Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: bH6tRi6puJU3iozCwi3Gk2eGs/e5LboLeszERbxSZoM=
Subject key identifier: 0B:AD:EA:A7:E6:1E:AF:99:EB:32:EA:F8:58:7B:9D:99:B4:11:7E:64
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019A4DE1916E00AB82D2DF4EEF0F056CA167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 11BC
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: 8KjkKPr7hUF+AZ5rAL5YyqIF4NZFy7L74jUhIFp8qG0=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:91:6e:00:ab:82:d2:df:4e:ef:0f:05:6c:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=0badeaa7e61eaf99eb32eaf8587b9d99b4117e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:7f:37:b2:1c:2d:b0:3d:4c:8e:b3:b0:80:
c1:38:c7:4f:f7:ab:1b:fd:c7:f1:a4:a4:3d:e2:67:
cf:9f:1f:93:eb:15:bc:47:f1:92:63:9b:b5:e5:db:
e8:a5:8d:c6:18:c4:9a:60:69:81:e5:35:00:98:71:
8c:3a:ae:69:6f:23:6e:80:91:7c:fd:d4:f5:23:f7:
34:44:47:63:1e:17:01:cb:54:4a:11:31:d9:0b:23:
80:69:4e:9c:77:a5:67:65:e1:22:d0:da:11:80:a1:
69:a7:82:e5:bb:e4:2a:93:65:6a:95:bd:0f:d3:6e:
74:f1:56:91:07:80:c3:6c:a4:f4:4c:32:6b:1a:61:
d8:8d:fa:09:d1:59:e2:1c:d1:39:7e:3f:dc:40:7b:
e7:ef:fb:b5:65:00:8e:f7:86:06:8b:7a:0a:f5:e2:
af:52:24:7f:23:07:93:29:91:ce:6e:2c:22:39:8c:
3c:6c:65:0e:5b:d6:78:07:d5:7e:60:cf:e6:11:0b:
a0:f8:93:0c:62:67:6e:89:2c:27:30:41:1a:a3:a4:
fa:29:48:fd:f4:5e:5f:22:ac:f3:06:31:c4:4b:03:
d5:88:a3:f3:40:ae:c4:d4:64:be:9e:44:a3:45:84:
15:a8:f5:ce:2e:ad:ac:00:7a:4f:32:7d:d6:bf:90:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:EA:A7:E6:1E:AF:99:EB:32:EA:F8:58:7B:9D:99:B4:11:7E:64
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:cb:91:77:76:96:92:3a:a5:11:8d:12:ac:2e:3a:a4:e2:
e5:1f:e1:2c:c3:93:b2:54:a2:7f:ac:67:98:00:2c:34:aa:4e:
1b:39:46:c2:64:dc:49:3f:14:e3:a8:53:3d:ff:d4:1e:84:75:
2d:3f:03:14:6f:f2:74:43:f9:7c:5a:f8:b9:7d:e8:d2:e8:20:
8c:ba:ad:2d:60:ec:cb:f9:ad:6f:c6:50:bb:62:8f:c1:2c:7b:
f9:40:f3:45:fa:41:57:08:a8:6f:4c:12:b3:dc:e5:1a:fb:c9:
61:9d:3d:8e:80:d1:9e:fa:7d:52:bb:73:61:c1:26:6d:b6:09:
c0:7a:74:d8:b9:55:ed:41:33:02:9b:07:e3:49:5f:ea:e2:c7:
55:24:16:ca:2d:8f:f6:9a:ea:bb:98:b9:b6:63:42:62:20:69:
00:dc:4c:e3:a6:51:69:b4:c9:12:2b:14:cd:03:48:0d:75:37:
c9:fe:6a:61:d7:6d:8b:61:ae:6e:54:8b:c5:27:6f:28:53:6a:
a3:87:9e:a4:46:fa:22:93:2f:5e:95:b7:09:fa:2c:c6:11:82:
42:d6:2c:e5:3a:fc:98:a9:bd:68:d1:6a:24:8c:ae:93:79:82:
d0:b0:1a:c5:5c:ef:5e:83:24:64:13:1d:96:92:a3:45:73:55:
4d:61:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:42 2025 by rpki-client