
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File: laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier: E+X+x8mIGG8Je48YJhWDgAYJ33WCXoWOCDhbzVYMI/M=
Subject key identifier: 5E:33:24:3D:C8:AA:6F:57:4F:16:42:17:08:BF:D2:A1:D2:8C:AB:DD
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer: /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial: 01987B9C459D30C2100768E8B95ED9A5D758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number: 0DB4
Signing time: Tue 05 Aug 2025 19:01:35 +0000
Manifest this update: Tue 05 Aug 2025 19:01:35 +0000
Manifest next update: Wed 06 Aug 2025 19:01:35 +0000
Files and hashes: 1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: 9tpiDzJux6eRBlxYaBX/CSoqmmaEhXhJ7NrVvs4I8z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:45:9d:30:c2:10:07:68:e8:b9:5e:d9:a5:d7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Validity
Not Before: Aug 5 19:01:35 2025 GMT
Not After : Aug 6 19:01:35 2025 GMT
Subject: CN=5e33243dc8aa6f574f16421708bfd2a1d28cabdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:1c:d5:6c:5c:b2:9a:cb:b6:d2:bd:c5:a7:
aa:22:ef:fc:c4:06:cb:d5:3a:a5:58:d8:2b:aa:63:
2d:d8:0e:e0:aa:f1:79:2f:83:51:15:27:09:4a:e8:
de:6f:33:a1:28:d2:f2:22:3c:a8:3b:25:d7:42:23:
d4:50:af:05:1b:0b:32:df:96:3b:db:2d:c6:33:77:
95:4b:9f:61:ee:af:ee:19:29:ed:4a:3b:d3:cf:6e:
ec:15:7c:cc:30:d2:f2:7f:7a:36:b9:d8:79:6b:2a:
13:69:b7:cc:b7:7f:dd:0c:57:4f:f7:61:f3:75:86:
11:47:c8:55:74:18:f6:e1:56:0b:62:fd:43:d3:b0:
e9:03:72:b5:52:5a:88:c3:88:2f:84:ce:f3:2f:d0:
09:05:8f:7a:de:45:47:95:48:b7:f6:a0:1a:cb:69:
90:7a:93:4c:24:0d:b1:1e:38:2a:84:c3:89:bf:12:
c3:a2:d0:b2:f6:a1:e7:87:8d:6f:37:7d:50:8c:0b:
97:f8:e5:49:df:d7:88:63:8f:34:56:7d:7b:7b:96:
13:7e:c0:b9:98:3e:7e:4d:89:e4:7d:85:e1:59:48:
62:48:3b:46:1c:75:f8:dd:eb:31:15:55:ee:4e:d8:
97:16:41:7a:43:2c:1d:c5:7b:c6:95:7b:56:b5:51:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:33:24:3D:C8:AA:6F:57:4F:16:42:17:08:BF:D2:A1:D2:8C:AB:DD
X509v3 Authority Key Identifier:
keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:77:1c:df:3c:f4:a4:f6:6c:7f:d8:71:34:4a:f9:74:3d:
a8:12:74:6b:5d:9e:a6:a8:6f:03:51:9c:ce:36:90:a6:33:70:
57:15:16:07:67:49:0c:ed:91:c3:32:1c:d9:d5:b6:a9:6f:36:
8d:e1:8d:52:54:d7:94:1e:d3:1e:de:25:02:e3:bd:04:73:68:
f4:99:47:5a:44:de:0d:2f:aa:da:ca:de:48:49:2b:e6:fb:03:
93:74:66:39:b5:f0:df:da:00:f2:72:12:77:2b:53:a0:5d:5d:
94:80:bd:ad:2f:05:a3:e5:f2:ad:37:50:09:ff:a1:2c:eb:6d:
09:90:8c:54:7f:02:b8:b9:7e:82:40:15:c6:a5:15:87:06:6d:
15:72:f6:b7:a9:78:4a:e1:46:70:e1:98:10:05:7d:e4:93:05:
f5:e1:15:65:da:1f:f6:a5:d0:d5:5b:7a:dc:75:41:81:33:bb:
32:d8:4e:76:38:67:00:a3:1f:15:2b:d4:29:6c:52:75:29:88:
5f:55:19:1c:44:31:2c:ba:87:68:df:c6:6c:bc:e9:58:a2:e7:
e3:43:ab:f8:8d:73:dd:6d:f1:61:d3:da:40:67:bc:32:2c:31:
63:b7:c3:ba:1d:0e:d4:af:f9:3e:02:29:54:c9:95:7d:fd:52:
6e:a2:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:37 2025 by rpki-client