
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: HIH/ysZxNqPGs2c24dgTz9sD/R9mfRkNho2BOa1nePU=
Subject key identifier: 45:83:1E:73:48:4F:C3:55:D9:D1:D9:E9:C3:12:80:00:2C:7B:E3:E7
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 0197B6D736CC2C777C167860B44899929F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 02A9
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: k4XiP5784M4/H3Rg/UH52R719JZbvUc/S1pO5uyIQfs=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:36:cc:2c:77:7c:16:78:60:b4:48:99:92:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=45831e73484fc355d9d1d9e9c31280002c7be3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:7e:48:49:ca:ac:45:42:6f:04:e4:f6:21:
a3:ea:86:5b:8a:e7:09:67:bb:62:43:03:22:cf:a4:
46:bb:3b:9a:1d:9a:89:cd:5f:54:ef:11:f8:87:9c:
db:f2:e2:a5:02:cd:a6:ab:00:2d:d7:b2:93:e2:99:
44:9c:76:72:4b:2e:c9:a1:85:cf:44:e0:72:de:f8:
d5:29:62:30:a4:c9:94:a8:df:a4:e6:a3:e7:81:2d:
c6:9f:22:5d:a2:e2:45:90:cb:87:83:b9:ef:be:6d:
a9:5c:cf:c2:9b:2b:70:ef:f1:5b:46:05:70:4a:08:
e6:64:29:03:9e:e9:3b:fd:a3:53:c5:37:fd:68:5c:
2f:d3:1e:90:08:fa:43:73:e8:5b:9b:8b:c6:5e:48:
26:dd:9f:23:fc:56:93:24:d6:c9:73:16:48:ba:f4:
93:b2:f0:d2:0a:d1:cf:46:92:58:31:14:cf:3f:c2:
f0:9b:89:d7:77:14:f2:49:c7:c3:e0:67:2e:71:78:
60:32:77:22:af:5f:9e:b5:bf:66:a7:bb:c0:74:52:
62:dd:47:c5:fa:fa:e4:cd:c6:1f:61:4b:c5:8e:ea:
87:0d:77:35:5c:46:04:44:63:c6:c4:7e:39:00:1d:
f6:7e:50:ee:a3:e4:27:ce:1b:ef:24:a1:2d:a6:a5:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:1E:73:48:4F:C3:55:D9:D1:D9:E9:C3:12:80:00:2C:7B:E3:E7
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f1:60:40:a2:90:59:95:30:37:81:51:71:7c:07:2c:e1:3e:
12:c5:42:52:70:a4:ad:07:f0:bb:15:4f:16:e9:4b:72:85:6d:
8f:e7:d8:68:2c:4e:8e:5a:32:d4:3b:5e:4d:33:f8:2c:38:45:
94:3a:a3:3c:d3:7f:dd:7a:0e:d6:da:a5:9b:a0:03:71:63:18:
62:7f:9c:69:fa:55:d6:a0:78:36:20:72:42:d2:96:61:5c:53:
4f:32:3f:2f:c2:27:40:b1:4b:d5:68:3c:a6:59:25:c2:0a:97:
2f:bc:90:56:27:03:7c:63:47:1a:78:82:ae:70:54:b7:c2:69:
d7:bd:56:46:2b:54:93:26:10:43:99:63:a2:88:9c:7e:19:31:
e8:24:dd:f4:ca:c0:c5:c7:28:5c:e9:c0:55:a3:95:c5:e5:4c:
f5:04:0a:e8:17:19:ca:cc:8c:68:8b:b1:48:75:9b:24:16:85:
c1:dc:b5:52:72:f0:23:f0:54:1c:94:2e:bb:5d:fd:c4:94:2c:
de:93:20:88:a0:59:00:36:1a:46:3c:5c:ad:03:d6:3b:15:71:
4b:52:c5:17:cb:7c:4b:47:82:25:61:1b:e5:06:c7:2f:cd:72:
b2:d6:33:55:33:c2:36:18:c2:28:84:d7:5d:c4:0e:58:fb:81:
d9:20:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:38 2025 by rpki-client