Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: 8HbYcHG2k2jPzwsqHUo5b3BMjwzQ8BItCyWZy2JYTno=
Subject key identifier: B4:6D:5A:5E:6A:BB:96:69:4E:CE:55:9B:92:82:62:F7:EA:A0:C3:00
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 0198462D773F3BF9296B00BD9CB73B3A749D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 10:00:41 +0000
Manifest this update: Sat 26 Jul 2025 10:00:41 +0000
Manifest next update: Sun 27 Jul 2025 10:00:41 +0000
Files and hashes: 1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: Y+P+kDjNMaQyyovF3qxMjlf52VZbwXiDq0gndudeNNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:77:3f:3b:f9:29:6b:00:bd:9c:b7:3b:3a:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Jul 26 10:00:41 2025 GMT
Not After : Jul 27 10:00:41 2025 GMT
Subject: CN=b46d5a5e6abb96694ece559b928262f7eaa0c300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:d2:8d:da:50:db:a0:ae:7c:c0:3a:91:78:
a1:75:1c:6d:0b:4a:7a:22:05:38:de:97:b9:14:11:
be:c3:1e:15:e1:19:57:4c:fe:3c:5b:30:3a:0b:7a:
fb:f5:c3:32:f0:29:f9:53:b4:8d:57:3c:14:7d:47:
9b:d3:95:9a:73:25:53:3c:1f:27:3a:a5:ec:80:1c:
66:65:2c:ac:e3:f6:b8:69:0f:65:b3:c1:bc:a5:af:
95:f7:7d:da:7c:45:69:7d:80:9e:1c:7a:48:a1:23:
a7:da:a8:d4:5d:95:0f:0e:bf:7b:7d:7c:4e:6d:db:
c1:e4:fa:2d:eb:9c:51:32:29:5f:26:91:23:7c:1c:
2f:c9:c6:08:08:b7:69:81:de:76:f6:cb:10:97:5c:
68:68:d2:d0:4b:d6:c5:19:7d:5a:25:07:fc:d1:8d:
05:56:01:ec:1e:01:f4:2c:00:83:bf:fd:b4:c6:50:
dc:9e:ca:f6:e5:ba:d6:a0:94:38:0c:e8:3f:8f:3e:
80:a9:9d:36:ce:02:7c:9c:c2:82:fc:b7:37:d7:1b:
4c:50:0d:02:19:9c:5c:f2:8a:32:cc:28:06:0b:21:
06:59:3c:26:65:70:eb:3c:f0:b8:81:2e:07:9b:ce:
fd:e1:ef:70:07:e7:89:6f:da:d1:1b:d6:c4:a4:c0:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6D:5A:5E:6A:BB:96:69:4E:CE:55:9B:92:82:62:F7:EA:A0:C3:00
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5c:b6:6d:f8:af:3a:59:0e:8a:84:f9:da:e0:0a:43:44:c5:
9f:2a:21:49:42:81:85:a8:ee:6c:a3:3a:eb:81:ce:76:0b:8b:
7f:2b:39:93:e8:1f:82:cd:bf:dd:52:36:5b:fc:7f:7a:1c:d0:
3e:b0:7c:9c:7a:ed:a8:03:4d:3b:a1:68:34:7c:41:99:63:a6:
d4:c3:a6:95:7c:e7:66:d6:31:2d:eb:c9:b7:ef:90:96:24:d7:
2d:8d:8f:e2:8c:d8:47:f8:d7:2f:36:14:68:cc:e8:b0:f6:cc:
26:cb:cc:0d:c2:63:85:f3:97:68:4f:88:81:e0:8a:f4:5c:7c:
ef:50:35:20:ad:be:f3:9f:a6:87:4c:b0:63:72:12:ef:e9:af:
a3:5e:73:62:d8:03:3a:4d:d8:7a:14:9f:81:da:6f:0c:01:0e:
54:bb:e7:78:58:0b:eb:0f:ce:8f:d3:11:db:fa:60:55:d4:2e:
eb:b4:37:ed:32:d8:ce:9e:6a:a9:a8:88:3e:e5:55:ab:17:0f:
66:34:19:60:5c:60:98:12:68:d4:cd:a5:85:2a:95:12:77:9a:
5a:b3:b3:97:e5:b3:bb:18:e2:5e:d1:76:53:ea:0f:8b:ac:08:
9f:33:96:68:77:56:24:12:1c:05:ba:56:b7:e0:b8:c7:9e:a6:
f3:ca:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:33 2025 by rpki-client