Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: nivclsIOaZIrUyHMmhfSAHTxnMegz94s1afoSKPqwic=
Subject key identifier: 5F:AF:1C:B1:0D:81:9A:E5:19:62:67:9E:05:C3:A8:54:7F:A2:66:9D
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019A00A353D97CFF0B732A05F996920CAE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 1194
Signing time: Mon 20 Oct 2025 08:01:35 +0000
Manifest this update: Mon 20 Oct 2025 08:01:35 +0000
Manifest next update: Tue 21 Oct 2025 08:01:35 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: o7zYqrRDOklYfjFl0/f5sqQoVg/6QhgkyofyOsu8yCs=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:53:d9:7c:ff:0b:73:2a:05:f9:96:92:0c:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Oct 20 08:01:35 2025 GMT
Not After : Oct 21 08:01:35 2025 GMT
Subject: CN=5faf1cb10d819ae51962679e05c3a8547fa2669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:d6:54:33:8c:e4:17:34:86:54:9d:8a:bb:
17:84:92:45:d2:35:f7:91:c4:e4:3d:eb:69:2b:84:
1f:88:0b:d3:ce:bf:09:d3:7e:72:1d:62:e3:09:2d:
a1:18:0a:8c:8e:24:78:76:b7:1f:7f:b7:e5:af:99:
60:26:b5:39:d4:84:be:0d:4b:03:6a:bf:ad:f1:0f:
54:b9:66:27:86:6e:ae:93:54:5c:bd:d5:61:f3:bc:
31:75:72:39:c4:c0:70:05:89:9e:cc:7e:ae:8a:0a:
26:4c:9c:4a:61:15:4b:91:e3:36:1b:46:8c:df:6d:
e6:6c:29:fd:95:0d:bb:ed:62:60:7f:44:d9:e7:43:
4c:83:3f:ce:16:b9:21:4b:72:dc:7b:bb:00:f8:53:
c3:6a:a0:6a:98:17:8a:a7:18:ae:39:51:c4:69:37:
23:2c:e2:71:76:56:eb:c0:8a:93:d2:c5:30:05:86:
3a:68:84:f1:3d:5c:14:83:37:95:d3:67:0b:15:ce:
4b:aa:fc:04:bf:b5:03:79:46:39:9e:70:f6:8f:bd:
6c:92:aa:f3:13:df:2c:03:fd:96:33:e8:e0:fd:e9:
aa:24:d9:35:26:22:4d:2a:09:4c:16:f6:54:29:d0:
93:fa:2b:8b:2c:33:1d:b2:6f:af:2f:13:44:9c:4a:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:1C:B1:0D:81:9A:E5:19:62:67:9E:05:C3:A8:54:7F:A2:66:9D
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:5c:de:b8:d3:c5:33:d0:03:4c:81:77:f7:97:16:04:16:
dd:61:d2:6c:3f:51:5c:9f:75:dd:e9:12:38:80:9b:91:76:63:
8c:c7:05:d9:a2:c1:06:ba:da:ac:45:0f:99:90:0d:d6:2f:20:
cf:b2:01:d6:3c:ec:91:2f:b7:57:7d:3e:ee:33:75:d6:8c:ca:
7a:a4:7a:93:6c:79:91:64:47:a0:c1:d5:2a:fa:b6:ec:5e:fb:
a2:d0:a1:7a:f6:3d:24:ae:d4:cd:9d:94:2a:c2:dc:ac:3c:15:
e6:e8:3b:51:c2:80:40:c9:a5:ea:de:17:51:83:2d:b0:af:1f:
ff:83:d0:91:ce:4f:3e:bb:d2:be:4f:34:05:f2:e0:78:bb:57:
e1:47:63:fe:e4:1a:bf:71:b1:06:ad:13:57:4c:fe:b9:2b:a2:
be:4c:e0:99:4c:70:60:a4:8c:d4:c9:73:7f:a6:9e:2c:aa:71:
75:ef:e1:3b:33:78:b1:a4:2c:17:74:88:01:05:ab:2e:7f:e2:
a5:3d:1b:f1:c4:69:65:cc:fe:c5:6a:91:4d:7b:a9:ef:b6:89:
70:cc:7d:0a:1a:ec:6f:5b:c9:41:ae:a6:e2:3c:c0:bf:9a:f0:
b7:3e:aa:aa:8a:80:cd:a2:31:99:87:cf:22:96:aa:0f:cc:5c:
d9:67:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:55 2025 by rpki-client