Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: i8LAyTad7LqtUS27HfeQoYunva9w/l+RH7TYP8Kyr60=
Subject key identifier: 4A:96:5B:45:F8:E2:B2:92:B9:57:7B:CB:8D:61:80:F0:95:A6:6F:60
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019A047EE2F57BBCD9E852DBB1E500385B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 1196
Signing time: Tue 21 Oct 2025 02:00:15 +0000
Manifest this update: Tue 21 Oct 2025 02:00:15 +0000
Manifest next update: Wed 22 Oct 2025 02:00:15 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: ieve5Egt26nM3hy4iq8D9n0KwXPkOucKWkbNGZyPFDg=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7e:e2:f5:7b:bc:d9:e8:52:db:b1:e5:00:38:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Oct 21 02:00:15 2025 GMT
Not After : Oct 22 02:00:15 2025 GMT
Subject: CN=4a965b45f8e2b292b9577bcb8d6180f095a66f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:6b:0f:95:93:57:b8:28:ac:2e:9d:38:a8:
32:e6:1d:03:07:cd:3d:0a:7e:a4:20:3c:17:1e:1b:
2b:ef:ea:eb:e1:3d:b1:b5:38:09:10:bc:89:ff:4d:
f2:14:6b:4c:be:4f:a9:49:80:d2:43:32:da:a7:5a:
83:5c:34:2a:36:0e:a1:a9:d6:2b:da:cb:ee:b6:ae:
e9:4c:ff:3f:dd:02:dc:6d:0e:b6:9b:65:fe:97:31:
c2:c4:15:42:77:3e:f1:54:1e:1a:ff:56:d1:32:e3:
9b:56:b3:6a:39:9a:42:37:5e:92:84:0d:53:ec:c2:
5a:a7:71:df:e4:55:09:d9:64:51:81:a5:09:a8:0c:
41:3d:1d:43:61:05:8c:dc:19:91:e0:96:42:b9:7b:
5d:a1:25:ca:68:1c:df:2a:c1:1f:94:9a:e5:2d:61:
1d:be:4b:28:85:ce:e9:3b:fa:0f:d2:85:1d:30:b2:
33:ef:55:bd:21:c2:12:89:77:e0:cf:cf:0f:8b:1b:
f3:21:47:23:75:26:3d:e5:20:14:80:d9:a7:92:67:
24:6e:d0:a1:44:68:b9:95:dc:60:82:ee:12:58:48:
8e:9b:6c:ae:46:92:64:0f:b5:87:32:dd:8b:3c:4f:
d7:f7:d5:e8:89:23:f8:21:fc:a1:12:7a:1b:75:f5:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:5B:45:F8:E2:B2:92:B9:57:7B:CB:8D:61:80:F0:95:A6:6F:60
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:0b:b6:6b:98:c1:b8:e3:e0:d6:47:e0:31:de:2f:96:13:e7:
60:ed:ca:3c:0a:3b:4c:45:7e:54:98:4a:2b:b8:e9:e7:60:a8:
8f:e5:6f:88:42:59:dc:1c:7f:a2:ff:39:ea:91:f0:bd:61:fc:
e8:b2:50:c9:a3:55:81:df:36:b1:12:63:d8:a3:88:f6:b3:80:
4a:d4:8f:a8:97:b3:79:09:33:a7:f1:96:16:6a:e2:f0:01:41:
8b:a0:9b:b0:8f:8f:a4:9f:e2:5f:81:e1:61:08:c5:71:31:11:
7d:7a:0a:2f:cd:0b:8e:c8:fc:33:4c:d3:77:ae:e5:60:fd:25:
82:2a:f9:fa:e7:ec:ca:44:b3:db:4d:45:88:82:70:5e:f5:9f:
0b:f1:22:ca:60:55:6c:51:5d:44:0e:fb:92:c0:4d:f3:6f:24:
5b:83:37:8a:cb:c9:a2:64:58:ad:96:c2:14:7c:4e:59:f3:3e:
59:c1:58:cc:83:7d:1e:bf:ea:2a:51:ad:64:5b:c1:04:7a:1f:
bf:63:ec:a0:78:f9:5f:28:cd:fa:c2:00:0b:f3:45:b1:0d:e5:
a5:b0:69:64:c2:98:9c:db:ab:f3:13:47:55:dc:88:78:3a:6b:
b3:59:15:fb:45:08:a7:1e:87:9f:f5:a6:0d:88:ed:af:4f:79:
5b:a2:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:28 2025 by rpki-client