Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File: laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier: abYGM0mIZRYkNwzAmyp0Bb7GEoD9ERohpbpwaYiqsEA=
Subject key identifier: C3:E4:B7:4F:52:78:0F:81:0B:81:62:C2:09:51:7E:4D:48:66:81:39
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer: /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial: 019A4EF5743D28AD4FFA59CF5A0103BDA971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number: 0EA6
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: EWDamuNuNuQt9ZMVTfvREWMy0ctL4YlOokmjAVzBHBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:74:3d:28:ad:4f:fa:59:cf:5a:01:03:bd:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=c3e4b74f52780f810b8162c209517e4d48668139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:4c:1c:7b:9e:a7:94:c5:82:59:ac:65:d8:
06:3e:e0:36:4b:4d:cc:5a:eb:10:da:46:bd:24:e3:
e9:76:4a:6a:c9:5f:0a:c7:3e:50:19:92:54:f0:d3:
88:eb:2c:2c:cd:71:52:c9:53:86:f2:a3:69:ee:38:
0c:7e:5b:eb:cc:96:e6:85:b8:cf:cc:ee:25:a7:a7:
78:c2:65:cd:b4:07:90:4c:09:a2:27:0e:8c:4c:e8:
11:2b:df:19:c1:d7:7a:d9:b9:4e:c4:86:a3:ae:b5:
58:66:c6:b4:97:82:97:74:2e:37:c5:51:02:4e:21:
79:01:21:b0:4f:0a:50:d4:e4:7c:aa:3d:5c:96:54:
39:92:ef:7e:c1:47:9d:f3:13:09:7f:7d:0b:53:a4:
18:a5:17:f8:48:6a:40:63:07:96:42:7e:70:11:d6:
ff:16:a4:0b:42:77:76:75:64:10:a8:92:03:1d:7c:
1c:cf:c1:e4:d3:d5:b8:6b:f5:88:54:eb:17:ab:c2:
c9:3a:6a:46:dc:c6:00:c5:40:f3:b1:a9:00:d4:7c:
e9:37:8d:ce:7b:9c:f4:03:36:d7:d3:e7:17:95:9d:
98:d9:10:23:6a:16:d4:88:1c:f9:dc:e2:87:3f:16:
de:59:1f:db:80:78:ca:7e:48:f3:9d:57:a7:05:f3:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:B7:4F:52:78:0F:81:0B:81:62:C2:09:51:7E:4D:48:66:81:39
X509v3 Authority Key Identifier:
keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:2f:de:6b:79:f8:a2:86:41:8f:f5:f2:e3:a0:de:c0:46:
f1:46:5a:bd:61:e4:cc:e1:44:87:17:21:d3:cc:4f:7c:4e:69:
4d:9b:dc:3f:c0:2b:ab:95:bf:e1:73:c4:14:54:c0:99:6c:4f:
2d:e1:e1:7c:09:5e:e3:22:4d:53:a2:8d:93:25:2f:49:c7:01:
f7:f3:2c:7d:40:44:40:d5:4c:09:23:af:9c:0a:c9:2b:a2:a1:
b2:2d:60:1a:e1:d6:3f:10:7a:51:50:99:25:30:f9:54:92:d1:
75:e5:f5:6d:63:01:dd:83:d2:85:6e:53:23:0e:19:17:fe:7c:
08:62:a1:6d:33:08:a7:46:20:6f:86:85:4c:b3:c4:fe:94:7a:
29:70:ce:e3:2c:ae:7d:aa:41:4c:f2:58:5d:9c:70:b9:5d:29:
3d:17:73:de:f2:fe:72:a7:2b:5a:1f:b6:41:ef:fe:27:94:f2:
9e:39:f1:bd:cc:68:a4:b7:95:9a:f1:4d:7d:01:9e:34:3d:28:
d8:49:86:e3:78:fa:1e:34:ab:44:ab:ac:a7:b7:95:d4:cf:64:
c3:07:b8:88:a0:ae:96:10:42:4e:5b:b7:f2:dc:f0:e2:38:c9:
f0:3a:c0:fc:b0:d8:cc:8c:d8:f2:64:af:f2:3a:60:c2:99:90:
f6:87:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:34 2025 by rpki-client