Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: odZ4Z4COkk2XgOXQHQxB2xxa2ZnHSbEEm/ZASpKW1Ik=
Subject key identifier: 53:ED:48:A2:D4:12:BB:48:7A:7A:6A:FA:85:6B:17:BF:C9:C8:3E:C0
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 0198D5BC594BCBC52A7F865766B10139EB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: UZq6qC4wu3sto33qNGp0BEn8Pj+c4kbzEO7G/r6mckg=)
2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:59:4b:cb:c5:2a:7f:86:57:66:b1:01:39:eb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=53ed48a2d412bb487a7a6afa856b17bfc9c83ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:41:92:87:78:92:42:9e:5a:e4:bb:cf:b3:
8f:52:e9:80:ff:30:7c:02:51:b5:5c:7e:5d:93:62:
0a:8c:e3:e8:8c:a4:1d:c1:bc:c7:fa:92:5b:f6:ac:
8d:86:fc:d2:9d:86:9a:61:fe:86:24:be:44:99:93:
f1:4c:3c:c2:f8:99:68:40:7e:79:4f:f8:77:3e:8d:
a1:6c:7c:0a:ee:71:2a:3b:31:38:da:c9:f4:a4:81:
0f:55:00:c6:bb:87:95:0b:12:50:64:78:fc:c0:41:
1c:71:06:c6:7f:83:86:08:20:35:5c:fb:2b:25:e2:
cd:e2:dc:90:27:8b:d2:e0:99:78:dc:8f:0f:c7:42:
fb:e7:38:ec:79:93:5b:ec:58:7e:cd:18:14:2a:ae:
16:72:b6:84:8e:0f:f3:04:fe:7e:a4:ed:0e:53:06:
5b:9f:d8:b1:7d:ab:01:b7:d6:6a:13:60:00:17:a4:
73:2a:17:87:5d:be:e4:67:e3:10:49:c0:6f:ab:82:
c4:c9:98:f6:24:9b:23:68:4f:60:f3:90:d3:72:4b:
6d:ee:ed:ac:58:aa:e4:23:91:b3:d8:84:53:b7:53:
54:79:88:43:30:21:93:95:c6:12:df:06:c5:54:d1:
13:bf:75:4c:7d:68:23:da:cc:35:27:4b:35:e2:47:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:48:A2:D4:12:BB:48:7A:7A:6A:FA:85:6B:17:BF:C9:C8:3E:C0
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:fe:ea:a4:31:d5:29:a4:c7:5a:eb:31:f4:f2:83:7b:67:
a8:86:5b:f2:17:64:75:b3:72:e7:6e:ee:11:40:16:bc:30:9c:
ea:d5:f5:4c:a9:70:88:d2:12:17:1f:ba:98:65:79:63:94:93:
3b:4b:cc:ff:d4:26:31:2b:eb:44:4d:81:d0:45:cf:28:54:7e:
c2:e3:f4:78:8c:de:24:3d:d8:26:de:c5:30:01:25:44:1c:9a:
b4:78:7b:34:02:fe:ce:0e:81:4c:47:a0:9f:c3:24:25:91:ba:
ae:5a:2d:08:17:99:f7:cd:4f:40:00:d5:88:98:cb:a1:c4:d9:
62:a5:69:5a:d0:e5:5b:38:f8:ed:ec:6a:52:dd:e1:1f:7e:43:
c2:9f:c6:28:ed:f4:9e:fa:77:03:ab:de:d9:68:0d:3e:c4:a9:
0f:0b:89:46:a3:86:fa:cd:03:de:8c:5a:39:15:19:e4:16:5d:
4d:c1:2d:36:09:64:41:cf:97:82:49:33:6e:20:6c:69:13:5b:
fe:d3:67:e5:0d:7d:7e:52:c4:02:76:f0:7e:c1:18:3e:dc:bb:
ca:ad:25:30:92:86:3f:33:15:ff:30:f1:0b:47:e6:ce:6d:b2:
d7:a6:dd:18:a3:1d:24:cc:97:cb:95:9a:bd:2a:21:15:26:dc:
89:69:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:14 2025 by rpki-client