
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: qfNguccvd+0ZqSM/vG820SXCnCoXdEFWEbYdPLO2w/Q=
Subject key identifier: 72:00:BE:47:43:B9:E5:38:2F:A4:EA:FC:ED:A9:C0:53:5E:BD:5D:F8
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 0199FC8F792178C2F2FDCCED156A1821F5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: wKH0ORf3O4oq1gzElfNBEfMT2QvmRwarcdbWetf9bXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:79:21:78:c2:f2:fd:cc:ed:15:6a:18:21:f5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=7200be4743b9e5382fa4eafceda9c0535ebd5df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:aa:4a:a8:42:14:36:d6:8c:01:69:41:37:
ad:26:30:9e:ad:e0:1d:d8:5d:46:7d:d1:91:bf:b4:
01:73:37:fa:9d:aa:07:b7:4b:b0:07:cb:bd:0e:25:
56:ec:6a:0b:5d:44:bb:f0:3b:79:d3:15:ed:89:4a:
19:23:78:00:66:25:a3:c0:83:cb:a5:d7:53:b0:6b:
70:21:9b:8e:95:7b:ea:61:fb:99:3c:ce:36:e8:4f:
60:fe:f3:71:3c:57:3b:87:36:3a:e9:a8:b9:bb:c1:
76:2e:a8:9a:be:5f:68:51:ae:15:87:26:e1:20:3a:
61:b8:94:dd:22:a2:33:bb:b1:1c:db:83:90:08:41:
9e:7b:1a:43:29:24:5c:48:19:cf:d4:5c:9c:e8:fe:
ce:2c:9f:c9:dd:db:19:2c:36:f7:da:ec:10:4d:fb:
1e:ad:49:46:58:a1:c9:1a:04:92:02:c7:6f:5c:f0:
08:13:68:89:40:dd:77:6c:b1:ac:c9:fb:de:b6:a0:
db:e4:f4:52:97:6f:1f:7c:94:0a:be:e0:60:70:75:
30:ab:70:d8:84:8a:c6:06:28:1b:db:e2:45:5f:91:
32:20:02:35:fa:12:8f:01:ce:c4:6d:46:7c:d9:9e:
66:40:e6:7e:b4:41:11:cf:62:1f:eb:dd:c6:0c:b0:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:BE:47:43:B9:E5:38:2F:A4:EA:FC:ED:A9:C0:53:5E:BD:5D:F8
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:93:40:94:d5:1f:a7:92:40:c0:19:8b:2f:85:97:55:a4:3a:
d1:f1:a5:10:9a:bc:07:4a:6e:8d:bc:f3:fc:d1:dc:94:b4:95:
f6:f8:c6:b0:f2:c3:5b:1d:8b:fd:03:f1:1d:4d:9f:36:37:34:
86:4d:18:4d:1d:1e:b5:e0:4b:78:5e:74:ee:d6:8d:6d:b3:c0:
4c:b1:18:5e:2d:a2:a2:eb:41:4b:bf:e9:c4:7f:cb:04:c2:90:
24:d2:75:6c:02:1f:1c:d9:2c:d5:25:c6:12:3b:26:97:c9:e5:
05:2a:a7:c7:fd:20:8b:2b:9c:ac:c4:b1:c1:1f:11:e4:96:13:
4e:d5:d9:88:90:b2:6e:4e:d8:c4:01:d0:07:82:c6:4c:3f:73:
2c:0e:c3:56:22:c7:4e:36:bf:22:db:0e:c9:05:74:c1:ee:e3:
83:9b:ef:9c:02:fa:31:92:3b:8c:c7:17:b6:79:68:89:32:d2:
2e:a0:14:f7:78:ea:13:39:ac:81:64:91:a6:90:65:65:11:73:
ff:69:65:34:f7:55:5e:84:5d:73:ab:46:0c:ed:bf:58:1f:08:
3d:97:ab:97:da:04:53:8d:18:12:bd:8f:89:fb:2d:82:16:3d:
3c:95:3b:4e:02:d6:07:c1:67:3e:f1:ff:c2:b6:8a:16:ec:bf:
62:74:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:24 2025 by rpki-client