Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: Zk/wvKGPiTDweDrNLGpwOsXURz398TqLVuEJzwveGQg=
Subject key identifier: 72:0B:F7:8B:B5:20:75:F4:5D:59:F1:39:61:5D:8F:A6:D9:73:73:E0
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019A71B8CA6F345A9016792083EA37691F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0E8E
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: Zk3e90pa4Vogj3XIfrY4XrK+v/69xJALyfgYdBFO6oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:6f:34:5a:90:16:79:20:83:ea:37:69:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=720bf78bb52075f45d59f139615d8fa6d97373e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:db:f2:fe:10:63:38:1f:47:9d:97:af:dc:
d1:21:24:95:97:11:2b:d8:78:58:ac:b4:f1:36:3f:
b9:12:d6:e9:22:75:a5:fd:2a:07:ad:ae:7b:39:69:
66:c2:c0:a9:b0:bd:45:ae:d5:e9:3d:46:4d:ce:3a:
49:39:22:79:d1:0d:9f:2c:10:1c:b1:d0:c7:80:00:
70:6d:fd:dc:44:0d:21:af:fe:35:3a:e2:f4:63:d0:
17:90:0d:e5:cf:70:fb:37:08:55:f6:4c:16:5d:77:
56:72:c7:93:67:97:12:16:27:84:90:35:9a:77:7a:
2b:aa:78:d0:3e:1d:00:97:cf:e3:7a:ad:d6:d2:c0:
b7:55:95:0c:18:c9:5d:ed:d2:52:60:4f:ff:03:fe:
ae:41:3b:b8:54:7f:8f:02:56:ac:16:f7:1a:c2:d9:
e9:c5:93:3a:15:2f:83:d8:3d:13:1c:f8:4f:06:3e:
d8:6d:7e:54:1f:f9:4d:0c:de:3f:a4:86:01:a2:08:
ed:90:96:6f:e9:05:44:0e:f2:ea:4e:c6:40:0b:4d:
f6:73:a0:4f:2c:ba:c6:42:09:59:02:eb:b5:cb:e7:
77:47:8e:b2:72:2c:5e:ef:d7:4a:ad:b5:ed:68:95:
04:af:dd:36:6f:ec:9a:ab:03:2d:42:66:35:e1:3b:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:F7:8B:B5:20:75:F4:5D:59:F1:39:61:5D:8F:A6:D9:73:73:E0
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6f:71:af:23:ec:5e:ac:fa:61:f5:5a:be:f3:44:67:b9:8a:
03:1e:46:95:84:32:c8:81:85:ea:3c:4b:a4:45:85:05:c4:29:
76:f3:a1:42:6b:e5:d1:f8:7c:c3:46:3d:87:af:84:75:99:36:
ca:99:2a:40:fd:92:63:d2:7b:50:28:18:bb:4e:b8:41:d0:49:
29:95:46:6e:fd:22:18:b4:e3:8c:b5:5e:96:28:a7:28:f3:2e:
a3:e6:c9:c3:23:f4:aa:d5:0e:c8:b2:b2:e2:24:c5:97:67:74:
39:eb:fb:1b:5e:15:7e:4d:a3:88:42:0c:d2:2b:82:c4:39:05:
4b:e2:e3:2f:b9:81:77:4b:25:d3:22:c1:18:37:cd:0b:df:d7:
3c:b4:c0:a2:bf:43:59:51:4e:5e:ec:97:ad:f6:d4:97:96:dd:
48:14:51:62:a7:1d:e6:63:81:72:06:bd:f3:3a:6e:e2:43:65:
73:e7:c4:a7:13:f6:8f:bb:01:4d:61:33:c9:2e:06:d0:f1:7e:
35:cc:c6:00:dd:34:9e:fa:fb:05:fb:cd:d8:b6:54:15:94:7f:
65:03:54:2a:33:8d:ca:e1:9c:9c:19:c8:55:c2:d9:9b:7c:61:
c6:47:b4:f3:88:dd:4d:3b:6c:b0:5e:04:d7:21:7d:c4:33:01:
cb:d3:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:38 2025 by rpki-client