Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: tQeKYwgRlgDk9TLOoOFolbxmxE/XHIUFpPzyiFXm1js=
Subject key identifier: 8E:C6:FC:35:EA:43:8A:5D:F9:BE:28:AF:9D:BF:EE:C9:0A:C8:EE:39
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019894B723FA4063AF25D8ED5E3E6C570380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 07D0
Signing time: Sun 10 Aug 2025 16:01:26 +0000
Manifest this update: Sun 10 Aug 2025 16:01:26 +0000
Manifest next update: Mon 11 Aug 2025 16:01:26 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: i4Xoh0ZU0Hc2g6gwxCaFc7qYozAvVotKjOidLgnnamA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:23:fa:40:63:af:25:d8:ed:5e:3e:6c:57:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Aug 10 16:01:26 2025 GMT
Not After : Aug 11 16:01:26 2025 GMT
Subject: CN=8ec6fc35ea438a5df9be28af9dbfeec90ac8ee39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:34:cc:be:65:fc:f3:69:ad:6e:35:a3:82:
15:e6:59:cf:c3:65:c1:56:0a:66:d1:93:f3:45:92:
d0:00:04:dc:f4:05:4d:66:3a:df:bf:ed:cf:96:80:
d7:0b:3e:33:7d:a7:fa:6b:ba:64:44:8e:41:84:a2:
0e:0e:24:3b:47:88:01:f8:d2:f0:2f:87:50:0c:f4:
72:8e:94:d3:a5:d7:b7:be:47:bb:4d:aa:4b:aa:58:
1b:47:b8:f6:02:bf:ca:46:78:0b:ac:2d:0b:d4:96:
33:b5:42:59:7e:39:42:95:7e:c4:75:b2:b0:dc:05:
5a:92:1c:f8:9a:91:82:95:4c:5f:fb:e2:7a:52:39:
b0:ca:de:f3:1c:48:53:88:f7:2e:9a:63:fc:bf:84:
3f:31:2a:27:88:d0:ea:91:6f:a7:fb:68:6d:d1:a3:
58:3a:94:34:14:e9:4e:3c:50:cd:57:49:8f:4d:a2:
96:80:7c:2e:a6:7a:3f:84:c9:ac:97:69:5e:f5:77:
e6:09:7f:8a:84:1c:12:53:d6:9d:c1:af:b4:f1:46:
ea:d7:3a:76:9a:d3:e3:a0:b5:8e:9e:8f:26:66:9c:
28:d8:39:8c:e5:45:cf:93:fb:bc:5a:ef:85:a9:e7:
d3:ec:1d:3d:12:f6:69:75:2f:2f:fd:b9:cd:0b:b8:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:FC:35:EA:43:8A:5D:F9:BE:28:AF:9D:BF:EE:C9:0A:C8:EE:39
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:96:a7:2b:20:7b:1c:1d:e2:d2:d2:26:f3:17:71:c1:fa:
fe:90:84:15:fe:22:88:92:99:9a:0a:06:57:cc:8c:2f:54:ae:
ef:8d:8e:0d:57:a9:f3:0a:bd:d5:03:f0:c3:23:47:0b:17:00:
e5:65:ad:18:e7:fc:e9:4c:c5:4e:8c:ef:bd:ec:57:27:f7:2b:
5f:65:26:ec:c4:c2:ed:dd:d2:24:e8:82:73:5c:bc:22:7b:26:
cb:8b:de:9b:1a:28:2d:dd:e6:e3:27:63:83:8a:08:d1:9a:f9:
1a:5f:58:16:c3:b0:7a:7b:9a:bd:03:d9:79:34:f4:b7:d3:d7:
fc:12:26:77:7a:d0:d1:49:f2:c9:ec:6e:b9:27:8a:1e:72:07:
54:60:69:7a:11:0b:ff:18:02:0e:99:98:41:45:57:e6:ee:e8:
7c:ce:87:7f:a7:20:9c:ed:43:07:3f:94:92:1a:02:2a:ce:5b:
dc:2a:23:9b:c6:8f:ef:7f:b2:ec:41:31:4a:f3:e7:6d:fc:20:
6d:2a:21:ee:11:1d:cc:58:3f:f7:a2:b2:44:89:da:21:5b:3f:
fb:91:83:31:6c:ba:de:5a:7c:44:fa:e3:93:31:90:35:c5:72:
ca:d7:37:44:d6:36:a3:43:05:fc:a8:0f:3c:bd:4c:b0:cb:1d:
a4:ea:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:57 2025 by rpki-client