Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: RVpZwwSTSTbEhjfeuJ5rXGBVN2H39xr73QI464SYHH8=
Subject key identifier: C2:59:3B:CF:30:D9:AA:51:3D:F5:FD:11:39:D3:DB:94:05:FB:C2:97
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 01976D3E6BDC014EC4457D576C87B7F93D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0CFE
Signing time: Sat 14 Jun 2025 07:01:36 +0000
Manifest this update: Sat 14 Jun 2025 07:01:36 +0000
Manifest next update: Sun 15 Jun 2025 07:01:36 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: 6Hz9QqemrJi6k0W2HGi6pFeiiEfSxmuCnoi4kvEUhJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:6b:dc:01:4e:c4:45:7d:57:6c:87:b7:f9:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Jun 14 07:01:36 2025 GMT
Not After : Jun 15 07:01:36 2025 GMT
Subject: CN=c2593bcf30d9aa513df5fd1139d3db9405fbc297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:eb:69:2c:fb:b5:51:ff:fc:e4:7a:2c:e5:
7b:5b:04:7a:78:1e:2f:46:a7:d9:2d:8e:fd:9a:80:
28:90:2f:9e:97:2f:0d:a4:07:5d:84:d8:f5:eb:f2:
cd:07:7b:9e:59:f3:f7:d0:05:81:17:1a:34:ad:20:
6d:9d:ea:63:3f:4a:fc:70:93:64:38:d0:b5:a4:11:
d7:30:b5:3f:66:07:d9:c6:4d:e5:e3:1d:90:16:1c:
c2:a3:8c:5c:40:bc:4f:25:47:56:56:ad:48:e2:4f:
07:0a:45:89:61:a6:c4:6c:33:cd:de:9a:c3:56:63:
76:97:8e:cb:36:52:bf:fe:d5:d7:06:34:34:a4:fc:
fb:2c:47:53:3a:b4:12:d6:d9:95:e5:9c:2b:52:53:
f4:fc:5f:3b:42:f6:dd:e1:db:56:30:89:9c:4c:39:
79:ae:fa:c6:fa:56:29:c5:41:87:19:43:cf:1a:cd:
1b:94:07:b5:5d:e4:c6:d7:7e:b9:03:f8:22:f5:0d:
86:fb:76:ef:f4:89:67:31:cc:31:97:68:d6:05:4e:
73:52:d8:ab:23:ab:5b:77:60:b2:ea:a8:8a:12:b0:
75:9d:eb:40:f5:2d:22:77:78:37:81:bf:11:82:72:
1d:c2:86:bd:03:aa:71:31:31:59:31:34:32:f3:b7:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:3B:CF:30:D9:AA:51:3D:F5:FD:11:39:D3:DB:94:05:FB:C2:97
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:5b:08:e4:2f:e4:59:28:a8:bc:1b:a0:65:02:8e:c3:82:
13:cd:27:78:68:2a:60:68:f2:2b:c2:27:7c:40:74:a9:2e:cd:
34:ec:4b:b3:0a:51:9f:d0:10:4e:e4:bd:1a:c2:ea:5c:e5:3d:
bd:96:2f:f3:c7:31:3b:06:8f:b0:57:88:6f:f1:17:fb:a0:12:
a1:62:c1:bc:75:ff:a3:e2:86:ee:df:fa:b7:4c:00:52:57:81:
a4:48:15:7a:75:8d:45:ee:a1:f8:3c:4e:7c:86:ab:83:19:2b:
fd:bf:29:9f:06:b1:4b:49:d2:66:50:f6:1b:2f:3c:61:9a:35:
4d:a5:e1:6a:f7:d3:2c:6e:4a:b8:ef:f1:7a:18:e2:17:86:c8:
a7:da:bc:22:0f:22:a9:a8:59:4e:0c:ae:f7:17:d3:22:6a:eb:
fe:7d:5b:05:37:61:6c:2c:d3:5a:0e:1f:fe:e0:c7:c0:f8:0e:
fe:79:e5:f6:0b:45:c4:71:e1:89:67:95:a4:69:5a:e3:13:21:
5c:13:a5:20:6d:e1:94:c1:ce:84:58:47:07:2b:6e:08:a9:75:
c4:ad:df:c8:92:57:9b:d0:8a:0e:aa:26:53:46:2c:3c:c1:36:
fe:b1:22:a9:62:0d:74:53:c0:c0:6a:b0:a5:af:6e:77:58:a7:
73:7b:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:20 2025 by rpki-client