Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: a4zlHrupQD5KalFJYu9/s8ZRCpVstBgpviDIGBh/K/s=
Subject key identifier: 5C:C4:72:BD:06:06:DB:7A:DC:DB:09:E4:5F:DC:B1:88:5B:52:AE:6F
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 0199FD347E04F1C46E9EFFDB35F1BB1379AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: XE5So405toI3Wf6lLroqYtsc2MjAE3ooNboLbUp16xE=)
2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7e:04:f1:c4:6e:9e:ff:db:35:f1:bb:13:79:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=5cc472bd0606db7adcdb09e45fdcb1885b52ae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:20:82:a7:3d:b1:cd:74:b9:24:4b:2d:0e:
7a:09:53:c6:f3:9d:17:21:91:8e:4b:78:99:2a:66:
e9:e6:1b:5d:55:f8:58:b4:c8:69:6e:fd:c9:1b:50:
f4:4b:ec:bb:c8:fc:02:7c:cd:98:2c:74:77:c7:15:
cf:18:44:70:91:2e:73:26:f6:02:3c:59:48:48:0a:
9f:bd:e6:57:fd:51:9c:f9:5b:bc:45:ac:b6:57:19:
9c:02:99:ab:be:de:b0:48:af:7e:cc:f6:fc:9f:ed:
00:b4:2d:6c:9c:9c:7f:04:f3:51:61:ff:a2:51:12:
9c:7e:7d:d9:cb:62:b1:72:88:36:02:dc:2f:eb:f3:
b2:96:56:4f:17:72:a5:af:50:55:0a:6b:75:7a:e0:
0e:84:e1:ee:5b:d1:c2:53:14:71:4d:55:c3:48:7a:
45:8d:f5:3f:4c:ca:df:55:a3:a1:f5:45:c8:09:86:
bb:f8:b3:fe:4b:8f:81:f3:04:26:6f:7b:83:04:39:
6d:34:15:f2:06:99:0c:bc:74:9b:f4:5b:20:25:2a:
b9:a9:7c:96:df:72:20:91:02:f2:84:d3:d4:a2:81:
9c:3c:6b:34:71:63:44:c2:c4:0b:0f:b7:cb:ee:a2:
15:6a:31:51:26:ba:a7:63:60:50:06:bc:e2:00:77:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:72:BD:06:06:DB:7A:DC:DB:09:E4:5F:DC:B1:88:5B:52:AE:6F
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:e9:55:8d:d5:89:34:6a:7a:4c:8b:14:8a:c6:1b:34:7f:
fd:55:09:45:17:e3:18:d4:0c:fc:11:e8:ed:81:47:f1:d2:6f:
4d:74:31:41:9c:6f:9b:0a:c9:24:5f:88:66:96:b2:e0:48:d2:
e6:f8:2f:d6:79:80:e5:8f:a9:3b:f5:26:e2:f7:31:c2:55:df:
b3:58:0c:4d:1e:48:86:95:49:17:c3:66:10:0c:64:01:e2:91:
72:c7:2a:1b:f6:7d:c4:74:9e:e3:10:7d:be:12:99:0e:83:8a:
37:07:d4:c7:f3:30:c7:f2:12:94:04:b9:09:b6:f7:ad:c6:68:
46:f5:66:c8:fb:62:85:b7:1d:e9:55:5c:b2:51:cd:5e:5f:43:
85:91:7d:5d:dc:46:1e:e5:b5:4b:d4:18:c9:c2:37:6f:92:e3:
ce:98:a8:68:94:c2:9c:38:51:5a:57:85:37:c1:ee:a5:29:b2:
d4:e8:49:7a:c4:21:58:d8:ab:89:5b:62:71:1c:57:ab:90:6d:
a2:97:8a:89:bb:08:b3:e5:d9:f5:61:b8:2e:0e:42:17:b8:f8:
23:fd:16:19:04:fc:d0:35:b4:53:70:be:63:27:d7:94:67:01:
2a:66:64:8d:19:d6:c9:ea:48:10:25:9d:aa:95:fc:24:b7:bf:
29:34:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:02 2025 by rpki-client