Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: F7UrWmDgyKsWf4p5lgYwbzLdBD9SnTMFfiYMTXf/pbo=
Subject key identifier: F5:D7:12:88:9E:F7:4A:A1:7B:A8:71:DD:8B:49:F6:AC:E1:98:8C:D4
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019921B273AF3BFF94381DC0CF54FAB9FC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 0819
Signing time: Sun 07 Sep 2025 01:02:47 +0000
Manifest this update: Sun 07 Sep 2025 01:02:47 +0000
Manifest next update: Mon 08 Sep 2025 01:02:47 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: O0FZyl40GUu3Z9C0/ye9ICGQRkYl/qVZOhMhFHjkmCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:73:af:3b:ff:94:38:1d:c0:cf:54:fa:b9:fc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Sep 7 01:02:47 2025 GMT
Not After : Sep 8 01:02:47 2025 GMT
Subject: CN=f5d712889ef74aa17ba871dd8b49f6ace1988cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:bc:0f:b7:95:18:0b:1f:45:68:15:b3:1d:
9c:d1:d1:78:9f:67:36:0b:f2:93:9b:11:42:5b:66:
11:3a:77:18:8d:62:e4:e0:fa:82:55:a9:14:ca:3c:
24:86:5d:ab:13:8b:bb:d8:4d:66:c7:85:6d:cb:54:
d3:e0:26:cb:e2:e8:64:ef:1a:de:6b:95:2c:5a:cc:
bf:a3:be:aa:84:af:6a:b4:03:b2:7d:0b:7a:90:af:
b2:b4:fc:be:ab:54:55:9b:ee:c6:54:94:b6:a5:8f:
ec:6a:ec:1b:75:62:d3:87:41:92:85:a3:aa:88:19:
c5:b1:fa:41:00:30:f3:48:f6:5b:32:5c:89:43:f2:
5c:68:f6:91:cd:e3:ab:2f:9f:7b:4e:6a:0e:06:33:
dd:3d:d8:fe:04:77:f2:b9:e4:7f:1f:cc:4a:83:11:
36:f3:1b:f1:bf:a1:d5:11:03:2b:a2:4b:0d:ea:b0:
27:de:db:4c:e9:00:b6:e0:88:7c:9b:b4:42:1d:45:
1c:8d:70:ce:8b:d3:dd:d5:e4:c8:10:df:d2:56:be:
09:52:35:b1:8f:0a:c4:eb:5a:13:c8:4f:4f:13:08:
da:b0:92:d9:28:3f:52:08:c9:20:de:42:73:fd:d4:
10:72:1a:25:98:51:01:e9:2e:b0:ee:c0:21:13:ba:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:12:88:9E:F7:4A:A1:7B:A8:71:DD:8B:49:F6:AC:E1:98:8C:D4
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:32:4e:2e:e0:a3:ce:79:1c:e5:e6:8f:1a:33:1c:9d:aa:3f:
1b:27:6b:2c:90:e6:69:3c:1c:c4:6d:75:e5:c2:88:f3:98:51:
2b:b3:30:8b:4f:7c:76:40:dc:b7:83:a5:8f:4a:44:38:bb:42:
b0:ef:e9:5e:e3:a4:bd:8e:c6:3d:4c:9f:98:eb:6a:c2:48:dc:
7e:3c:82:db:45:37:3f:2e:42:a0:75:87:2a:ff:ad:66:5b:91:
30:d2:01:3e:f0:6a:0b:b2:ff:f0:c7:33:22:3c:32:d9:18:87:
21:33:2a:c0:c2:3f:f5:5f:f0:66:88:1e:66:38:34:45:e1:41:
a2:a3:bb:31:2d:2c:da:a3:71:e4:96:a1:61:e1:ea:5c:ee:3d:
3f:30:19:f1:8b:b1:f4:95:14:3b:f8:fd:8f:6c:b9:f1:73:2d:
4e:6c:57:ee:9e:e1:52:ca:48:5f:75:26:d2:c5:06:70:8c:b6:
3c:61:70:30:02:84:14:ad:42:93:55:56:5c:83:91:e3:93:28:
0b:49:30:90:28:91:d2:e3:fb:b8:b0:8a:cb:f8:ce:55:34:ef:
67:ab:93:5b:ab:41:60:91:d3:5d:85:b8:fd:cc:52:e2:6c:32:
9e:ee:d4:53:d7:59:48:88:17:e5:31:fb:0f:92:78:67:bb:34:
c6:30:68:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsnOvO/+UOB3Az1T6ufyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTQ3YTg1M2I1NTI4NzZhNzFiNzU3MGQwMDE0ZTA2NGI0
MzgwZmIwHhcNMjUwOTA3MDEwMjQ3WhcNMjUwOTA4MDEwMjQ3WjAzMTEwLwYDVQQD
EyhmNWQ3MTI4ODllZjc0YWExN2JhODcxZGQ4YjQ5ZjZhY2UxOTg4Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyW8D7eVGAsfRWgVsx2c0dF4n2c2
C/KTmxFCW2YROncYjWLk4PqCVakUyjwkhl2rE4u72E1mx4Vty1TT4CbL4uhk7xre
a5UsWsy/o76qhK9qtAOyfQt6kK+ytPy+q1RVm+7GVJS2pY/sauwbdWLTh0GShaOq
iBnFsfpBADDzSPZbMlyJQ/JcaPaRzeOrL597TmoOBjPdPdj+BHfyueR/H8xKgxE2
8xvxv6HVEQMroksN6rAn3ttM6QC24Ih8m7RCHUUcjXDOi9Pd1eTIEN/SVr4JUjWx
jwrE61oTyE9PEwjasJLZKD9SCMkg3kJz/dQQcholmFEB6S6w7sAhE7oouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXXEoie90qhe6hx3YtJ9qzhmIzUMB8GA1UdIwQY
MBaAFJWkeoU7VSh2pxt1cNABTgZLQ4D7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGIt
ZTg2NWZkOWE2MjJmLzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGItZTg2NWZkOWE2MjJm
LzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTJOLuCj
znkc5eaPGjMcnao/GydrLJDmaTwcxG115cKI85hRK7Mwi098dkDct4Olj0pEOLtC
sO/pXuOkvY7GPUyfmOtqwkjcfjyC20U3Py5CoHWHKv+tZluRMNIBPvBqC7L/8Mcz
Ijwy2RiHITMqwMI/9V/wZogeZjg0ReFBoqO7MS0s2qNx5JahYeHqXO49PzAZ8Yux
9JUUO/j9j2y58XMtTmxX7p7hUspIX3Um0sUGcIy2PGFwMAKEFK1Ck1VWXIOR45Mo
C0kwkCiR0uP7uLCKy/jOVTTvZ6uTW6tBYJHTXYW4/cxS4mwynu7UU9dZSIgX5TH7
D5J4Z7s0xjBoAw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:49 2025 by rpki-client