Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: /HirgW3jj6NI7p2M8nCkWR8unxOexeNxON8XJukIJTo=
Subject key identifier: 87:8F:02:85:AD:78:F1:55:40:63:A8:37:E9:FF:B6:BF:28:49:9E:5B
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0197488C1A6612770B9F4E53AF02F75793AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 0724
Signing time: Sat 07 Jun 2025 04:00:30 +0000
Manifest this update: Sat 07 Jun 2025 04:00:30 +0000
Manifest next update: Sun 08 Jun 2025 04:00:30 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: fEdy7SbPOvK7HAO4yAYJ7frXbvsN7VSvrPcWr8yX1yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:1a:66:12:77:0b:9f:4e:53:af:02:f7:57:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Jun 7 04:00:30 2025 GMT
Not After : Jun 8 04:00:30 2025 GMT
Subject: CN=878f0285ad78f1554063a837e9ffb6bf28499e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:9b:36:31:4c:0a:e4:02:52:b7:b2:ac:4a:
df:54:bb:e7:bb:da:3e:f6:10:42:a2:72:57:19:52:
86:9a:35:89:62:04:f3:8c:86:85:03:08:44:b1:86:
bf:9d:89:77:be:4a:1a:c3:a7:29:22:da:1e:49:93:
7b:a2:91:e4:a4:0f:b0:f3:b9:72:d6:cc:36:9e:4d:
99:9b:3d:c8:cf:32:36:c1:cd:e4:e8:52:a2:63:e7:
04:d2:2b:30:f6:3b:52:2f:7e:aa:41:68:83:ff:d0:
2c:34:aa:85:89:65:e6:96:ab:71:19:14:7d:d7:e1:
9d:52:89:d4:e3:d8:63:dc:60:55:b2:72:c5:95:ea:
ac:89:60:b6:ed:52:a4:c7:db:17:d7:e0:2c:47:32:
9e:dd:ba:61:56:2a:d7:c3:88:f1:d1:c4:96:ff:5b:
5b:da:ba:04:ad:62:e9:59:d3:5c:d5:2c:ce:cd:53:
f0:90:96:f0:e8:3f:05:f0:e0:3f:7e:0c:7a:98:d3:
ab:f2:cb:ef:ac:8e:e6:bf:ee:a7:8c:ed:89:9c:76:
e2:74:14:c9:a1:d2:9d:ce:bc:6d:16:e3:96:c9:8e:
92:30:a5:d4:8f:a3:98:12:a8:4a:ab:95:54:42:c5:
7e:06:ea:b8:46:ae:c5:09:44:5c:5a:fc:2d:af:08:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:02:85:AD:78:F1:55:40:63:A8:37:E9:FF:B6:BF:28:49:9E:5B
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:e6:a3:8a:5c:92:96:a0:55:9e:91:06:64:29:c0:92:17:
1d:f0:8b:ef:53:9a:d8:0d:c6:37:9a:d0:72:da:18:0b:a8:61:
46:c2:da:b2:ae:47:e6:1d:e7:28:be:ad:c7:e1:3a:e6:85:1f:
eb:2d:2a:6a:24:e2:94:45:bd:9e:34:ee:23:26:80:dc:3b:dd:
b3:b0:b5:6a:1b:40:c8:f6:19:a8:26:9f:1d:6f:66:aa:4a:fc:
76:98:61:52:c8:47:bf:d4:12:73:3e:d2:12:6d:49:cc:15:bf:
41:a8:4c:0e:d3:d1:35:29:b9:33:7b:5d:1c:e4:59:fd:60:47:
e9:c4:ae:ba:e2:ce:ee:e4:07:a2:59:86:83:3b:20:bb:f6:bf:
5e:6d:82:d4:90:a5:b3:86:54:b7:71:f8:8f:15:e8:f8:7c:eb:
25:c5:95:0b:eb:6e:a7:6b:3e:42:bc:09:47:37:35:42:8d:56:
c9:82:97:08:7c:8c:5c:60:76:44:a3:3d:0a:01:37:b1:a0:c0:
bc:9d:fe:cb:a1:eb:15:b1:a2:45:c1:1a:b0:0b:a1:98:44:4c:
d4:34:f2:52:03:db:18:68:5c:28:39:93:ed:16:75:65:3e:ce:
74:a4:08:4e:25:95:5b:0f:76:b5:e7:c3:c6:58:7a:63:88:c9:
88:2a:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:06 2025 by rpki-client