Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: YjW6Mvmo5ci+LXMfQwWHvdK5+GSibEb9BsCNfENHuCw=
Subject key identifier: 62:30:F4:1C:E6:A7:39:7E:1A:F7:23:12:21:C3:A1:71:E8:16:F8:58
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019A72267D0243E9D624A39E21366DA0E43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: DYfyyD15JNi6TNogsVBw5O55rQ598UQDoxTg9ASAdPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7d:02:43:e9:d6:24:a3:9e:21:36:6d:a0:e4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=6230f41ce6a7397e1af7231221c3a171e816f858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:78:ea:3a:c3:f5:6b:3d:7e:bc:4d:c7:e2:
51:c7:0b:fb:d1:fb:09:1a:aa:f4:4a:fc:b3:5f:18:
bb:d5:1c:0c:43:49:c7:77:cd:f4:ab:22:7b:27:0c:
c5:62:96:29:fa:bc:7b:13:6e:e9:1e:11:ef:6f:cb:
f3:e0:ea:3a:96:bb:21:73:e6:2f:22:31:1d:56:76:
f4:a1:6f:79:9c:14:42:1a:0b:3f:b0:10:33:f3:40:
e7:58:39:1b:61:6f:c2:54:f6:4c:84:d1:d4:f4:37:
de:f1:45:f8:3f:70:c5:e5:9c:a6:4c:95:d5:44:9f:
61:23:7b:b6:e4:e2:d4:53:36:68:e5:f1:b2:2e:fe:
9b:02:8b:d9:4d:9d:aa:75:6f:43:7f:80:00:f1:73:
79:40:c9:66:7b:e3:b3:9b:37:55:86:47:f1:6c:ae:
0e:cc:ac:38:d9:cb:b6:4e:d1:76:70:92:a2:cd:2b:
9e:2d:a9:9d:33:c2:e5:c4:06:a0:65:28:4d:60:9e:
dc:47:6a:74:e0:50:15:21:8a:f8:ff:01:57:9d:36:
23:15:2f:5a:de:a5:b7:a1:e9:ad:f5:ae:da:d7:2d:
90:e6:42:12:aa:01:be:5d:df:c9:19:a0:af:5c:91:
f4:ea:f8:78:61:f3:67:38:10:9e:6a:2f:8e:45:a9:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:F4:1C:E6:A7:39:7E:1A:F7:23:12:21:C3:A1:71:E8:16:F8:58
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c5:99:10:24:00:2d:6c:2b:89:4b:85:93:2d:2b:ac:ac:86:
4c:18:91:b6:02:9c:31:dc:9c:52:ad:05:3b:8e:6f:90:46:98:
81:29:6b:9e:f7:0e:46:97:3f:23:84:30:10:10:12:9f:69:ef:
bb:94:7b:7f:1c:d1:12:fa:c2:59:ab:38:76:76:46:f5:0a:01:
e4:2d:54:8a:a0:15:a6:cb:db:02:fe:52:f3:9f:9e:cd:fa:15:
5f:1a:b5:46:59:33:9d:cc:4b:f7:bf:2d:a4:a9:d8:83:34:3b:
33:74:0d:15:91:fe:25:08:86:46:60:49:83:a6:c9:4b:f1:4f:
ed:8c:80:93:b2:8d:03:dc:4c:1e:e8:72:65:50:61:26:59:d2:
c8:b6:bd:8e:98:15:65:db:a2:8b:b4:94:97:41:21:93:4a:11:
8b:c8:e4:aa:52:97:33:24:a9:29:54:31:1d:da:58:55:70:0d:
6e:8f:15:75:be:95:07:cd:3f:1f:c5:b0:39:32:bf:a1:6e:77:
f1:93:26:8b:6c:0f:f2:94:76:f6:9e:da:20:07:17:67:b2:bb:
46:97:ab:5e:8e:9e:c7:52:61:60:3a:92:84:52:9f:41:23:4e:
2a:21:dd:05:2b:ca:69:3b:78:ba:85:06:5b:75:00:e4:b9:1d:
da:e5:6a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJn0CQ+nWJKOeITZtoOQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh
YzkxMDMwHhcNMjUxMTExMDkwMTU2WhcNMjUxMTEyMDkwMTU2WjAzMTEwLwYDVQQD
Eyg2MjMwZjQxY2U2YTczOTdlMWFmNzIzMTIyMWMzYTE3MWU4MTZmODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJR46jrD9Ws9frxNx+JRxwv70fsJ
Gqr0SvyzXxi71RwMQ0nHd830qyJ7JwzFYpYp+rx7E27pHhHvb8vz4Oo6lrshc+Yv
IjEdVnb0oW95nBRCGgs/sBAz80DnWDkbYW/CVPZMhNHU9Dfe8UX4P3DF5ZymTJXV
RJ9hI3u25OLUUzZo5fGyLv6bAovZTZ2qdW9Df4AA8XN5QMlme+OzmzdVhkfxbK4O
zKw42cu2TtF2cJKizSueLamdM8LlxAagZShNYJ7cR2p04FAVIYr4/wFXnTYjFS9a
3qW3oemt9a7a1y2Q5kISqgG+Xd/JGaCvXJH06vh4YfNnOBCeai+ORalGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIw9Bzmpzl+GvcjEiHDoXHoFvhYMB8GA1UdIwQY
MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt
NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk
LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMWZECQA
LWwriUuFky0rrKyGTBiRtgKcMdycUq0FO45vkEaYgSlrnvcORpc/I4QwEBASn2nv
u5R7fxzREvrCWas4dnZG9QoB5C1UiqAVpsvbAv5S85+ezfoVXxq1RlkzncxL978t
pKnYgzQ7M3QNFZH+JQiGRmBJg6bJS/FP7YyAk7KNA9xMHuhyZVBhJlnSyLa9jpgV
Zduii7SUl0Ehk0oRi8jkqlKXMySpKVQxHdpYVXANbo8Vdb6VB80/H8WwOTK/oW53
8ZMmi2wP8pR29p7aIAcXZ7K7RperXo6ex1JhYDqShFKfQSNOKiHdBSvKaTt4uoUG
W3UA5Lkd2uVq4g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:09 2025 by rpki-client