
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: bG1HJZQBYUWsi17VyBAc2LuZNX0ZA5Pda0HCeH4wNEI=
Subject key identifier: C0:B4:7E:81:E7:E9:0D:DA:D6:0A:56:34:CD:4B:92:18:62:FD:C2:FB
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 0199221E52003213B1B750D1795F7CBEA9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:36 +0000
Manifest this update: Sun 07 Sep 2025 03:00:36 +0000
Manifest next update: Mon 08 Sep 2025 03:00:36 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: pppEvHJ3n2uIL4WcrOG/Hkm9tVX2MQlLzp2DSR4vzpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:52:00:32:13:b1:b7:50:d1:79:5f:7c:be:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Sep 7 03:00:36 2025 GMT
Not After : Sep 8 03:00:36 2025 GMT
Subject: CN=c0b47e81e7e90ddad60a5634cd4b921862fdc2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:47:93:4f:0c:33:ea:41:a0:b9:1c:33:1f:
17:93:5c:40:40:74:8a:74:62:9a:cb:03:3e:19:d9:
82:b0:40:82:db:24:bb:3e:16:c7:2b:e2:6c:f8:9f:
6d:68:8d:e5:ac:d2:08:11:05:aa:0d:e4:90:d9:12:
bd:53:3c:13:d6:af:e8:b9:67:75:6a:0c:92:a8:da:
4e:b8:5e:cc:5d:ee:bc:b0:33:d8:c2:14:4b:73:36:
4a:c0:bd:83:87:29:19:e8:23:c9:4a:65:1b:e4:2f:
4c:15:e7:c1:30:a4:d1:d4:df:70:e2:c4:b7:cd:17:
cd:c2:1b:ca:49:fe:d0:dd:11:3d:56:b6:47:7f:26:
bd:44:54:e9:db:c1:c9:da:4f:74:6e:3c:3b:76:69:
b8:dd:01:8f:d7:6e:d9:39:55:94:48:78:5c:1e:fe:
a0:3d:fa:cd:c8:d2:3c:11:8e:6e:d6:b7:6c:f1:ee:
c2:80:30:0b:d7:d7:62:74:da:03:f8:a5:52:55:46:
33:75:65:88:9f:47:37:53:dc:76:aa:1a:f0:84:48:
07:0a:cd:fc:3a:a5:cd:8e:f2:83:ec:48:55:3f:f6:
97:0c:cb:3d:29:08:f5:d8:3f:b0:c5:e2:f6:dd:d5:
ab:56:92:bc:2b:15:24:40:e9:af:d9:52:16:d2:53:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:7E:81:E7:E9:0D:DA:D6:0A:56:34:CD:4B:92:18:62:FD:C2:FB
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:18:82:c2:e7:07:a0:30:7f:34:6f:2e:a6:0f:40:d1:3e:
dc:49:87:16:d6:26:22:12:45:90:24:de:7c:94:fb:12:4f:bc:
11:26:28:7d:39:cb:a1:a3:8e:9b:dd:61:0e:12:58:b7:e5:ef:
8d:02:83:42:23:87:d0:77:8e:71:d1:7b:b8:b2:2f:ff:67:07:
8f:98:f3:c1:52:b7:b3:14:8f:52:eb:5a:2f:59:15:97:1d:b9:
bf:66:3f:a9:c2:53:5b:b0:9d:16:fa:d3:a6:af:8f:ef:a7:8a:
d6:28:6e:a8:0f:2c:e3:cf:8f:c9:10:66:31:e4:c4:3b:c8:d1:
0c:28:59:b9:5f:09:b6:48:70:01:7e:a5:9f:34:ca:66:1c:6d:
15:20:28:51:52:7e:98:e3:20:63:2d:f0:39:34:ba:80:5c:8e:
1d:fb:80:d0:94:63:cb:fa:88:9b:61:87:c6:67:09:f6:68:c4:
b3:55:dc:1c:3d:31:5d:5b:8c:02:a9:c6:1c:8d:e1:d8:78:2e:
77:ae:e6:c4:2f:e1:ba:f7:67:e3:25:be:3f:e4:b2:32:47:a8:
53:64:6a:d0:c9:f7:9d:b0:c8:2d:3f:7a:94:1d:c1:00:bf:56:
82:2f:d4:60:c5:45:58:8d:d8:f2:27:f1:a7:24:be:3c:b1:be:
5f:d9:9e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHlIAMhOxt1DReV98vqniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh
YzkxMDMwHhcNMjUwOTA3MDMwMDM2WhcNMjUwOTA4MDMwMDM2WjAzMTEwLwYDVQQD
EyhjMGI0N2U4MWU3ZTkwZGRhZDYwYTU2MzRjZDRiOTIxODYyZmRjMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6dHk08MM+pBoLkcMx8Xk1xAQHSK
dGKaywM+GdmCsECC2yS7PhbHK+Js+J9taI3lrNIIEQWqDeSQ2RK9UzwT1q/ouWd1
agySqNpOuF7MXe68sDPYwhRLczZKwL2DhykZ6CPJSmUb5C9MFefBMKTR1N9w4sS3
zRfNwhvKSf7Q3RE9VrZHfya9RFTp28HJ2k90bjw7dmm43QGP127ZOVWUSHhcHv6g
PfrNyNI8EY5u1rds8e7CgDAL19didNoD+KVSVUYzdWWIn0c3U9x2qhrwhEgHCs38
OqXNjvKD7EhVP/aXDMs9KQj12D+wxeL23dWrVpK8KxUkQOmv2VIW0lNVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC0foHn6Q3a1gpWNM1Lkhhi/cL7MB8GA1UdIwQY
MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt
NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk
LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1UYgsLn
B6AwfzRvLqYPQNE+3EmHFtYmIhJFkCTefJT7Ek+8ESYofTnLoaOOm91hDhJYt+Xv
jQKDQiOH0HeOcdF7uLIv/2cHj5jzwVK3sxSPUutaL1kVlx25v2Y/qcJTW7CdFvrT
pq+P76eK1ihuqA8s48+PyRBmMeTEO8jRDChZuV8JtkhwAX6lnzTKZhxtFSAoUVJ+
mOMgYy3wOTS6gFyOHfuA0JRjy/qIm2GHxmcJ9mjEs1XcHD0xXVuMAqnGHI3h2Hgu
d67mxC/huvdn4yW+P+SyMkeoU2Rq0Mn3nbDILT96lB3BAL9Wgi/UYMVFWI3Y8ifx
pyS+PLG+X9meGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:52 2025 by rpki-client