Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier: vXnyIItrQkeLJkK1funcWJjgzvi22vB1GlS5wm24Ngc=
Subject key identifier: 41:84:C4:3D:06:1A:E9:AB:83:43:FF:2C:86:3E:F1:CA:E0:B8:57:4D
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 019748C3276D9850F6EFCCE282F7D39F3B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number: 0270
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: K4rI69KKIJmjQM0sR/AHOHQ+0ubOC0y7duvw7Os4j1U=)
2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:27:6d:98:50:f6:ef:cc:e2:82:f7:d3:9f:3b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=4184c43d061ae9ab8343ff2c863ef1cae0b8574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:48:0c:a4:5e:e2:0b:78:3c:65:c9:19:42:
5a:bb:23:66:c7:b5:6a:ce:67:93:ec:04:de:ae:41:
0e:e0:f6:14:f8:b0:95:ab:18:63:9a:35:05:7a:ee:
51:32:92:9a:a1:72:f7:ed:7c:e3:2a:8c:05:1b:7f:
17:a7:63:a6:eb:bf:4e:c8:9b:c8:e1:ab:fc:ba:d4:
f9:3c:8a:1e:d2:c8:a5:48:b9:5d:a1:ed:84:26:85:
cc:b1:a8:6a:cb:70:85:e1:90:8c:2f:f6:0b:e9:54:
03:38:cf:46:6c:0e:45:2c:8f:cd:58:a7:d9:29:55:
79:32:3b:22:ec:44:5a:56:74:9a:9c:15:36:1f:fc:
d9:56:ed:9e:3d:9f:c4:9c:18:f6:c1:72:9b:91:57:
10:a3:d5:d5:15:ff:1b:48:03:84:c9:c0:13:1b:47:
81:2f:38:f0:51:7e:0f:69:06:ed:c2:84:a1:5f:69:
d9:39:12:d0:12:06:5d:35:91:9f:4e:7f:d3:ca:0a:
09:00:7f:71:73:3d:e0:d6:c1:a1:a8:37:ab:2d:ec:
88:14:8d:c3:25:64:a7:17:77:f5:b1:cc:8d:7b:3a:
55:13:75:3e:f9:76:a9:51:75:8a:ab:f2:a2:43:d9:
97:ee:ed:b0:8b:5f:1c:fc:41:17:1f:7b:ca:4e:1c:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:C4:3D:06:1A:E9:AB:83:43:FF:2C:86:3E:F1:CA:E0:B8:57:4D
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:dd:34:44:f5:64:49:b4:ab:06:25:2b:00:84:ff:37:47:
b4:3f:f7:c2:4c:be:e3:3d:52:4d:d9:ec:05:6b:37:04:c4:c0:
92:c6:59:c7:0d:52:fa:25:b3:60:7f:56:c9:55:8d:91:b9:84:
87:95:9c:62:56:7e:74:30:50:6a:d4:d7:56:f4:a0:0c:dd:99:
20:a5:e5:42:f6:7b:e7:59:b7:75:d3:1a:5a:e9:99:b0:73:04:
14:3d:a6:14:36:c7:44:9d:1e:dc:b0:3d:bb:7c:cb:d0:cd:6f:
65:62:a4:79:0b:7a:96:1f:95:44:87:76:11:e7:8d:6a:a2:a3:
70:f7:17:1e:a7:21:d6:74:c0:1b:d0:cc:16:01:14:74:58:73:
ef:fc:8f:8a:e8:7b:8f:22:a1:08:32:98:87:49:86:79:71:fb:
d5:d7:8f:a5:29:7e:8b:d6:b4:e6:28:4b:2b:dd:a9:ba:3e:77:
79:91:0e:a8:d6:69:7c:01:04:7c:7c:42:22:3b:1c:5b:47:d8:
8d:ec:de:db:b5:08:68:fb:dd:d0:2e:a6:90:3a:8d:9e:1c:ae:
71:6d:65:ca:d4:43:36:2e:a0:74:f1:1d:3f:45:c3:f9:e0:c2:
4a:d5:04:37:e0:69:bf:4a:39:af:19:3c:9c:86:9f:63:c6:83:
96:f1:9c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwydtmFD278zigvfTnzuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4
MTllNDQwHhcNMjUwNjA3MDUwMDM4WhcNMjUwNjA4MDUwMDM4WjAzMTEwLwYDVQQD
Eyg0MTg0YzQzZDA2MWFlOWFiODM0M2ZmMmM4NjNlZjFjYWUwYjg1NzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPhIDKRe4gt4PGXJGUJauyNmx7Vq
zmeT7ATerkEO4PYU+LCVqxhjmjUFeu5RMpKaoXL37XzjKowFG38Xp2Om679OyJvI
4av8utT5PIoe0silSLldoe2EJoXMsahqy3CF4ZCML/YL6VQDOM9GbA5FLI/NWKfZ
KVV5Mjsi7ERaVnSanBU2H/zZVu2ePZ/EnBj2wXKbkVcQo9XVFf8bSAOEycATG0eB
LzjwUX4PaQbtwoShX2nZORLQEgZdNZGfTn/TygoJAH9xcz3g1sGhqDerLeyIFI3D
JWSnF3f1scyNezpVE3U++XapUXWKq/KiQ9mX7u2wi18c/EEXH3vKThxAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGExD0GGumrg0P/LIY+8crguFdNMB8GA1UdIwQY
MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt
ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0
LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQfdNET1
ZEm0qwYlKwCE/zdHtD/3wky+4z1STdnsBWs3BMTAksZZxw1S+iWzYH9WyVWNkbmE
h5WcYlZ+dDBQatTXVvSgDN2ZIKXlQvZ751m3ddMaWumZsHMEFD2mFDbHRJ0e3LA9
u3zL0M1vZWKkeQt6lh+VRId2EeeNaqKjcPcXHqch1nTAG9DMFgEUdFhz7/yPiuh7
jyKhCDKYh0mGeXH71dePpSl+i9a05ihLK92puj53eZEOqNZpfAEEfHxCIjscW0fY
jeze27UIaPvd0C6mkDqNnhyucW1lytRDNi6gdPEdP0XD+eDCStUEN+Bpv0o5rxk8
nIafY8aDlvGcww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:05 2025 by rpki-client