Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: Bta/tNvpbhgFPbOwZXqMeyVFJ0TROU6Z5USOiLvu+c4=
Subject key identifier: 5F:CD:71:BC:B3:17:EC:96:AE:1C:9C:8C:29:90:A0:CD:30:C2:CC:6C
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0199FBEAFEBA44EE18D104B369151929636D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 088A
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: RbPf1Ivt1dluSrxthU7pn2+7DCeohmTQYtTV1djpvbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fe:ba:44:ee:18:d1:04:b3:69:15:19:29:63:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=5fcd71bcb317ec96ae1c9c8c2990a0cd30c2cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:19:73:85:ff:c1:9a:57:47:86:2b:e8:bd:
77:5a:1a:72:54:dd:24:b9:91:6c:3b:32:cc:fd:02:
ae:5d:f9:e2:ee:b4:7a:b5:82:c1:33:8d:db:da:59:
6f:0a:84:ce:be:c3:a2:40:69:10:1c:50:07:4d:ed:
dd:a6:58:5e:8c:b2:fa:16:c4:37:db:1f:04:a4:23:
01:32:c8:8a:af:c6:25:eb:0c:dd:ea:f7:ff:67:a0:
6b:c6:2c:8d:55:e0:e5:b6:31:81:40:bd:96:fa:f3:
ef:e5:e2:e1:2a:8c:84:90:59:2c:c9:d4:84:ab:52:
46:12:91:fa:16:63:b9:1d:b0:0b:38:dd:d0:33:39:
41:34:d1:d0:45:dc:e6:89:db:37:5f:e4:d8:c7:d9:
6f:75:e6:60:ed:8f:51:6c:c4:80:a1:e0:b6:88:51:
9d:59:96:39:a9:21:3c:51:70:1a:17:d2:9a:e3:9a:
e0:c6:38:0e:fc:52:16:a2:26:52:91:84:68:e3:34:
eb:63:23:5d:c4:a7:22:06:49:4c:69:75:4e:17:d5:
1c:65:91:6e:26:60:a7:a4:6f:ad:c9:f4:9a:2a:39:
b2:0d:08:6b:8e:14:bc:16:c5:ae:5d:04:d6:cd:ff:
30:c6:39:06:eb:68:c2:d5:de:e4:c2:1d:01:e4:f0:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:71:BC:B3:17:EC:96:AE:1C:9C:8C:29:90:A0:CD:30:C2:CC:6C
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:44:af:5d:ce:d4:b9:48:f4:ca:e3:f4:7d:72:da:e6:0c:dc:
71:18:8f:01:ad:69:81:07:3b:da:5f:c5:b2:62:2b:a2:41:72:
d2:f0:8a:07:1a:96:b9:d5:af:0a:56:96:81:49:6b:69:69:19:
61:75:6b:06:9d:c3:c2:e7:af:e9:ac:f0:e2:d0:c6:ed:86:ea:
9b:ea:25:d7:3c:6b:d0:e1:76:18:2a:f5:2d:9f:5b:52:17:53:
43:c2:f1:e1:c3:93:d7:a2:42:6f:56:13:48:bd:aa:f2:8f:c0:
d5:e1:b5:54:0e:50:01:7a:6c:47:4c:9f:dd:c8:d8:6e:dc:2b:
3a:67:53:3b:22:0b:d0:10:bb:07:83:eb:33:a4:e2:85:0c:2e:
ef:a6:df:d4:77:00:df:1f:30:0c:91:cd:4a:c0:13:57:f0:e5:
91:63:ca:15:da:35:24:9a:ad:a7:1e:6c:b8:a8:c3:f2:6f:eb:
29:71:16:3e:7d:a7:4d:38:b6:1a:49:c6:c1:85:a5:81:87:54:
b6:e9:ef:a3:38:f6:26:7a:3e:a4:e1:f2:ab:2b:05:b8:c7:66:
01:0d:6a:0b:8a:be:d1:73:45:82:4b:cb:25:e0:3c:17:80:d0:
54:2b:3a:b2:6f:da:17:05:da:9f:eb:9b:8a:e8:ba:15:1b:0f:
8d:d5:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:54 2025 by rpki-client