Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: EVPAEnu5p8Myg6xV6zDaGHXllp6SLxjkkPjIc8CZlCc=
Subject key identifier: 89:7A:8D:D9:D2:8A:58:EB:C1:2E:6F:22:39:0F:50:F4:5D:A3:F1:5B
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 0196C2A691DEC7DD0BC2A8406628E7EF4C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 04:00:18 +0000
Manifest this update: Mon 12 May 2025 04:00:18 +0000
Manifest next update: Tue 13 May 2025 04:00:18 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: SvRSvPcXP7q057hsZoNAHvD+b5osqv1/iyHFkXkVypM=)
2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:91:de:c7:dd:0b:c2:a8:40:66:28:e7:ef:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: May 12 04:00:18 2025 GMT
Not After : May 13 04:00:18 2025 GMT
Subject: CN=897a8dd9d28a58ebc12e6f22390f50f45da3f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:7e:73:3a:f6:87:9f:8f:ac:6d:0c:8e:e2:
ff:f1:1f:e9:46:0a:84:8e:69:76:75:c7:05:33:b6:
6a:49:2e:1b:e7:01:39:15:69:90:6f:16:d4:1d:3a:
7e:32:9b:04:4d:03:84:4a:33:a7:ee:dd:4c:d7:ed:
d2:f0:96:f0:58:81:72:c0:4e:07:ac:ce:d7:37:bf:
77:13:1e:10:ed:27:0b:2a:68:b4:2b:d4:12:4f:e6:
e9:2e:87:0c:ba:2b:74:8e:24:a2:7e:f2:30:4c:42:
0d:b1:42:ca:cb:d4:4f:90:3d:c7:c5:ba:83:61:f2:
ca:ee:ab:4c:63:e2:e5:d0:0b:7f:cb:05:eb:b8:6f:
aa:6f:51:67:b4:53:54:67:a8:ec:52:05:18:03:22:
d7:08:67:8a:f2:12:4b:36:4c:d7:1f:20:ec:91:9e:
40:e9:86:99:d1:51:af:24:77:f6:c6:da:ba:f6:36:
ee:bb:80:56:9c:02:13:d2:d3:58:be:51:e3:66:62:
b6:6b:10:a4:d2:a1:bc:c6:22:c4:c4:29:a4:1d:e5:
b0:3f:e1:e7:71:bf:24:40:2d:74:e9:05:ec:5d:d9:
ab:80:b6:a9:91:2b:9b:11:b9:d9:a0:07:bf:58:35:
4c:72:50:60:86:f4:a5:65:d9:a4:b3:de:a1:fa:45:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:8D:D9:D2:8A:58:EB:C1:2E:6F:22:39:0F:50:F4:5D:A3:F1:5B
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fc:83:2b:20:25:b3:18:4a:b1:fb:9a:f3:52:e6:d2:99:bd:
7e:53:8b:dd:12:c4:e4:9f:d2:08:97:78:85:88:05:25:96:5b:
db:a2:0e:aa:c4:3a:bb:26:f4:ac:e6:3d:cd:18:4d:24:c3:82:
cf:24:b4:11:e1:83:b8:17:00:f0:75:72:8c:ea:65:b1:4a:c7:
7a:3b:93:80:eb:41:95:78:0d:2f:ad:f0:c9:5d:2e:69:19:bb:
3c:6b:19:e5:a4:67:39:1d:e2:8c:53:77:3d:07:03:46:8b:b6:
46:16:38:a5:3a:45:94:94:4e:74:26:09:55:d4:d8:88:a2:a8:
c3:36:5a:19:eb:61:c2:be:6b:22:83:a0:11:bd:90:77:6a:7e:
f5:f6:cb:62:76:30:b8:d2:ae:4d:28:74:b8:bc:2d:3c:b8:3f:
ec:fe:f0:70:49:38:76:eb:2c:83:47:f2:59:db:53:10:d4:d3:
63:3e:9b:b1:22:8f:d3:30:da:81:2b:8c:da:ae:62:bf:03:57:
b7:3e:54:e5:55:de:a2:6a:dc:87:c4:0b:9d:f5:e0:e6:df:7b:
32:ef:e0:39:c2:6e:08:88:d3:6b:fc:e0:1b:99:62:e7:49:90:
81:8d:c0:eb:50:90:b7:b1:e7:60:99:d4:1f:52:cf:d3:f3:af:
1e:f9:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:37:47 2025 by rpki-client