Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: F6no31RLh1sG1kKFp8ejtSIBQZPfpz7LlSgtbuT052A=
Subject key identifier: 82:BE:5D:47:C1:CC:84:06:83:82:48:C6:50:E6:DC:A6:32:46:1F:65
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019A4EF4A3C400EAEBBB56B040EEF27E5C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 08B5
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: M3IVU4vKXU6946mrw8+13NE0NvfRuGua4KLagIhZ5S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a3:c4:00:ea:eb:bb:56:b0:40:ee:f2:7e:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=82be5d47c1cc8406838248c650e6dca632461f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:8b:ca:51:be:59:8b:9b:21:0f:b8:12:1f:
2a:0a:09:c5:d8:8e:97:82:ba:63:25:75:49:51:ce:
55:c9:35:6a:7c:38:cd:55:46:88:53:6c:1b:7a:c6:
d8:a6:43:ee:3b:15:44:d9:13:1d:74:8e:f4:b5:b6:
7e:53:b1:79:30:cd:d2:ba:80:bf:eb:40:04:54:06:
fa:9a:0a:2e:2e:00:a3:de:66:2b:af:1a:47:fb:c0:
61:32:d8:13:f5:3b:b2:02:ab:cb:22:1a:a1:9e:f0:
e6:4a:6d:11:71:ce:2e:b4:25:2b:4c:10:23:3d:3e:
9d:50:12:b7:3f:70:37:a5:ab:0c:b7:68:e6:d3:a4:
f1:27:79:4b:0b:6e:aa:03:c4:5c:2d:a9:a5:32:b9:
9a:fe:d3:1f:4a:9e:f2:8d:e0:c8:85:27:a1:60:82:
d4:f7:ca:68:71:92:46:78:ac:fa:8f:88:55:7f:73:
75:d7:1f:d3:03:ba:44:3f:fb:da:04:fa:44:8f:0d:
8f:e4:eb:69:5e:8d:e0:b6:e9:69:4d:aa:9a:e0:df:
f1:f2:78:fb:2b:98:ad:d9:93:d8:16:6c:c5:4e:33:
a0:1a:2f:c1:0f:ba:e4:96:fd:97:9d:ef:c3:3d:41:
f5:d2:04:ff:9e:1b:5c:3b:d1:70:ae:d0:b0:93:2b:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:5D:47:C1:CC:84:06:83:82:48:C6:50:E6:DC:A6:32:46:1F:65
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0f:35:f3:25:0a:63:d6:8f:91:43:78:89:af:0c:c5:7b:df:
31:05:30:2f:1f:b5:2c:f9:78:1a:87:00:3b:85:0b:b5:40:8c:
38:a4:90:9a:b2:f3:4f:e0:e6:79:61:84:79:49:d7:78:b3:15:
ae:0c:73:ac:b7:67:35:d4:e8:33:98:59:f1:78:5a:b6:1b:31:
3e:7d:dd:dc:77:f5:b4:5c:01:95:2e:cb:e0:e2:b2:3a:c6:a5:
e9:17:2d:5e:70:f8:1a:e0:8b:87:cf:02:d5:ca:01:7a:08:58:
11:fe:ff:03:45:95:6c:db:1b:9d:20:44:e9:bb:38:98:2b:c9:
25:ca:17:71:b7:66:14:ac:5a:dd:1b:b2:e2:df:12:91:8f:8c:
0c:69:f6:ad:99:d3:8c:10:87:7e:cf:37:34:07:b9:16:c3:17:
3b:7f:94:e7:53:bf:f2:cf:e6:d1:c1:52:f3:18:4d:89:01:94:
9a:e6:bf:f6:b1:93:bb:70:47:c3:fc:ce:51:a1:99:f0:71:1d:
b8:76:a7:22:ba:b3:b6:9c:5d:cf:57:e1:e6:fa:37:0a:58:98:
75:60:f6:a3:e9:4a:89:8c:63:68:fb:7f:0a:c3:15:6b:19:40:
9b:1d:50:9e:f5:78:83:3b:4a:b9:2d:98:db:7f:cf:5f:54:47:
20:67:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:32 2025 by rpki-client