Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: 5jTVNAFVZG55CLrn6GAJyT2yAub12x6xv+PfvtfzsdM=
Subject key identifier: 05:34:44:28:EB:96:57:C4:55:F0:E7:05:68:C4:34:F0:73:F5:E1:E4
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019A4EF524ACBD2D1BE91EABD1418E2485A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0E7C
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: HVml7nrI9uvkgWxVyzgrm2yNyIF7ORtB4h78dTcVvyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:24:ac:bd:2d:1b:e9:1e:ab:d1:41:8e:24:85:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=05344428eb9657c455f0e70568c434f073f5e1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:11:73:d6:23:11:b1:dc:50:56:b4:72:cb:
63:f8:25:60:12:ef:ee:1c:b3:8b:60:ef:10:f8:38:
61:75:dc:c1:fb:2b:8d:45:98:de:6e:27:7e:d2:6e:
7d:2f:30:76:e2:cc:4c:34:89:c3:d0:b4:7a:fe:8d:
9e:26:e7:cb:12:79:93:90:82:fb:76:88:88:3a:01:
88:c7:7d:85:43:ea:2a:1f:df:94:26:4c:d7:3d:88:
39:1e:c3:a2:89:e4:30:02:00:7d:e6:a3:3a:30:bf:
51:e6:dc:e9:99:18:e4:7d:76:92:8e:74:da:bc:21:
be:ad:65:dc:67:91:18:3a:63:0f:0b:09:6f:a9:57:
4b:83:01:77:fb:41:04:47:9e:da:04:63:20:da:ca:
a1:1f:f9:a2:31:18:90:a2:4a:85:39:92:9c:12:43:
95:21:f9:67:cf:21:bb:f0:69:b0:b8:df:57:da:84:
a7:c2:05:f8:c9:d8:5c:2a:6f:c9:ac:a9:8b:45:7c:
e3:09:ac:0a:0c:90:c5:79:c2:52:d5:8d:48:64:64:
ce:62:13:c2:3e:9a:46:19:54:06:c0:c6:6b:b5:c2:
b9:9b:bf:ea:de:de:24:f2:d8:9b:35:8b:ed:9b:47:
0e:a8:75:18:a8:3c:d5:2d:91:0a:42:f9:31:b0:ad:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:44:28:EB:96:57:C4:55:F0:E7:05:68:C4:34:F0:73:F5:E1:E4
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:78:1f:b1:c7:13:2e:ad:07:8a:54:20:a4:e5:bc:95:f0:2f:
e9:29:04:97:b0:e8:7e:17:67:2d:70:2c:b8:f1:c6:72:ca:88:
44:2c:03:23:ca:c9:ab:f8:45:a4:fc:24:90:ec:e4:9b:df:37:
cb:cd:3f:56:31:1b:53:8d:77:95:ea:5b:a8:0a:92:db:90:db:
c4:a9:8e:37:cb:69:74:45:97:0b:1a:56:9f:85:8f:72:e2:b2:
78:b1:60:36:f8:88:fc:5f:b1:e3:f7:67:c0:0c:cd:d8:44:23:
a7:c9:c7:92:06:30:3b:3c:c9:1c:8f:c4:5c:1b:ce:95:2c:64:
47:0a:df:6e:eb:ab:b4:e4:da:87:dc:50:54:64:27:0e:8f:d7:
7c:52:d1:58:dc:6a:b3:bd:1d:38:8c:26:a8:31:8c:2b:51:99:
3b:94:61:c3:36:93:3c:bc:c9:43:14:93:46:f7:79:78:2c:13:
dd:80:2e:31:b2:68:ac:67:00:7a:bb:2a:c0:3d:a6:8b:39:31:
c5:ba:f3:e4:95:f8:6b:ae:0e:34:5a:cc:fa:5d:d9:2f:11:fd:
3f:de:fc:c7:c5:61:30:2b:b3:9d:ae:f9:e0:ea:35:98:e5:0b:
28:03:43:47:ac:20:ed:95:f1:bd:8c:6f:c2:91:83:a5:c8:da:
02:02:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:57 2025 by rpki-client