Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: 4KYiChtQB440kJpB6svgao3FM3uoOwIobO/cAuDryq4=
Subject key identifier: 44:00:51:93:B0:EF:5E:E8:D3:A4:95:6F:55:42:F3:1F:F5:A7:AC:16
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 0198277E24E7E0A85F9E2E51824B96DF1BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 20
Signing time: Sun 20 Jul 2025 11:00:34 +0000
Manifest this update: Sun 20 Jul 2025 11:00:34 +0000
Manifest next update: Mon 21 Jul 2025 11:00:34 +0000
Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: YgF7ueNxrV3fuOp3YTVathZm0tZlpCaQWrcW4a+Mw/w=)
2: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
3: umpj4TmNb7-i6gRBMv2efJMNJXU.roa (hash: 4c4cs6z/w6EGiSeq0CBgum5+NabWoSLkBUFZtdWiCkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:24:e7:e0:a8:5f:9e:2e:51:82:4b:96:df:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jul 20 11:00:34 2025 GMT
Not After : Jul 21 11:00:34 2025 GMT
Subject: CN=44005193b0ef5ee8d3a4956f5542f31ff5a7ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:72:22:1d:73:21:0f:ac:5f:2e:95:f9:be:
43:60:fb:b2:c2:d8:59:b4:e4:68:c6:a0:09:66:1a:
cd:1e:82:a3:43:4f:25:22:78:2b:bd:a6:38:aa:a0:
5f:bd:59:aa:8b:53:e6:61:ee:2b:7f:f4:b4:d8:d2:
e5:13:be:14:71:e4:a6:26:51:6b:e1:f7:44:26:f2:
9c:d7:9d:99:f9:fb:72:bf:60:4b:21:ce:26:d6:3c:
cb:ce:e4:36:10:80:22:48:40:e5:d7:cf:81:a3:1c:
d9:93:da:2a:cc:e4:42:8e:59:6a:36:88:c9:bd:cb:
2a:f3:42:71:d0:df:56:0d:bf:a1:1c:5a:23:75:17:
b6:e8:31:a2:10:bb:76:06:10:cd:b2:db:2c:e6:f8:
43:2a:f3:7e:06:8b:7a:10:58:c3:c2:d7:1a:ad:8c:
e7:4a:14:6a:9e:ad:11:97:c7:6c:80:b1:ea:d5:d9:
d5:41:0c:80:c1:f9:1a:98:b2:0f:15:dd:fb:b2:d5:
27:f8:90:d2:28:7c:6b:e7:50:36:dd:29:3d:4f:df:
ea:0f:a3:31:33:7c:bd:df:f3:cf:85:1f:96:21:e0:
72:0c:63:a3:04:99:92:63:52:c6:ce:26:6b:eb:d9:
b2:1f:fb:55:b5:80:78:65:69:ed:cc:e0:3f:3c:57:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:00:51:93:B0:EF:5E:E8:D3:A4:95:6F:55:42:F3:1F:F5:A7:AC:16
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:a6:7c:f4:59:65:70:9f:e1:4c:32:f1:cb:0a:04:8f:96:
f2:41:32:f4:3e:15:4f:09:c2:c9:e5:ca:8f:67:c9:41:d8:7e:
49:f3:6a:d4:9c:8f:de:80:a7:0a:9e:1f:56:7f:ff:52:df:d7:
9c:c5:44:c2:57:8b:77:bd:0c:25:a9:bb:7f:84:ee:cb:2c:1b:
51:79:b1:33:a7:84:d8:43:6f:32:27:8b:0e:29:95:1e:ea:be:
ac:c0:62:97:f5:43:5d:7c:13:ce:e6:d2:2d:30:48:37:4d:83:
7a:03:7f:9e:4b:ed:31:9d:b0:31:9f:c3:47:83:0c:8c:f9:60:
54:13:8c:ee:79:8e:a0:e8:e9:b9:04:75:9c:44:a2:4f:9d:bf:
f2:e0:a3:4d:4d:30:af:9e:ad:6b:5f:ab:53:e4:7a:27:60:33:
47:8a:01:80:87:77:8a:0d:28:6d:77:d9:e5:00:58:81:ee:30:
f1:31:ef:95:13:f0:66:dc:f8:66:f1:0f:16:ce:09:39:a2:d0:
28:1a:49:63:c2:05:73:37:2e:6f:11:03:5a:36:9c:71:69:8c:
46:8d:c3:de:3b:55:92:c9:d6:68:53:c6:48:2a:0f:1b:27:8d:
b9:b3:c2:3c:a6:51:21:fe:f3:e1:01:86:2e:87:88:20:0d:69:
7e:2a:69:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfiTn4Khfni5RgkuW3xvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjUwNzIwMTEwMDM0WhcNMjUwNzIxMTEwMDM0WjAzMTEwLwYDVQQD
Eyg0NDAwNTE5M2IwZWY1ZWU4ZDNhNDk1NmY1NTQyZjMxZmY1YTdhYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntyIh1zIQ+sXy6V+b5DYPuywthZ
tORoxqAJZhrNHoKjQ08lIngrvaY4qqBfvVmqi1PmYe4rf/S02NLlE74UceSmJlFr
4fdEJvKc152Z+ftyv2BLIc4m1jzLzuQ2EIAiSEDl18+BoxzZk9oqzORCjllqNojJ
vcsq80Jx0N9WDb+hHFojdRe26DGiELt2BhDNstss5vhDKvN+Bot6EFjDwtcarYzn
ShRqnq0Rl8dsgLHq1dnVQQyAwfkamLIPFd37stUn+JDSKHxr51A23Sk9T9/qD6Mx
M3y93/PPhR+WIeByDGOjBJmSY1LGziZr69myH/tVtYB4ZWntzOA/PFf/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQAUZOw717o06SVb1VC8x/1p6wWMB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTimfPRZ
ZXCf4Uwy8csKBI+W8kEy9D4VTwnCyeXKj2fJQdh+SfNq1JyP3oCnCp4fVn//Ut/X
nMVEwleLd70MJam7f4TuyywbUXmxM6eE2ENvMieLDimVHuq+rMBil/VDXXwTzubS
LTBIN02DegN/nkvtMZ2wMZ/DR4MMjPlgVBOM7nmOoOjpuQR1nESiT52/8uCjTU0w
r56ta1+rU+R6J2AzR4oBgId3ig0obXfZ5QBYge4w8THvlRPwZtz4ZvEPFs4JOaLQ
KBpJY8IFczcubxEDWjaccWmMRo3D3jtVksnWaFPGSCoPGyeNubPCPKZRIf7z4QGG
LoeIIA1pfippbA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:57 2025 by rpki-client