Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier: QL2HaUQnvHqRsGQP/h797EELY8rVQhLRMpnKwTA7RQ4=
Subject key identifier: 9C:8F:5E:6F:40:76:E8:F6:4A:68:FC:2E:36:EC:77:66:8E:F6:AC:50
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial: 0196598295F2543A33FBA5E9FECCFBE1AEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 18:00:52 +0000
Manifest this update: Mon 21 Apr 2025 18:00:52 +0000
Manifest next update: Tue 22 Apr 2025 18:00:52 +0000
Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: 6dPwb5CrVSs2VKlaNTGWu9ENedhdZNzVNB1CXTc3Tg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:95:f2:54:3a:33:fb:a5:e9:fe:cc:fb:e1:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Validity
Not Before: Apr 21 18:00:52 2025 GMT
Not After : Apr 22 18:00:52 2025 GMT
Subject: CN=9c8f5e6f4076e8f64a68fc2e36ec77668ef6ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:41:ca:e9:a8:0a:7e:be:19:de:13:91:f6:
da:58:b4:b3:0c:03:cd:21:11:95:2a:88:48:c5:d6:
e1:e8:fa:d2:7b:94:9b:30:8b:bc:8e:dc:81:85:1b:
ee:87:1e:7d:b8:44:9f:8a:02:4a:8b:e9:23:67:2b:
26:41:c4:ab:78:70:77:72:67:c5:fa:00:c8:a4:6b:
1c:83:34:7c:b3:2c:ad:84:c0:a0:13:d0:89:71:97:
3c:15:93:2f:1f:e9:52:8e:77:c1:ae:17:70:80:a5:
d8:6c:cb:ea:ff:52:0a:9d:d1:50:ca:76:68:fd:59:
1f:46:6d:94:e2:22:35:46:d9:73:3f:c4:26:68:d0:
ee:4f:93:fc:d4:7c:61:68:4e:0d:ba:b2:f9:a8:ea:
9c:8f:d8:54:94:e6:1b:58:b5:6a:c4:e9:f7:b8:3c:
93:8b:a6:70:9a:b1:00:59:a5:80:c5:14:53:78:2e:
be:28:42:c4:a9:d9:d9:f1:bb:d7:80:98:6d:f4:6c:
ef:3f:07:20:4d:52:18:eb:c2:f2:f9:64:c9:d0:74:
c7:b2:a5:e3:85:66:79:95:bf:ac:ab:0a:2a:ba:02:
85:a5:4d:0c:dc:b3:63:63:7e:86:ef:01:e6:f4:c1:
fa:45:a5:36:cd:66:47:88:87:ee:6b:bd:70:40:ce:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:5E:6F:40:76:E8:F6:4A:68:FC:2E:36:EC:77:66:8E:F6:AC:50
X509v3 Authority Key Identifier:
keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5c:46:a8:59:5d:e0:5e:fd:01:23:5b:e5:2e:97:a1:08:cc:
8a:95:15:e5:cd:31:bd:06:56:a7:13:3d:5f:ac:97:4d:a4:a8:
36:ad:e3:4e:e4:69:d4:e0:fe:0f:3d:da:19:82:f2:3c:6a:b4:
dd:00:67:fa:8a:60:33:13:d4:25:59:df:ba:cb:a9:77:24:97:
79:0f:54:16:79:84:f4:8f:1f:9b:83:64:d8:79:4e:89:1e:99:
c3:b7:cf:d8:7e:1e:1b:25:bf:07:7a:a4:7b:9a:be:37:ca:2d:
b0:64:12:30:ba:07:1a:b1:12:ea:30:9f:46:7a:14:db:fa:ac:
b6:ec:61:89:ac:a2:6a:c2:46:2b:cf:b9:5f:bd:24:99:9c:92:
67:b1:3a:f8:c7:2d:14:41:d7:80:37:61:1b:65:d5:9a:ca:80:
6a:5f:73:8b:ff:1a:a7:3e:92:de:c3:a4:57:74:c3:a8:6d:15:
d1:81:02:6f:5f:53:47:68:3f:5f:4b:fe:51:4d:97:df:cb:d9:
10:dd:51:2a:30:f0:c7:d1:a6:f9:0a:01:1e:54:2a:49:f8:1f:
f3:ff:2f:eb:47:01:15:7b:d9:29:1e:35:59:33:9a:73:03:df:
d2:49:08:22:8e:11:5c:9f:4f:2b:e1:3c:a5:eb:bb:21:e1:71:
50:2c:5f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZgpXyVDoz+6Xp/sz74a70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh
YzkxMDMwHhcNMjUwNDIxMTgwMDUyWhcNMjUwNDIyMTgwMDUyWjAzMTEwLwYDVQQD
Eyg5YzhmNWU2ZjQwNzZlOGY2NGE2OGZjMmUzNmVjNzc2NjhlZjZhYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf5ByumoCn6+Gd4TkfbaWLSzDAPN
IRGVKohIxdbh6PrSe5SbMIu8jtyBhRvuhx59uESfigJKi+kjZysmQcSreHB3cmfF
+gDIpGscgzR8syythMCgE9CJcZc8FZMvH+lSjnfBrhdwgKXYbMvq/1IKndFQynZo
/VkfRm2U4iI1RtlzP8QmaNDuT5P81HxhaE4NurL5qOqcj9hUlOYbWLVqxOn3uDyT
i6ZwmrEAWaWAxRRTeC6+KELEqdnZ8bvXgJht9GzvPwcgTVIY68Ly+WTJ0HTHsqXj
hWZ5lb+sqwoqugKFpU0M3LNjY36G7wHm9MH6RaU2zWZHiIfua71wQM57/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyPXm9Aduj2Smj8Ljbsd2aO9qxQMB8GA1UdIwQY
MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt
NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk
LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlxGqFld
4F79ASNb5S6XoQjMipUV5c0xvQZWpxM9X6yXTaSoNq3jTuRp1OD+Dz3aGYLyPGq0
3QBn+opgMxPUJVnfusupdySXeQ9UFnmE9I8fm4Nk2HlOiR6Zw7fP2H4eGyW/B3qk
e5q+N8otsGQSMLoHGrES6jCfRnoU2/qstuxhiayiasJGK8+5X70kmZySZ7E6+Mct
FEHXgDdhG2XVmsqAal9zi/8apz6S3sOkV3TDqG0V0YECb19TR2g/X0v+UU2X38vZ
EN1RKjDwx9Gm+QoBHlQqSfgf8/8v60cBFXvZKR41WTOacwPf0kkIIo4RXJ9PK+E8
peu7IeFxUCxfeg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:23 2025 by rpki-client