Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: jkA+2n2Y31C/R64a6N8eIWn1wOpFojhkPtqtbb8X0qk=
Subject key identifier: 4D:A5:35:E4:C7:CF:E6:08:B7:6A:43:17:50:C8:76:BB:38:48:5A:07
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 019754901A098A393E14BA48F00780EB5DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 12:00:19 +0000
Manifest this update: Mon 09 Jun 2025 12:00:19 +0000
Manifest next update: Tue 10 Jun 2025 12:00:19 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: 2m4FfZwOPvxAQSLVmSeUc4TrtWwX+ZhtxtIn8aWbRqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:1a:09:8a:39:3e:14:ba:48:f0:07:80:eb:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Jun 9 12:00:19 2025 GMT
Not After : Jun 10 12:00:19 2025 GMT
Subject: CN=4da535e4c7cfe608b76a431750c876bb38485a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:e5:e8:5e:27:4f:fd:34:03:19:86:ae:7e:
27:12:e6:82:78:b5:3d:cf:6d:e0:24:16:0e:88:38:
4b:21:0b:2c:7c:91:d3:33:4a:ac:b3:db:5f:c0:7e:
5e:a6:08:2a:7d:93:88:b8:32:a9:6f:36:b4:d7:44:
0f:2b:d7:4e:06:c8:71:24:44:32:90:57:0b:d1:e5:
fd:be:8e:4d:67:5d:fc:cc:6d:6b:d0:55:32:cc:56:
d4:65:de:3d:8e:45:36:1f:98:72:75:11:dc:5c:10:
b3:24:34:ff:75:87:00:e8:47:47:65:51:66:fa:eb:
40:2c:66:24:65:c5:83:8d:26:09:42:98:61:10:17:
46:cc:db:0a:29:87:8d:42:2c:63:89:f6:5d:ec:7c:
45:52:13:f3:fe:78:5b:69:83:e6:2b:54:8a:29:f2:
9a:ec:60:3c:d9:47:fe:33:d9:e6:3d:76:c4:16:c3:
29:d3:0f:cf:6f:b8:f7:bb:c6:bf:ce:12:ca:a8:6b:
8b:e1:b7:7c:a2:5e:34:e0:cb:56:f6:2f:aa:0c:c6:
40:e0:b9:dc:22:44:91:aa:c9:64:eb:1a:6b:e3:10:
59:2e:24:af:32:68:a9:f1:fb:0c:50:90:40:6a:11:
55:58:cb:d5:60:38:83:16:75:58:7c:11:18:a4:02:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:35:E4:C7:CF:E6:08:B7:6A:43:17:50:C8:76:BB:38:48:5A:07
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:5e:4f:cd:11:76:db:8c:3d:0a:19:2c:5b:aa:db:d3:47:
48:88:02:30:7d:58:2d:cd:b2:33:b0:45:0e:03:ea:f2:2d:61:
9a:15:9a:4d:74:71:01:3e:54:ae:99:65:06:69:82:74:8a:2a:
15:ad:53:e3:e1:75:c1:1a:52:12:38:ba:d9:8a:81:ca:a7:2d:
81:71:c2:8c:21:1f:92:02:b3:d7:96:03:f8:3d:98:af:c9:3d:
01:16:e1:d5:4f:fc:14:86:13:40:ac:29:b3:ca:cf:a1:72:26:
ee:34:e0:45:b4:58:66:93:d8:78:5f:84:30:38:62:df:f9:86:
82:fd:55:e3:d2:df:ba:da:6a:02:2e:01:4a:aa:86:94:51:0a:
b7:61:76:f7:8f:33:32:22:2d:71:04:5d:20:d8:b7:1e:f0:85:
94:6b:f3:c1:6e:ec:31:d7:10:46:67:9f:8d:cd:2e:79:d1:13:
46:c0:84:2c:9c:14:76:05:0d:cc:e7:d7:7f:b1:99:fd:14:20:
a3:bf:9c:1e:6f:23:13:8c:db:67:14:9e:c7:00:78:da:bb:f4:
5b:34:e3:e7:d8:9b:bd:d6:04:60:9b:d6:d9:42:6d:18:09:6f:
76:c5:12:ca:d1:9e:5e:90:7d:43:2b:e9:90:b9:79:73:62:fd:
1a:49:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:15 2025 by rpki-client