Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: H1W7GSyMFwZohkguYNgVNKgX3eaEpuYwDTk4ht3YXkY=
Subject key identifier: 76:FF:C2:22:6B:E0:E6:6A:8E:32:8A:45:DA:39:FB:D9:AB:DF:B2:3F
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0198D472BB6373D44D01C9C1D7798F95678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 07F1
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: KT+4Y6NgMW5fP8lZGQ8OeSkvz2XnLNf7uCLnCb5e6sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bb:63:73:d4:4d:01:c9:c1:d7:79:8f:95:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=76ffc2226be0e66a8e328a45da39fbd9abdfb23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:6e:06:28:40:53:c0:2c:52:80:a9:fd:39:
89:b3:68:3e:bc:d4:91:86:d6:0f:b0:ff:0d:46:30:
a1:a0:76:c1:fe:08:0d:12:c8:b7:55:9f:3a:74:ef:
65:04:bf:70:68:d2:8e:e2:6a:8d:d1:3c:fb:c6:56:
8e:56:e7:a7:ed:82:16:39:89:bf:bf:4e:05:49:d9:
a2:48:c1:36:fc:2a:d0:1a:64:22:1c:9d:18:3c:16:
d6:53:ee:ee:18:e5:c2:61:77:25:f5:ea:ca:f1:f3:
b2:67:88:51:ad:0c:56:f9:0d:a6:9c:87:75:7b:50:
2d:fb:c1:4f:64:4a:f8:9e:95:14:66:55:00:7b:86:
18:be:f4:15:f2:c6:95:eb:2d:15:d9:21:c8:ef:24:
f4:4c:5b:98:32:b2:a5:91:af:c2:88:ab:e2:46:f1:
4a:ac:6b:16:d2:ad:01:88:eb:be:4f:03:3e:56:a4:
c0:cd:20:d3:49:53:1f:bd:e7:24:e9:14:52:0d:d8:
dc:28:60:c6:ae:32:1b:2e:68:30:8a:30:24:e3:fd:
b2:22:80:86:ea:9b:80:3e:b1:f5:31:0c:22:c3:ac:
9e:5a:44:4f:0a:3b:77:29:29:9d:30:35:f3:4f:6f:
5d:4c:3d:e3:07:82:0d:b8:6e:95:08:39:76:e2:1b:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:C2:22:6B:E0:E6:6A:8E:32:8A:45:DA:39:FB:D9:AB:DF:B2:3F
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:5d:b6:de:af:6c:87:36:40:a1:0c:2c:71:96:e3:59:e7:
68:65:dc:ef:58:90:05:6b:47:7d:9b:55:30:b8:f9:7f:0b:30:
8a:fe:8b:9f:30:f3:64:93:ef:9f:72:95:94:b5:7d:a9:79:e9:
0f:cc:b4:69:49:65:b9:2a:9b:8c:3c:b8:08:d3:4e:1f:0d:6b:
a9:9e:2b:2b:41:95:4d:73:5d:09:24:eb:e8:0e:d4:4a:1f:2b:
07:37:9d:f9:b3:bc:e5:5e:da:37:e6:45:a5:3b:cb:8a:1b:98:
08:09:ab:61:f4:b3:83:c5:8b:a4:7f:10:36:54:8a:f5:ac:c0:
c8:ef:f0:b1:db:5b:67:f7:c8:f3:6b:3f:99:e0:78:10:e6:34:
d2:24:fc:29:b5:77:01:be:d1:a6:83:59:25:f8:0b:fb:e4:13:
90:68:10:d7:bc:e9:f8:24:12:32:fd:24:34:b4:7a:6a:17:e9:
e5:ef:de:c4:fe:d3:94:53:72:7e:eb:a3:a8:1b:27:86:a9:d2:
bd:23:65:95:52:ae:04:0f:92:c9:83:35:aa:82:8e:7c:9e:36:
37:4f:7b:3b:c8:1e:86:8e:f0:98:66:57:23:b2:84:52:f8:cd:
c5:4f:83:2e:71:36:e3:fa:63:70:bf:be:cc:7c:43:40:a8:95:
a9:63:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:58 2025 by rpki-client