Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: ANhhuDnSUOzRHlNzfJaMt9tlPwnfBkhPw3pokiDXhIQ=
Subject key identifier: DF:23:91:0A:33:3C:12:1B:4D:76:5E:69:D2:B4:17:C5:25:C1:D3:2C
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 01974FA0E9314650619B7A2C5EF6B353B22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 1514
Signing time: Sun 08 Jun 2025 13:00:34 +0000
Manifest this update: Sun 08 Jun 2025 13:00:34 +0000
Manifest next update: Mon 09 Jun 2025 13:00:34 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: M9KZNVl2gzdV+Gn2Tj0RP3E+rxYWUWEKTXpy0SiA08I=)
2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:e9:31:46:50:61:9b:7a:2c:5e:f6:b3:53:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Jun 8 13:00:34 2025 GMT
Not After : Jun 9 13:00:34 2025 GMT
Subject: CN=df23910a333c121b4d765e69d2b417c525c1d32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:32:81:2f:9e:d4:03:98:f6:41:fc:c2:70:
9a:70:c3:26:53:26:57:32:00:e6:94:c3:28:12:14:
2d:95:cc:cd:98:97:c5:9a:f8:f5:a7:bf:79:f3:fa:
40:1d:87:39:ff:a3:bd:06:eb:d4:8d:71:0c:fa:20:
2e:67:05:28:78:3b:38:05:ba:3f:19:c7:51:56:a4:
7f:a4:ab:21:50:94:bc:5f:b5:21:0a:b5:78:9b:6c:
32:3f:5f:8c:22:4c:de:57:c8:6e:9a:e8:1e:99:b0:
9d:ea:3f:b9:1a:11:71:bc:0d:b9:5b:be:6c:50:ab:
73:cd:df:22:1f:c1:ac:c9:2d:b0:43:37:ac:50:f1:
ba:a8:b3:2c:ad:cd:fc:f0:7e:fb:33:4c:34:e9:00:
d7:54:c2:2a:02:e4:35:9c:73:1d:62:c8:8c:32:18:
c4:f5:4f:c1:92:8c:9f:93:42:89:3b:61:95:a4:b4:
d3:14:a4:0d:57:7b:b3:c4:0e:dc:c4:88:a3:40:b2:
c5:9d:c2:c2:e0:56:99:08:0f:46:5e:84:f7:03:29:
24:fd:74:77:1e:03:36:c1:d2:8e:02:5e:06:1b:c1:
b7:ed:fd:96:2b:13:77:dd:29:e9:c4:29:b4:ed:5f:
27:cd:32:67:54:33:40:3e:52:16:eb:fe:33:17:13:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:91:0A:33:3C:12:1B:4D:76:5E:69:D2:B4:17:C5:25:C1:D3:2C
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:45:f9:9d:81:a0:4d:75:55:65:1d:5a:65:33:ec:fe:0b:2a:
fb:46:b9:86:e3:9a:fa:f2:c0:b1:e9:22:12:e0:f0:90:7a:9a:
a9:96:25:a0:e3:72:dc:f6:b5:09:bb:cb:99:99:e9:78:f7:10:
aa:62:ad:02:dd:80:c7:c1:b6:98:b0:e5:13:7b:a8:2c:e3:14:
dd:a2:b4:62:2c:58:1a:99:29:5d:63:82:c9:61:d0:c2:7d:03:
11:bc:1d:df:03:3d:b3:cf:ff:75:d3:46:58:55:10:e2:78:e2:
b2:55:b1:c4:a9:dd:c1:10:8b:39:5f:98:34:c6:ac:7e:88:12:
9a:88:82:aa:f1:3e:d2:ca:4f:41:a3:46:d1:60:ef:99:09:36:
64:61:e0:ec:55:ae:13:b7:58:56:83:45:8b:f1:0a:1a:24:d7:
37:31:c6:69:da:b9:5b:93:cd:f6:7c:9f:05:15:41:f0:8e:36:
07:35:b0:d5:5e:70:65:6e:e9:52:9a:cf:96:cb:42:0c:1e:a6:
6e:96:4d:a6:ae:81:21:28:db:4b:59:62:de:fb:0c:8e:3f:97:
10:1f:78:3f:e3:9d:67:d1:b4:51:0a:81:7d:fb:5c:c1:2e:19:
2c:fe:01:ee:74:0e:fe:99:cd:b3:ee:47:84:91:ae:1b:9d:b8:
d4:9c:dd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoOkxRlBhm3osXvazU7IvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTQ3NzI0NjNjZGJlMTJiNzNiMTZhZDBkMjUxNmYwN2Q2
MzgzMGQwHhcNMjUwNjA4MTMwMDM0WhcNMjUwNjA5MTMwMDM0WjAzMTEwLwYDVQQD
EyhkZjIzOTEwYTMzM2MxMjFiNGQ3NjVlNjlkMmI0MTdjNTI1YzFkMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vcygS+e1AOY9kH8wnCacMMmUyZX
MgDmlMMoEhQtlczNmJfFmvj1p7958/pAHYc5/6O9BuvUjXEM+iAuZwUoeDs4Bbo/
GcdRVqR/pKshUJS8X7UhCrV4m2wyP1+MIkzeV8humugembCd6j+5GhFxvA25W75s
UKtzzd8iH8GsyS2wQzesUPG6qLMsrc388H77M0w06QDXVMIqAuQ1nHMdYsiMMhjE
9U/Bkoyfk0KJO2GVpLTTFKQNV3uzxA7cxIijQLLFncLC4FaZCA9GXoT3Aykk/XR3
HgM2wdKOAl4GG8G37f2WKxN33SnpxCm07V8nzTJnVDNAPlIW6/4zFxOt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8jkQozPBIbTXZeadK0F8UlwdMsMB8GA1UdIwQY
MBaAFO+kdyRjzb4StzsWrQ0lFvB9Y4MNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEt
ODAxY2FiNzIwZWRiLzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEtODAxY2FiNzIwZWRi
LzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEX5nYGg
TXVVZR1aZTPs/gsq+0a5huOa+vLAsekiEuDwkHqaqZYloONy3Pa1CbvLmZnpePcQ
qmKtAt2Ax8G2mLDlE3uoLOMU3aK0YixYGpkpXWOCyWHQwn0DEbwd3wM9s8//ddNG
WFUQ4njislWxxKndwRCLOV+YNMasfogSmoiCqvE+0spPQaNG0WDvmQk2ZGHg7FWu
E7dYVoNFi/EKGiTXNzHGadq5W5PN9nyfBRVB8I42BzWw1V5wZW7pUprPlstCDB6m
bpZNpq6BISjbS1li3vsMjj+XEB94P+OdZ9G0UQqBfftcwS4ZLP4B7nQO/pnNs+5H
hJGuG5241Jzdog==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:02 2025 by rpki-client