Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: Ki6oQCVE7JoRzkcP2rRRDDoqzbNFEjk+Tw7vI2vZm60=
Subject key identifier: EB:37:A9:11:56:0C:A0:44:EA:90:44:11:84:BA:DB:5E:99:24:3C:BE
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0197B88F6BAC33A19C456F4672D1C048DFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 075E
Signing time: Sat 28 Jun 2025 22:01:36 +0000
Manifest this update: Sat 28 Jun 2025 22:01:36 +0000
Manifest next update: Sun 29 Jun 2025 22:01:36 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: lMxJYbMEnZ9oXtzoFqWLAaI9Z3siWXpk6RqOf7EcGKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:6b:ac:33:a1:9c:45:6f:46:72:d1:c0:48:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Jun 28 22:01:36 2025 GMT
Not After : Jun 29 22:01:36 2025 GMT
Subject: CN=eb37a911560ca044ea90441184badb5e99243cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:ab:42:93:7d:0d:a5:bf:56:15:2d:a5:e3:
c5:78:14:b2:5d:b3:bb:87:5c:1b:ca:48:77:bf:ef:
56:3f:60:5b:dd:aa:cc:99:a8:11:5e:56:dc:89:26:
f3:61:d2:94:f6:4a:c1:8b:64:f9:05:99:d0:43:25:
af:04:02:81:b0:00:73:fc:e5:3d:e9:c8:47:aa:31:
e1:67:25:66:a6:6c:a7:c4:e3:70:ad:1d:5a:55:32:
92:94:a5:06:1c:cf:d2:48:89:34:d1:04:77:7c:be:
dd:d5:aa:ac:ad:11:49:d7:6c:8a:93:9a:e2:6b:9d:
ab:f2:20:70:c0:53:04:c4:ba:e5:38:a4:58:ea:73:
42:af:c5:08:e4:85:29:95:c3:0e:bc:31:f5:65:96:
f3:8c:a4:21:05:1c:72:be:98:4f:06:2c:e4:20:21:
d2:0e:e9:07:d0:b5:5a:c1:25:b4:76:4e:81:c4:11:
1e:19:f5:7c:16:6c:24:93:70:a6:92:34:cc:15:3b:
39:1b:c7:26:56:45:f2:ac:4e:99:2b:cf:59:3f:62:
30:29:8d:6f:b0:ac:31:04:36:a6:9c:fb:a5:63:dc:
48:04:b2:4c:39:99:34:80:c4:12:ff:9c:f3:a0:b7:
46:25:1a:5d:e2:51:e6:77:f3:48:db:65:63:46:8d:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:A9:11:56:0C:A0:44:EA:90:44:11:84:BA:DB:5E:99:24:3C:BE
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:e1:b5:10:12:26:f4:1a:40:6f:8c:b1:00:2a:bb:96:b3:
fe:44:66:97:54:1f:7f:47:6a:d3:58:89:d6:0d:06:1f:74:96:
50:12:96:49:97:bf:5b:f6:2e:78:68:b8:39:2d:c2:ea:fa:9f:
4b:27:62:d4:1c:50:20:98:12:c5:04:ee:69:31:b3:0c:47:a2:
de:e3:47:95:a0:15:b5:b8:11:08:16:4c:e9:ca:e3:87:25:e1:
cc:31:9c:02:33:5a:2f:42:c3:f5:87:2c:f3:de:ec:15:1f:75:
59:3f:8a:55:67:ce:78:56:04:74:c7:d1:7d:8a:f8:df:0c:f2:
4f:ac:99:d3:34:0a:23:e3:31:fe:0c:75:1b:ba:fd:4e:ff:7a:
73:1d:48:7b:52:53:77:50:91:8b:8c:f3:32:5d:b0:7e:de:56:
f2:e3:3b:ae:4e:a6:1f:14:3c:19:57:1d:78:b9:16:31:dc:d9:
1a:4b:fe:82:c2:cd:a7:43:65:c9:95:9c:50:30:8b:19:88:89:
e2:91:cc:f8:84:9e:34:31:45:b7:c9:44:be:1c:fa:bb:02:bb:
d5:f7:0d:88:62:21:99:eb:e8:00:d0:ca:3f:6c:f1:97:ae:d5:
a7:db:2f:cd:7f:2c:e1:41:a4:f8:c5:c6:41:db:cb:44:c4:53:
2d:24:6b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j2usM6GcRW9GctHASN+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTQ3YTg1M2I1NTI4NzZhNzFiNzU3MGQwMDE0ZTA2NGI0
MzgwZmIwHhcNMjUwNjI4MjIwMTM2WhcNMjUwNjI5MjIwMTM2WjAzMTEwLwYDVQQD
EyhlYjM3YTkxMTU2MGNhMDQ0ZWE5MDQ0MTE4NGJhZGI1ZTk5MjQzY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonSrQpN9DaW/VhUtpePFeBSyXbO7
h1wbykh3v+9WP2Bb3arMmagRXlbciSbzYdKU9krBi2T5BZnQQyWvBAKBsABz/OU9
6chHqjHhZyVmpmynxONwrR1aVTKSlKUGHM/SSIk00QR3fL7d1aqsrRFJ12yKk5ri
a52r8iBwwFMExLrlOKRY6nNCr8UI5IUplcMOvDH1ZZbzjKQhBRxyvphPBizkICHS
DukH0LVawSW0dk6BxBEeGfV8Fmwkk3CmkjTMFTs5G8cmVkXyrE6ZK89ZP2IwKY1v
sKwxBDamnPulY9xIBLJMOZk0gMQS/5zzoLdGJRpd4lHmd/NI22VjRo2AYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs3qRFWDKBE6pBEEYS6216ZJDy+MB8GA1UdIwQY
MBaAFJWkeoU7VSh2pxt1cNABTgZLQ4D7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGIt
ZTg2NWZkOWE2MjJmLzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGItZTg2NWZkOWE2MjJm
LzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFLhtRAS
JvQaQG+MsQAqu5az/kRml1Qff0dq01iJ1g0GH3SWUBKWSZe/W/YueGi4OS3C6vqf
Sydi1BxQIJgSxQTuaTGzDEei3uNHlaAVtbgRCBZM6crjhyXhzDGcAjNaL0LD9Ycs
897sFR91WT+KVWfOeFYEdMfRfYr43wzyT6yZ0zQKI+Mx/gx1G7r9Tv96cx1Ie1JT
d1CRi4zzMl2wft5W8uM7rk6mHxQ8GVcdeLkWMdzZGkv+gsLNp0NlyZWcUDCLGYiJ
4pHM+ISeNDFFt8lEvhz6uwK71fcNiGIhmevoANDKP2zxl67Vp9svzX8s4UGk+MXG
QdvLRMRTLSRrpw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:26:02 2025 by rpki-client