1:e6:a9:
c4:54:25:f5:54:1e:70:ac:1d:b6:0d:e8:60:31:01:
85:85:e3:8c:80:53:7e:c5:15:a7:8e:c7:33:2d:62:
19:2a:d2:31:45:37:94:b6:8a:75:06:9d:a9:00:e2:
dc:2a:56:82:6b:3e:ca:75:6e:09:3f:b6:79:54:c4:
74:0d:94:0e:51:99:d2:2b:91:ec:58:1f:91:91:1f:
b9:f5:ac:5b:a4:70:b4:cd:b9:66:eb:45:81:eb:e7:
2d:7b:e5:31:ee:f8:39:9b:e6:80:0f:8b:10:42:59:
67:9e:1e:8c:80:47:89:93:b4:52:4f:00:33:28:d6:
6a:cf:5a:ad:ba:c5:be:dd:10:f5:58:7c:0a:17:8d:
9d:16:c8:65:9d:e8:96:bf:69:42:29:2a:69:97:25:
d5:ed:e1:b8:b7:df:a5:bb:c4:2e:a3:48:20:ad:2f:
68:5b:c5:c8:9c:7e:81:ad:8e:fc:4d:f4:39:98:cc:
7f:70:d0:d4:d8:64:6e:f6:64:49:61:85:64:9e:79:
a5:77:73:68:fd:d8:e4:5d:4c:56:86:8b:47:30:e8:
20:1b:3d:93:c3:7d:44:7e:4a:97:0d:a5:d7:78:b6:
1a:1b:c8:1e:87:41:20:e4:93:48:b1:8f:75:df:9b:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:9D:CE:5B:C6:F5:D8:75:D7:BC:DF:8E:E5:A8:5C:F7:86:27:60
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:12:28:8f:d1:77:ac:d8:8b:6a:1e:09:47:72:41:65:68:0e:
17:4f:99:ed:d4:25:dc:3c:16:82:18:43:58:24:82:a7:cb:1d:
8e:93:09:cf:9e:05:80:9d:ff:7b:45:e0:b2:35:9a:19:e7:fd:
e5:43:f3:1b:5f:8a:90:c3:d3:00:e8:cd:8e:27:2b:8f:fd:5e:
1c:a6:3a:ed:04:c4:d9:bf:83:bd:09:dc:3c:43:66:b4:04:4f:
44:aa:1d:c2:4a:df:24:ce:5a:cf:f9:fb:6a:d4:97:ce:f8:71:
36:78:ff:cb:e8:3e:fe:8d:d2:ac:ec:c5:d8:a6:7f:7f:12:e0:
73:42:0e:4e:a6:07:ab:b4:b4:f3:df:fd:30:ce:2a:36:18:de:
fc:d0:b2:f6:55:70:48:4d:43:84:8e:12:b5:72:65:51:60:cc:
60:17:cb:4f:f0:db:bb:d0:a1:a5:38:69:fb:0f:94:75:7b:76:
33:38:9d:88:51:4e:ca:1c:14:06:73:c3:d7:18:23:ec:bf:aa:
e0:58:ad:e6:b8:28:8f:0c:69:d2:25:8b:75:d1:2f:fb:b1:e6:
93:ca:d3:23:0b:ba:21:1c:e3:c9:c7:af:66:0d:84:b7:06:f7:
e2:67:61:0b:5d:3d:7e:58:94:2e:3f:25:3d:36:d0:3f:d8:27:
cc:f0:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:10 2025 by rpki-client