Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft (raw, json)
Hash identifier: S4NXEK84UGd4B0mLl24SKklQynt172Cr5korLzxUZmk=
Subject key identifier: B5:33:A8:33:A9:51:93:1B:6A:50:62:67:64:EF:8B:00:70:2D:60:02
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 0196342D351AC18504B87675E1A5244E4878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
Manifest number: 03F8
Signing time: Mon 14 Apr 2025 12:01:39 +0000
Manifest this update: Mon 14 Apr 2025 12:01:39 +0000
Manifest next update: Tue 15 Apr 2025 12:01:39 +0000
Files and hashes: 1: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl (hash: qvvC2acTtVwgxnEYC66q7IhDaPSeqf3VQyrqHvZnEeQ=)
2: RzCT0T6lenhrM__LsTG4BuTaY1c.roa (hash: tV5Y+kdqm/i7NbITAbNfFa3giabHc3nUwFdTcDJkx8o=)
3: nEbJ8kj8EsOb0Pl1MdpImgbdyyw.roa (hash: N5YOsZE+UbwNvaVhf6SZUKY1g4DzBzMgeef/sv8kcFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:2d:35:1a:c1:85:04:b8:76:75:e1:a5:24:4e:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Apr 14 12:01:39 2025 GMT
Not After : Apr 15 12:01:39 2025 GMT
Subject: CN=b533a833a951931b6a50626764ef8b00702d6002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:df:d6:42:1f:db:b9:62:83:6c:75:94:ad:
29:b4:c8:92:2a:48:16:b7:f4:75:9d:e4:fc:82:e2:
58:41:ee:28:13:18:9f:93:ac:36:b4:3b:b9:a0:e6:
cd:34:9a:c4:80:52:42:14:ff:ae:0e:f3:d3:c2:6a:
33:23:4f:16:68:ca:83:1f:3d:4f:52:dd:d4:4f:f5:
cf:e6:64:03:cb:49:d2:3d:52:51:d5:d2:cc:7c:9e:
71:76:bc:6f:84:dd:66:91:ee:a6:c5:57:b1:df:c5:
f2:c9:b5:61:dc:d8:9d:25:5a:a6:25:35:41:e5:42:
0b:4e:de:06:cc:ae:98:84:ec:a4:9a:fe:1a:40:d2:
9c:28:14:3a:25:17:cd:13:f3:b9:5d:3f:88:55:f1:
ac:99:54:84:c1:21:b0:83:19:38:85:eb:77:a4:20:
88:7a:bf:1a:28:60:74:1c:12:f2:4b:fc:d7:f5:78:
d5:7b:d7:75:2b:58:5e:5e:29:a5:ac:6e:e0:11:7d:
bc:58:bf:53:bb:17:4f:4b:90:bf:6e:bd:9e:f8:c8:
52:79:5d:fc:f6:3b:7e:04:50:6f:fc:9f:9a:f2:d8:
cc:3a:20:71:23:98:b2:73:58:c4:68:54:50:df:2c:
a0:24:79:4e:61:40:5c:af:c2:67:98:aa:0f:a9:4a:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:A8:33:A9:51:93:1B:6A:50:62:67:64:EF:8B:00:70:2D:60:02
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:70:f8:fe:36:41:32:99:33:85:8a:d7:9e:bf:dc:89:56:
ff:4f:e1:b2:38:68:f4:bd:c4:bf:de:4a:52:07:e7:07:e1:8f:
af:9d:1a:fd:86:c6:82:46:12:f2:da:97:36:43:9a:a4:8f:7b:
13:e2:f1:1b:a1:f2:a9:69:f7:ba:b2:3c:05:ad:a8:e4:5b:10:
6e:79:84:c1:b4:67:1a:98:60:e1:36:be:db:61:24:25:e9:71:
30:49:5b:14:c1:bf:51:3d:f8:a9:2f:38:f3:b5:3b:a4:c3:24:
8a:c9:ee:ef:8c:36:a1:f3:e7:d3:45:29:6e:8e:d5:40:4c:2c:
c2:13:5d:06:8b:82:eb:22:4d:fb:31:f9:f3:68:28:e2:bf:37:
67:4e:d2:b2:05:d8:ba:ff:09:1a:00:d3:04:b1:12:07:ab:2d:
9f:89:62:73:cd:4f:9e:22:62:ae:bc:7c:40:40:b1:4a:19:75:
79:27:14:79:21:bd:11:d1:8e:1b:13:4f:ca:09:d7:45:4c:92:
54:93:56:39:b2:86:01:0f:dd:cc:ca:e8:a0:ca:56:cd:3d:33:
64:cb:4c:ef:8b:b3:fc:5e:46:8d:73:9f:a5:0a:d9:96:72:1b:
04:5d:5e:d6:b6:04:48:22:ce:f3:ee:8e:6d:15:1d:97:f9:61:
03:e6:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:55:15 2025 by rpki-client