Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: iIUzwg5n8/V5orzY+gMMVXLhE2jy9LlZ8rWt1Sz91ds=
Subject key identifier: 11:53:58:83:BD:52:68:B2:0A:87:37:10:07:47:C4:3F:0A:BE:06:62
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 0199FFFE2C701561EED9664CECE40F792491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 03D8
Signing time: Mon 20 Oct 2025 05:01:11 +0000
Manifest this update: Mon 20 Oct 2025 05:01:11 +0000
Manifest next update: Tue 21 Oct 2025 05:01:11 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: mDlEMpbHtIo5AEMFRNXgi3x+HJtws4QYhdRPZcWDd0g=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:2c:70:15:61:ee:d9:66:4c:ec:e4:0f:79:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Oct 20 05:01:11 2025 GMT
Not After : Oct 21 05:01:11 2025 GMT
Subject: CN=11535883bd5268b20a8737100747c43f0abe0662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:e2:e2:ec:81:97:10:79:b6:5c:b5:24:1c:
c2:2a:c0:f8:81:3d:77:72:81:e4:29:5a:5a:21:e0:
17:7a:eb:64:5e:b1:9c:34:5f:99:12:aa:a1:0a:eb:
35:78:a9:16:75:fb:11:7d:d6:f7:7d:ca:c4:d9:22:
44:33:6b:e2:9a:9e:b4:2d:34:1f:ec:63:6b:e7:c6:
08:72:66:f3:44:86:20:e2:90:d8:85:30:9d:96:b2:
cf:3f:c8:18:a5:37:60:c8:c1:d7:55:10:6a:dd:13:
19:ef:84:cd:3b:a5:a2:d2:0f:c1:7e:65:f8:c3:14:
5e:84:23:cc:51:87:d8:47:17:fd:5d:4b:25:44:44:
47:70:45:6b:2a:bd:51:f7:2d:c5:9a:8c:31:ad:96:
59:1b:90:92:ed:1a:e2:29:ca:45:97:25:6e:ed:54:
93:8e:fe:ce:ff:fa:6e:33:bc:a0:8c:ee:be:e8:0b:
08:58:9d:47:fa:cd:e6:9e:9a:c3:8c:c4:a2:df:e6:
97:a9:f7:41:cc:84:0f:46:0f:9e:a9:66:cc:87:64:
c3:aa:86:02:03:34:1a:1b:3b:84:08:19:0b:14:21:
47:8a:e0:6c:44:30:35:16:e7:dd:da:cf:c0:6f:e7:
fc:b5:1c:36:b3:52:57:65:1f:2d:c6:d6:32:7c:22:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:58:83:BD:52:68:B2:0A:87:37:10:07:47:C4:3F:0A:BE:06:62
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:28:f7:30:13:78:4f:31:f0:65:b9:4d:21:a4:26:90:0e:a8:
c1:be:bb:b8:2b:59:39:d4:d5:c8:1d:16:c7:a8:5e:9c:05:bb:
9f:f4:5a:9f:18:4f:d2:3b:e3:2c:92:de:50:ab:c8:d7:bc:f1:
62:e6:f6:b6:91:4d:29:7e:90:16:c5:a9:c1:24:e7:0b:9e:8c:
1d:44:cc:4c:38:61:e1:12:97:a3:c0:44:c2:f2:22:7e:15:c2:
93:c2:00:38:b0:08:a5:ea:67:fe:a0:15:24:2d:f1:6f:ed:54:
44:40:8b:da:df:bf:a1:f8:0b:62:0f:6a:fb:12:0f:4a:b0:d3:
05:3b:99:c3:e8:bd:99:94:df:e8:f7:f3:bc:50:a7:33:3f:ee:
15:1d:29:d4:4a:1d:f6:f4:7b:b8:b8:7f:b6:94:34:a6:76:5f:
64:b4:b4:be:6a:9c:ff:70:72:b2:72:94:7b:15:23:01:26:2f:
e9:1c:1c:41:aa:89:9d:a3:90:ab:c4:5a:94:fe:47:a3:5f:4d:
f9:1d:8b:e9:d9:99:19:45:af:9b:51:8c:f3:6c:91:a4:1d:59:
bf:3f:53:c9:67:4d:be:26:a8:db:c1:c4:f4:66:86:8f:04:51:
b5:94:91:00:27:68:38:1a:b4:c1:2d:c6:b4:3a:d4:9d:e2:1d:
57:36:86:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//ixwFWHu2WZM7OQPeSSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4
MTllNDQwHhcNMjUxMDIwMDUwMTExWhcNMjUxMDIxMDUwMTExWjAzMTEwLwYDVQQD
EygxMTUzNTg4M2JkNTI2OGIyMGE4NzM3MTAwNzQ3YzQzZjBhYmUwNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHi4uyBlxB5tly1JBzCKsD4gT13
coHkKVpaIeAXeutkXrGcNF+ZEqqhCus1eKkWdfsRfdb3fcrE2SJEM2vimp60LTQf
7GNr58YIcmbzRIYg4pDYhTCdlrLPP8gYpTdgyMHXVRBq3RMZ74TNO6Wi0g/BfmX4
wxRehCPMUYfYRxf9XUslRERHcEVrKr1R9y3FmowxrZZZG5CS7RriKcpFlyVu7VST
jv7O//puM7ygjO6+6AsIWJ1H+s3mnprDjMSi3+aXqfdBzIQPRg+eqWbMh2TDqoYC
AzQaGzuECBkLFCFHiuBsRDA1Fufd2s/Ab+f8tRw2s1JXZR8txtYyfCKCpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFTWIO9UmiyCoc3EAdHxD8KvgZiMB8GA1UdIwQY
MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt
ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0
LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyj3MBN4
TzHwZblNIaQmkA6owb67uCtZOdTVyB0Wx6henAW7n/RanxhP0jvjLJLeUKvI17zx
Yub2tpFNKX6QFsWpwSTnC56MHUTMTDhh4RKXo8BEwvIifhXCk8IAOLAIpepn/qAV
JC3xb+1URECL2t+/ofgLYg9q+xIPSrDTBTuZw+i9mZTf6PfzvFCnMz/uFR0p1Eod
9vR7uLh/tpQ0pnZfZLS0vmqc/3BysnKUexUjASYv6RwcQaqJnaOQq8RalP5Ho19N
+R2L6dmZGUWvm1GM82yRpB1Zvz9TyWdNviao28HE9GaGjwRRtZSRACdoOBq0wS3G
tDrUneIdVzaGnw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:06 2025 by rpki-client