Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: 7jgSs5eoSuGjD4qAT/wV4iRI/1W15bOyzZEGtwNDhjo=
Subject key identifier: 0B:85:51:00:88:85:66:97:3C:08:97:10:AB:24:55:41:7B:FD:E8:82
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 01984778263473C3EDD45DDF37AB989B11A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0F0D
Signing time: Sat 26 Jul 2025 16:01:53 +0000
Manifest this update: Sat 26 Jul 2025 16:01:53 +0000
Manifest next update: Sun 27 Jul 2025 16:01:53 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: PEzAdEr8lvf43PFTaCQxjHW01H/rN9s7fgCuBNM0ybQ=)
2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:26:34:73:c3:ed:d4:5d:df:37:ab:98:9b:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jul 26 16:01:53 2025 GMT
Not After : Jul 27 16:01:53 2025 GMT
Subject: CN=0b855100888566973c089710ab2455417bfde882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:78:08:c7:e3:93:19:98:ce:b0:2f:57:d4:56:
fe:49:4b:d8:59:9d:5c:b5:ba:a0:9a:65:95:4f:f9:
d5:86:cd:de:df:35:8a:e8:47:f5:ad:47:92:6c:91:
5c:14:ca:8b:ae:c6:40:ed:81:12:62:fa:e0:99:52:
e5:ce:1e:e6:57:d4:f8:62:3e:09:e0:1d:30:0e:c4:
a9:e6:45:e5:10:43:19:59:e5:a8:06:4e:bf:d7:ed:
54:d8:16:6d:25:0d:c9:e9:c3:72:5f:fa:99:0b:0f:
f9:92:c6:60:2e:e4:5d:ee:d7:38:4c:f1:a6:02:b4:
42:31:5d:59:56:c0:11:8a:7b:12:fe:a4:48:ba:9d:
e8:01:6b:6a:99:ad:68:b4:2b:49:61:ee:d0:09:92:
68:97:d7:f9:9f:8d:7e:f9:01:84:2c:ee:b3:78:65:
bc:e2:f0:15:7b:66:7f:30:37:61:ed:99:04:c2:a9:
d2:5a:07:8b:5f:15:d7:7b:2f:d0:46:c3:fa:a8:90:
5c:73:51:21:b1:a0:49:34:5b:2a:f0:07:88:9d:e4:
eb:e1:40:7d:80:d4:2c:8c:75:f2:63:bf:cb:a6:35:
c9:57:9d:7f:fd:98:dd:4d:13:7d:d0:be:52:99:e9:
f9:d1:5b:a6:6f:cb:0f:49:76:7d:2d:1a:cf:81:c0:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:51:00:88:85:66:97:3C:08:97:10:AB:24:55:41:7B:FD:E8:82
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:50:8f:a8:42:39:e3:58:17:2b:f1:a7:35:bd:6a:ab:54:
f8:9b:75:e0:cd:c8:52:23:20:39:13:f2:89:3d:40:f6:85:38:
2c:ed:f3:4b:96:d4:0a:d7:60:67:e8:3b:b1:c8:a4:45:6e:35:
92:7b:28:9a:06:4e:04:eb:60:24:25:f7:49:23:2f:d8:86:05:
88:14:1b:d3:58:84:d3:a0:97:0c:9d:40:44:3c:03:75:20:16:
4d:9d:b6:8b:1a:95:2c:1c:89:3e:0b:5c:7d:1f:46:a1:ea:93:
04:d1:2c:b9:f4:af:ec:61:ce:5e:28:24:8e:c3:54:ff:11:63:
b7:48:08:58:fd:74:31:00:b5:7a:96:97:b7:07:4d:a3:25:36:
56:b1:ca:8e:89:25:23:6d:7d:11:52:74:0f:75:c4:62:cb:ef:
a2:a4:19:98:ea:74:25:51:f4:26:6a:f2:72:9d:8b:49:24:ee:
de:56:2f:95:27:33:81:e1:a2:ca:8a:96:2b:08:76:6b:23:00:
11:c4:cc:c7:94:32:11:6e:ed:a9:06:97:70:2d:05:ab:77:7b:
0a:c0:ce:e2:94:52:2c:82:ec:3b:d9:88:1a:52:af:cd:1b:f4:
43:86:d3:54:39:8e:1f:bd:88:fe:f7:5b:2a:c8:f5:ba:18:08:
e7:4a:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:19:15 2025 by rpki-client