Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: vFMtP7eoNL7EcmV87qOOomU3e6dS7rVdvkUqlphKRS0=
Subject key identifier: 38:D4:AF:02:C2:49:5D:0D:58:F7:86:6A:93:19:AD:38:05:93:4E:11
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019A0B93BF01F52309326D10F455B25EA0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 0FF8
Signing time: Wed 22 Oct 2025 11:00:23 +0000
Manifest this update: Wed 22 Oct 2025 11:00:23 +0000
Manifest next update: Thu 23 Oct 2025 11:00:23 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: 9dF+gap0sO/DybYDv1d6XD30divP2mIx9mkPQpAQGOU=)
2: gJcVJ0djrH5rQDUfK1fCsLicbs0.roa (hash: FiBwswjBHp729mKlojR2ulY+J6meIBspX0VFQpsAgtk=)
3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:bf:01:f5:23:09:32:6d:10:f4:55:b2:5e:a0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Oct 22 11:00:23 2025 GMT
Not After : Oct 23 11:00:23 2025 GMT
Subject: CN=38d4af02c2495d0d58f7866a9319ad3805934e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:36:62:4d:f3:5d:22:12:da:2a:4c:e2:4f:
00:5d:8c:a0:e8:6c:5a:38:64:63:0d:6f:56:f4:5a:
4f:ec:2d:15:6e:b2:97:6b:ef:d3:77:ad:57:53:a0:
cf:24:36:ec:4c:d2:6e:43:c7:b9:c1:d1:60:64:1b:
ad:cb:35:17:e0:e3:4e:6d:c5:3b:fc:6e:fc:0f:8f:
2b:6f:5f:dc:59:f0:f2:e2:7c:f7:83:3f:16:4b:c1:
04:34:b5:5b:17:65:dc:ae:d6:48:eb:48:99:3d:94:
be:15:e0:1e:59:d5:33:96:5a:38:43:aa:80:2a:9b:
a8:22:4c:2c:8f:27:eb:ed:9d:90:ee:7d:e0:77:6e:
e2:67:83:6a:86:20:e7:4e:76:45:a0:e9:84:41:1f:
af:2d:92:d3:2d:94:72:d0:06:bc:90:63:56:88:3d:
e9:f8:97:cd:a4:46:77:a3:09:b5:dc:91:95:85:05:
44:89:05:6b:e6:56:de:be:36:0b:76:1b:97:27:0b:
96:41:d8:2e:fe:cd:bc:dc:32:7a:8c:f8:c8:ff:24:
ac:11:7c:6e:ca:f0:fb:ee:ed:dc:62:8a:23:1c:17:
2f:7e:3f:bb:fe:90:f4:99:5b:47:e0:e4:be:98:16:
7f:6c:1c:b4:87:84:9a:19:9c:37:49:94:40:ec:6a:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:AF:02:C2:49:5D:0D:58:F7:86:6A:93:19:AD:38:05:93:4E:11
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fc:32:53:f9:00:8d:0d:47:cd:76:86:c1:86:e1:87:cf:8a:
86:61:b5:85:2b:31:13:f1:c3:46:7a:72:cf:fe:7d:77:66:fd:
e8:6a:4b:cd:3b:38:dd:a5:56:31:06:a7:c0:f9:0a:f1:4f:b6:
ac:6b:47:96:36:35:fb:4f:f8:16:09:ea:81:5a:50:de:56:0a:
ba:ff:15:0b:b9:bd:5f:f2:31:8e:95:b6:6c:2b:db:7d:bb:48:
55:0d:f6:48:de:6f:4e:4b:4a:3e:d5:e2:90:c8:2d:6e:6f:ba:
16:88:07:d6:fb:a3:24:eb:06:c8:4b:7d:d1:3e:af:66:c7:44:
58:6b:f1:8c:8f:8c:1e:7a:51:91:6d:f9:7f:1e:17:bb:c3:dd:
50:03:a5:3f:15:45:8a:12:72:40:5c:ca:78:69:02:ab:47:10:
b6:ff:0c:29:63:5e:6e:ef:b7:29:86:4f:7d:26:cb:de:88:03:
cb:b8:95:18:b1:8e:7e:80:bf:7d:77:9b:f0:c3:15:02:e1:88:
d3:69:44:29:4b:9a:26:61:2a:9d:06:50:81:72:91:e3:09:e6:
a2:6b:3a:82:18:4e:fd:6c:9b:d4:ac:23:a2:c7:08:d6:7a:31:
3d:38:f0:a7:4b:80:ae:05:b4:ff:39:f4:61:59:95:c1:c6:86:
76:9c:ec:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLk78B9SMJMm0Q9FWyXqCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjUxMDIyMTEwMDIzWhcNMjUxMDIzMTEwMDIzWjAzMTEwLwYDVQQD
EygzOGQ0YWYwMmMyNDk1ZDBkNThmNzg2NmE5MzE5YWQzODA1OTM0ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQ2Yk3zXSIS2ipM4k8AXYyg6Gxa
OGRjDW9W9FpP7C0VbrKXa+/Td61XU6DPJDbsTNJuQ8e5wdFgZButyzUX4ONObcU7
/G78D48rb1/cWfDy4nz3gz8WS8EENLVbF2XcrtZI60iZPZS+FeAeWdUzllo4Q6qA
KpuoIkwsjyfr7Z2Q7n3gd27iZ4NqhiDnTnZFoOmEQR+vLZLTLZRy0Aa8kGNWiD3p
+JfNpEZ3owm13JGVhQVEiQVr5lbevjYLdhuXJwuWQdgu/s283DJ6jPjI/ySsEXxu
yvD77u3cYoojHBcvfj+7/pD0mVtH4OS+mBZ/bBy0h4SaGZw3SZRA7GpMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjUrwLCSV0NWPeGapMZrTgFk04RMB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPwyU/kA
jQ1HzXaGwYbhh8+KhmG1hSsxE/HDRnpyz/59d2b96GpLzTs43aVWMQanwPkK8U+2
rGtHljY1+0/4FgnqgVpQ3lYKuv8VC7m9X/IxjpW2bCvbfbtIVQ32SN5vTktKPtXi
kMgtbm+6FogH1vujJOsGyEt90T6vZsdEWGvxjI+MHnpRkW35fx4Xu8PdUAOlPxVF
ihJyQFzKeGkCq0cQtv8MKWNebu+3KYZPfSbL3ogDy7iVGLGOfoC/fXeb8MMVAuGI
02lEKUuaJmEqnQZQgXKR4wnmoms6ghhO/Wyb1KwjoscI1noxPTjwp0uArgW0/zn0
YVmVwcaGdpzsDg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:45:44 2025 by rpki-client