Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: 1Rd3ADNjOaFO8YsI+hwoieWz9uiDlQzaky+eQY6MX2M=
Subject key identifier: 08:7A:B0:2A:54:5C:5A:A3:1A:61:30:A3:76:C3:FB:9C:40:FE:74:4C
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 0198D54EC3090467B6A9C8B7C30241CFA18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 10F9
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: yBhn3Kx/PpDcmW4006cKVOm8koI6Hz2X6oUtQibQU+s=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c3:09:04:67:b6:a9:c8:b7:c3:02:41:cf:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=087ab02a545c5aa31a6130a376c3fb9c40fe744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:89:ec:06:a8:ea:b8:8f:8e:d1:ac:6b:45:
21:2a:51:3d:ae:aa:b3:56:43:b9:b9:cd:29:03:50:
ed:f7:a5:e0:c5:79:7f:73:70:2f:24:35:9f:fd:a6:
45:ff:e7:ee:7f:3d:e5:f8:7d:bb:75:b7:ce:34:c1:
e4:ea:b9:ae:9a:e3:b0:c9:cb:5b:eb:c6:e8:b5:e1:
a8:38:81:07:5e:76:fa:d0:5e:4d:f7:f9:b1:32:e5:
d6:b5:8e:9f:7d:a5:1b:7f:c8:f6:5f:85:ba:53:28:
07:56:18:05:02:95:14:7a:30:51:14:2f:ad:65:05:
93:26:38:db:a4:4a:85:7d:8b:21:87:e0:0a:08:7a:
76:ac:a6:35:58:9b:10:ae:8a:b8:f2:fb:81:f8:2e:
32:00:1c:25:d8:ee:ef:c8:92:51:34:f5:e3:cd:d7:
68:b4:c4:8d:2c:5d:b8:c2:7b:29:8d:80:af:e3:22:
9f:38:f4:46:92:13:f5:3c:17:8d:58:b3:d8:2e:d3:
81:ae:20:83:25:fe:c8:c3:ca:32:d5:2a:b1:f8:3b:
b5:20:64:b2:0c:5d:a9:45:fd:ea:f2:6a:8b:c1:32:
41:45:00:a5:d0:7f:fe:27:b5:37:59:87:cf:6e:6c:
35:a0:d1:6a:60:62:7a:05:23:a9:1d:6c:d0:39:17:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:B0:2A:54:5C:5A:A3:1A:61:30:A3:76:C3:FB:9C:40:FE:74:4C
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ae:e6:b6:02:0e:c3:dd:69:3e:51:ca:ac:6a:90:1b:f8:69:
48:0a:ca:20:22:b0:9e:fd:ef:ab:6a:14:ab:c1:a7:f8:ba:f3:
3d:5a:db:0f:43:96:be:03:63:c4:53:a3:a5:83:e1:33:ec:d2:
f2:c7:52:03:9f:31:3e:4e:e0:4c:37:5e:9b:c3:11:3f:68:ba:
25:b3:6d:bf:e7:5c:4c:8b:3a:29:9b:1f:59:5f:ba:63:40:af:
ef:56:da:37:cf:be:4d:a6:36:d0:3d:f9:da:12:b4:fa:c3:02:
57:21:85:db:b3:0b:4b:48:09:e2:5f:23:a9:76:5e:b1:82:dc:
d0:f6:c2:7c:13:a9:66:f2:04:e7:27:75:92:53:d3:14:87:88:
67:ce:d0:48:fb:ab:bf:07:56:ed:06:0c:65:aa:2d:21:0d:a7:
c9:45:17:45:50:f8:f7:e6:b7:27:33:9f:0e:d4:1d:36:6e:6e:
24:88:57:91:2f:7b:89:95:ab:53:c6:09:15:18:91:c8:30:f4:
36:ad:b9:5d:b1:ef:0b:3e:70:24:58:f7:37:b4:5a:5c:a8:70:
3a:f2:f8:50:23:b0:09:f1:8b:34:92:a6:96:fa:5f:47:4f:b6:
dc:72:30:1a:51:4c:a1:ed:91:88:60:25:fb:d8:7b:6f:b8:be:
9e:15:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:35 2025 by rpki-client