Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: +IlHd6gci61HQYU7w7IPWRSaZerLsB1Li4ra3YUajR4=
Subject key identifier: 44:05:44:7E:D7:78:42:19:C8:6D:A7:DB:47:A0:D4:DB:0F:F3:86:23
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 0196458D60C64896EEA5D6665C0AF9386146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0E03
Signing time: Thu 17 Apr 2025 21:00:15 +0000
Manifest this update: Thu 17 Apr 2025 21:00:15 +0000
Manifest next update: Fri 18 Apr 2025 21:00:15 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: ZonShJeu/Fte59fEFBTadPLf7T8HSSwzn9/2dwIIf3c=)
2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:60:c6:48:96:ee:a5:d6:66:5c:0a:f9:38:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Apr 17 21:00:15 2025 GMT
Not After : Apr 18 21:00:15 2025 GMT
Subject: CN=4405447ed7784219c86da7db47a0d4db0ff38623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:6e:6e:02:31:85:bd:50:ab:fd:d7:46:52:
04:2f:77:bf:5e:8e:48:59:04:c9:d8:97:61:ee:ed:
11:7e:ea:db:72:f8:d4:c1:94:b2:fe:8f:56:bd:d5:
d8:79:3d:90:0d:1f:b5:77:70:a6:2d:bb:62:d0:b2:
3c:da:d5:99:3b:14:77:f5:54:1a:ef:84:4f:ea:d5:
f4:1d:6e:bf:12:c6:44:70:67:da:7e:5d:e4:0a:20:
98:fa:65:4c:8e:12:22:50:8a:8b:a8:b7:e5:6b:f7:
e1:3f:73:1e:46:c1:94:a6:30:2a:9c:27:13:1d:bf:
f4:8b:8b:7f:9c:a7:6f:e2:e9:5a:53:75:71:84:e2:
1d:dd:df:41:9a:86:c0:25:a0:cc:59:ab:2f:a4:dc:
9d:88:98:87:97:6b:cc:96:e6:41:55:64:2c:41:ef:
04:c0:31:34:9d:d9:d0:99:88:8c:c9:29:8b:e4:7d:
64:7c:ff:48:66:24:18:4f:69:a1:3a:57:58:44:25:
9c:06:28:02:8d:43:5b:6a:3b:d7:cc:8b:f4:58:54:
81:73:41:1f:86:c1:a7:01:67:4d:ff:d3:67:db:e7:
17:ad:c1:f7:b7:f8:9d:0a:68:c9:3d:52:50:c6:04:
7b:db:0a:61:29:19:51:7a:5d:6c:20:d8:ab:5e:8a:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:44:7E:D7:78:42:19:C8:6D:A7:DB:47:A0:D4:DB:0F:F3:86:23
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:80:75:32:cc:47:27:84:21:a5:35:76:0a:d4:00:98:f2:
a6:e0:10:ec:59:37:8b:0a:59:a3:17:dc:0d:73:a0:d0:2c:3f:
ad:b3:e7:29:c7:fa:12:a4:40:dd:93:45:08:f7:86:35:af:ef:
e1:c3:1c:0e:db:56:54:71:b5:ac:e4:b9:64:96:aa:1b:48:66:
8e:29:76:30:cf:9c:b2:1e:a1:9f:69:02:c1:4e:3f:9f:cf:31:
52:b0:61:15:dd:9a:0a:9d:ac:e6:64:50:e3:79:4d:d9:a0:e6:
38:e7:4b:ae:d0:85:23:10:8f:78:1e:34:93:42:a8:17:2e:c1:
6f:69:8a:79:dd:c2:75:8d:eb:4e:fc:ac:e1:fd:24:ff:9b:78:
90:7a:d6:33:a3:a0:d9:52:6f:c2:50:de:b6:17:8a:fb:ab:8c:
23:dd:4d:c5:bf:21:bb:10:c1:42:c4:cd:89:3f:58:f1:34:81:
42:62:11:06:94:bf:48:a8:96:e2:23:88:5e:24:c5:b0:df:0a:
48:5a:dd:f7:e3:5f:e7:f4:0b:26:5b:8b:16:6f:db:e3:ef:18:
58:af:93:8e:11:a5:61:72:d7:6a:15:58:60:53:74:bd:c5:9e:
1e:fe:3f:5a:5a:50:6e:1f:40:1b:d9:92:48:3c:11:c0:97:6b:
99:81:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:42:43 2025 by rpki-client