Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier: khNbw7JHWfRmb1/wgP8qhLaVCVqTjeqp6+1zUDm9wDs=
Subject key identifier: B9:CB:5A:76:A1:4D:94:10:B1:52:58:D0:AC:E0:77:06:65:C8:82:A6
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial: 01974A43FAAA1B9DBCCC37171DE402BDD844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number: 0BCF
Signing time: Sat 07 Jun 2025 12:00:58 +0000
Manifest this update: Sat 07 Jun 2025 12:00:58 +0000
Manifest next update: Sun 08 Jun 2025 12:00:58 +0000
Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: eud2N1n7VhPjKS/AivQaPZAjPAKgA6ucXlUKoksiQ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:fa:aa:1b:9d:bc:cc:37:17:1d:e4:02:bd:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Validity
Not Before: Jun 7 12:00:58 2025 GMT
Not After : Jun 8 12:00:58 2025 GMT
Subject: CN=b9cb5a76a14d9410b15258d0ace0770665c882a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:49:cf:1d:94:af:66:c8:d1:33:81:f6:28:
19:9e:1d:ae:b3:73:5d:8d:1d:ed:4f:e9:1c:b1:09:
97:92:fb:f1:e2:c6:00:e6:82:40:a5:51:d1:3b:69:
7d:93:ce:c8:0a:bc:cf:bb:cc:8a:e4:8c:24:6d:62:
62:77:a3:6d:aa:4c:51:b2:45:22:89:f5:24:7a:af:
8c:d0:cc:0e:84:e4:fd:ea:6f:c5:5f:82:73:27:5e:
a0:a0:7d:24:cb:cd:10:ba:3e:89:db:8d:b6:37:d9:
c4:75:63:df:64:b8:54:02:73:b4:03:ff:c3:c3:77:
8b:5a:95:d2:73:c1:2a:16:7d:8b:d1:6f:27:a5:da:
9c:46:e7:80:aa:cc:67:9e:71:cb:06:42:74:5b:a4:
95:fd:51:d5:51:ce:09:f9:18:aa:53:a3:6b:9e:32:
be:32:6a:83:50:c1:73:0c:ca:29:b3:58:7b:f6:2b:
0e:8f:7b:1c:3d:16:6d:e3:fb:cd:82:c5:71:f2:c5:
32:a9:eb:cc:be:6f:25:25:ba:52:6c:f8:ef:ef:03:
20:d5:c0:1b:ef:e3:69:31:61:40:8f:92:75:ba:0c:
1f:39:10:e0:63:8f:47:c5:d3:77:fa:42:8d:19:9f:
d4:79:2a:9c:25:83:81:c7:6e:f1:de:bf:9e:44:d0:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:5A:76:A1:4D:94:10:B1:52:58:D0:AC:E0:77:06:65:C8:82:A6
X509v3 Authority Key Identifier:
keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:76:a4:b6:e0:b7:be:b3:31:38:c5:c4:0d:83:5f:da:42:
2b:f2:c0:3a:36:1a:f7:9e:cc:86:87:54:fc:34:c6:20:a7:89:
01:a4:2e:fc:d2:f0:89:63:4b:6c:9c:2e:33:0e:03:68:85:a6:
e8:95:1f:20:a2:2c:35:03:3a:75:93:c2:da:99:44:8f:fc:aa:
c5:1f:6d:c0:8b:fc:c1:1a:80:b4:2f:69:ad:7e:a1:12:77:07:
2d:6d:95:18:82:55:f3:e3:67:1b:9d:4d:9a:24:72:a8:f7:91:
59:4e:31:67:59:0e:0d:b4:9a:26:17:08:6b:f1:84:94:e7:32:
a7:cc:19:e1:55:a9:79:a3:f1:2b:06:03:8a:1e:43:a6:98:09:
bf:c1:aa:4a:ea:56:c4:72:22:f8:dc:ab:51:82:59:e0:56:d7:
84:7d:2d:89:05:8c:31:26:e7:92:9b:f3:7b:8e:2a:95:dc:ce:
46:dc:d9:05:9e:54:ee:c6:17:cf:b1:6f:35:ea:f2:42:0a:b2:
fc:52:a4:d5:de:a8:59:9a:3d:aa:d5:50:31:f5:92:ee:25:76:
4a:48:d0:c7:f9:3f:b8:51:83:12:3e:68:86:75:f8:8d:9c:7c:
c7:e7:4c:d4:65:35:9c:6c:75:4f:ad:1d:4f:67:17:13:d1:f0:
82:bc:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:00 2025 by rpki-client