Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: qIKLwym6D91ninFA8e87BqWyFUn+nQkunplqQKAzGYc=
Subject key identifier: 39:D8:CA:35:61:DE:33:C7:29:27:EC:6D:06:0B:FE:EB:66:90:3F:2A
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 0199165114DBD051D616A1F3E7EAB3E219B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 035F
Signing time: Thu 04 Sep 2025 20:00:36 +0000
Manifest this update: Thu 04 Sep 2025 20:00:36 +0000
Manifest next update: Fri 05 Sep 2025 20:00:36 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: PfQj6Wi2f5fZPa61OwvwdSQK8kW73GV4pkSYeIOsVBU=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:51:14:db:d0:51:d6:16:a1:f3:e7:ea:b3:e2:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Sep 4 20:00:36 2025 GMT
Not After : Sep 5 20:00:36 2025 GMT
Subject: CN=39d8ca3561de33c72927ec6d060bfeeb66903f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:78:36:6f:47:d7:c0:64:67:3c:91:0d:77:
30:03:78:08:9f:05:b2:21:0b:6b:cf:73:06:40:56:
96:75:8d:8b:67:a9:d1:4d:de:ae:00:70:6a:ee:e3:
62:86:ea:13:c8:da:3b:f4:74:37:68:e5:e5:5f:74:
84:7b:51:d6:e7:9b:20:58:66:21:09:80:ef:67:bd:
e6:02:8f:c1:2f:64:30:20:a3:2f:d9:03:fd:e7:64:
90:8e:ac:72:03:ec:b2:77:ab:ea:2a:0c:fe:a3:58:
37:ae:e7:fd:46:10:df:d8:f2:22:a9:de:2c:b0:d5:
31:2e:b3:95:05:bf:4f:2f:0a:6c:39:b0:fb:d8:ab:
4a:01:af:3f:6b:3a:96:9b:54:ae:76:7b:15:99:23:
24:75:c9:ed:22:18:1c:84:4b:d5:1a:85:35:e5:ba:
a4:34:ad:e9:8a:a9:64:71:15:92:c7:a7:ff:83:81:
fb:09:d0:f1:61:2a:cd:15:db:4e:6a:a9:02:f4:d4:
9c:8d:a2:ea:27:1c:62:aa:15:dd:77:be:8f:bd:e1:
3d:f8:5a:f5:f2:e9:28:cf:31:af:6b:91:26:11:96:
c0:bb:91:de:13:9b:e7:54:f7:71:96:5b:b1:82:22:
af:68:34:0b:43:85:0d:95:21:bb:bd:12:7a:26:ed:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:CA:35:61:DE:33:C7:29:27:EC:6D:06:0B:FE:EB:66:90:3F:2A
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a2:a3:9d:67:c8:30:75:2e:56:b6:3a:56:29:d3:b7:77:28:
1c:c3:19:1e:ff:63:a3:fb:c7:d5:f5:07:24:57:84:dc:4b:17:
ae:6e:5c:d2:e6:17:ce:a3:1d:93:bc:74:33:0f:11:5b:49:56:
67:de:aa:33:31:e7:e4:09:c6:77:12:f4:2d:d6:94:9d:df:22:
7b:77:a4:72:fb:6b:d0:cf:14:70:42:1a:62:da:93:43:86:30:
69:16:36:61:1b:3b:64:92:1f:5e:91:80:90:37:61:48:05:02:
28:90:48:21:8b:15:73:a9:86:a7:8a:b9:89:ec:80:31:43:94:
e3:c7:0b:dd:34:b8:9b:a5:3d:5a:df:10:4a:48:46:3e:8c:6e:
fb:3d:2b:9b:4a:16:64:79:d0:c9:3b:78:c3:1c:6b:f5:9a:d3:
bb:2a:16:29:18:d0:7f:b3:0d:2e:77:35:1e:03:d0:6d:4c:53:
26:34:ae:a2:f4:6b:1c:b0:27:b6:80:10:01:13:a8:ff:54:34:
e8:54:c5:73:49:4a:1d:28:c7:33:3b:1a:61:ce:94:28:ba:40:
af:4e:35:cb:c7:17:55:f1:36:89:ce:31:e7:56:13:a7:08:46:
be:f0:d7:83:30:84:27:bc:b4:ab:97:05:a8:27:4a:d7:2f:ca:
fe:9f:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:15 2025 by rpki-client