Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier: cX46YooH27wtAPXCRJBZzR2mqRJNOscPh7b9E/LTG7M=
Subject key identifier: 43:23:73:6A:A6:8E:3C:65:0A:D0:C4:64:AC:7E:58:06:38:80:F1:DF
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial: 0197B6A24A0973663ECD2011D89DCECDDBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number: 0C07
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: aBx18qJeROdC4kBFZ0gBanMfso+L9gkW2y1r1YE9cvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4a:09:73:66:3e:cd:20:11:d8:9d:ce:cd:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=4323736aa68e3c650ad0c464ac7e58063880f1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:3c:02:a3:f3:d5:c7:95:af:50:f8:7c:cd:
0b:e0:34:72:c6:04:ca:9c:fa:1c:90:25:ea:fc:1f:
a4:a2:60:e1:a4:20:5d:fb:b9:de:3f:4d:a3:1b:d0:
8f:f6:7c:23:3e:03:a1:aa:73:57:a1:a0:78:82:96:
22:cf:42:1b:ba:80:fb:08:07:ad:7c:72:28:d2:b2:
b1:9d:ea:08:4a:ca:ae:f1:1f:fa:35:40:b6:4c:8c:
b0:8a:d9:17:ed:14:1a:40:39:58:22:85:df:01:5b:
58:c1:25:aa:21:24:68:58:e1:41:dd:dd:83:bf:49:
8d:61:eb:38:fb:05:cf:c2:d0:bf:3d:d0:71:a4:32:
f7:0a:ff:be:f9:5d:d8:46:5b:8a:83:a2:93:6d:56:
c9:82:61:7e:99:e3:6f:10:f7:8e:c5:e8:8d:80:6b:
1e:97:6a:14:91:e8:d0:58:f9:ee:fb:07:d6:72:70:
51:35:23:34:44:f4:b2:4a:e8:fa:62:0b:5d:0f:40:
c4:3b:ae:2b:89:2c:3e:5b:ed:dd:f1:32:7f:03:66:
a5:98:47:3c:c3:28:00:52:aa:de:8a:63:8e:df:81:
b2:92:61:b3:6a:6a:7f:8a:fc:f7:a1:24:22:4a:ec:
19:39:95:eb:11:96:52:3b:3e:0f:44:8c:97:f7:5a:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:73:6A:A6:8E:3C:65:0A:D0:C4:64:AC:7E:58:06:38:80:F1:DF
X509v3 Authority Key Identifier:
keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:67:3b:31:20:92:d1:79:d7:ac:42:7e:5a:71:b9:20:1a:4e:
14:66:ea:b3:38:e9:42:d3:98:fc:0c:96:55:28:26:49:22:c7:
d6:a5:47:3e:0d:8d:e4:52:6e:e3:0d:76:97:c9:40:1b:09:6c:
41:cd:3e:8e:22:e0:0f:87:ef:b7:47:ed:e5:3c:40:94:a4:08:
be:7e:f6:90:3a:8d:6b:eb:a0:38:ae:db:e1:b1:26:7a:99:22:
3c:55:4c:fb:7f:e2:55:64:bf:78:19:82:9a:f2:57:a3:75:a8:
cc:f2:76:c8:80:25:fa:99:28:71:bf:ad:25:7b:02:28:ad:e9:
83:7a:b2:84:90:41:96:89:9e:e5:cf:bf:93:c2:c8:91:8d:33:
46:11:59:58:82:c2:98:b9:c6:65:c5:0f:19:87:db:4f:ce:3e:
9b:6b:17:8c:2f:9b:80:98:fa:22:b7:09:1b:75:84:0b:aa:2a:
c7:96:1c:25:4e:56:1a:13:37:c4:e8:67:b2:f4:8e:f6:f1:09:
f9:a4:0c:2d:ec:6d:19:d3:47:0a:03:15:94:23:18:ee:ec:12:
37:c7:a0:fd:23:71:dc:07:1a:da:99:52:60:97:2c:99:40:f3:
3e:2b:d9:24:b6:1e:4d:b1:b6:a8:40:0a:4a:5c:91:20:cf:4a:
7d:e2:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:18 2025 by rpki-client