Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: bFB6F2R7mdjo35c/E6a++UnrVrTxwQS69felPe4Ex54=
Subject key identifier: 05:23:B6:F1:B3:91:98:07:B9:A4:46:6D:17:10:E2:72:25:EF:B6:32
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 0198496532F0239228CBB5595A700F10AA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0D70
Signing time: Sun 27 Jul 2025 01:00:25 +0000
Manifest this update: Sun 27 Jul 2025 01:00:25 +0000
Manifest next update: Mon 28 Jul 2025 01:00:25 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: 70EOyA/QMxbe6vThCTtq7JDplNlWpuQ9ui6U77RnHio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:32:f0:23:92:28:cb:b5:59:5a:70:0f:10:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Jul 27 01:00:25 2025 GMT
Not After : Jul 28 01:00:25 2025 GMT
Subject: CN=0523b6f1b3919807b9a4466d1710e27225efb632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:62:8d:a9:ae:48:f7:82:49:49:9d:32:6d:
23:15:2f:14:0f:2a:30:5c:67:cc:ef:d9:33:9b:ce:
ea:11:2f:8e:7d:c8:80:49:c2:d7:ac:19:b1:d5:69:
7e:41:55:c0:ba:f6:70:69:e4:e8:fc:c9:c2:15:5e:
73:e8:92:d5:cc:d1:13:b7:e4:80:3e:1b:e6:c2:c5:
56:41:a3:bd:4a:86:22:a2:4c:4a:45:06:1f:98:92:
21:02:ef:a8:d1:45:a3:39:4d:b3:5d:a6:66:09:84:
80:21:7f:c9:71:18:01:ee:7d:29:5c:dd:3f:a6:17:
02:2b:54:30:bb:e2:a0:b0:50:d8:f9:20:76:d0:07:
de:33:ef:e5:de:68:fc:22:a4:bb:29:26:4a:b6:59:
1c:6b:05:90:20:ba:ab:25:07:12:6d:4d:9c:58:2a:
7c:89:00:0c:98:2b:b3:7e:c6:c3:0a:dd:70:30:22:
a4:ac:5a:95:b5:4e:60:04:b7:2f:20:e3:70:b4:6e:
54:70:1c:4b:eb:3c:43:08:10:83:21:66:da:4c:d7:
5e:4e:09:99:f5:f8:75:20:f9:bb:9c:f2:d9:fd:bb:
e3:c4:9c:f8:5f:a8:0c:2f:d3:b0:d3:76:d2:21:fa:
21:ea:68:0c:c8:21:43:80:88:fd:19:1d:b5:0d:c6:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:B6:F1:B3:91:98:07:B9:A4:46:6D:17:10:E2:72:25:EF:B6:32
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:0a:13:24:69:7c:1d:5b:63:fc:fe:da:7e:9a:a6:6d:be:
5c:b0:8b:92:e7:17:47:73:e3:9b:6c:38:2c:2e:3a:fe:84:85:
3a:20:78:38:1a:03:73:92:cb:51:1c:60:1f:b5:74:d4:b1:4c:
46:c6:a0:88:ab:49:fc:ef:b8:d4:b0:32:4c:46:33:9e:0b:1c:
df:3a:16:7d:17:71:20:31:ba:ef:b4:a4:3c:cb:72:e9:97:0c:
50:7a:e7:cf:a1:b3:90:17:55:24:b8:48:19:68:0a:7f:6c:07:
68:0d:87:5d:43:fc:f7:3d:c5:f7:a1:1e:0d:82:31:91:bf:26:
a4:ee:96:2d:8b:58:2f:d6:a3:6b:a0:e1:6d:ea:e5:53:9a:10:
26:37:43:23:ae:93:db:a4:43:b2:5b:41:34:76:9d:c5:07:e8:
3a:2e:5e:02:3b:cc:a9:4c:02:11:72:f9:d2:26:2d:ef:a3:be:
54:20:40:7b:46:89:9f:64:23:34:dc:3a:33:d3:a4:30:dc:b5:
22:67:16:da:8c:67:62:0a:c1:c0:fb:b0:2d:47:d7:18:6c:e2:
c1:1a:9f:bf:89:9f:b8:b7:5c:06:3b:34:15:9d:8f:72:2d:c9:
d5:f2:55:a6:45:ee:8f:45:f5:21:88:c4:c0:9d:52:91:ad:07:
13:5b:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:45:33 2025 by rpki-client