
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: Z5NRxifY66Au46EQV5pvEY6j2bIWPnxB8DVWsP0svNc=
Subject key identifier: 91:E1:02:4C:68:50:81:6A:8E:27:C5:C6:AA:0F:62:9A:04:EB:FD:A3
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 01974E57A42161E3135EF7E4474FB760EF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0CEE
Signing time: Sun 08 Jun 2025 07:00:55 +0000
Manifest this update: Sun 08 Jun 2025 07:00:55 +0000
Manifest next update: Mon 09 Jun 2025 07:00:55 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: KHHF5fPUSajRGwWheMhDgMCL0dSITsrxXlH7RZR4xgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:a4:21:61:e3:13:5e:f7:e4:47:4f:b7:60:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Jun 8 07:00:55 2025 GMT
Not After : Jun 9 07:00:55 2025 GMT
Subject: CN=91e1024c6850816a8e27c5c6aa0f629a04ebfda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:dc:3f:26:e7:94:7d:ae:33:77:54:e0:0d:
45:4b:e2:64:63:50:de:c0:75:c0:3a:ad:84:ba:74:
6c:5b:ca:7a:42:ea:0f:ce:08:84:ba:0d:c3:02:56:
fd:57:6b:8a:af:a4:8e:1c:9a:a8:95:63:71:3d:23:
3e:20:cb:3d:2d:f1:95:7b:1f:f5:52:47:7a:1d:68:
e5:6a:99:97:e9:71:dc:1c:53:24:af:40:db:e1:3c:
80:67:b6:ce:b4:c7:c4:fb:73:55:42:fa:8f:aa:11:
0a:da:08:a2:87:49:92:1d:64:9d:3d:e0:03:6c:db:
1d:ff:9f:d7:f2:2d:22:c3:8c:f2:77:06:ed:eb:58:
cc:ba:fc:41:a1:fa:ce:fa:f8:2d:ca:53:d2:6e:9b:
09:52:e9:e4:78:3c:14:01:95:e6:da:f2:c0:2e:a9:
ca:85:08:36:3b:56:cf:ab:33:8f:c5:aa:27:de:da:
fb:4c:47:d2:05:6d:f0:ee:36:ea:9d:a4:01:bf:ef:
c0:10:24:b6:d5:58:0d:40:73:7c:a5:7c:58:03:12:
d5:2d:d8:2e:1c:43:ee:6c:c7:03:76:22:c8:e5:37:
62:28:33:39:79:b8:79:d5:b2:7b:2d:0a:61:e0:7a:
c1:34:fb:9c:5f:3d:6c:e6:26:67:68:c7:f7:50:e1:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:02:4C:68:50:81:6A:8E:27:C5:C6:AA:0F:62:9A:04:EB:FD:A3
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:3c:73:f0:84:b3:df:72:c6:2c:f4:4b:70:c1:83:40:9c:
3c:51:e0:23:a6:fc:da:a2:2f:3f:65:71:d4:13:8f:53:7a:57:
ed:27:03:94:b4:de:7c:32:9e:89:e0:de:50:08:c4:b3:3b:d7:
bc:a7:84:b5:d3:67:c6:c4:49:bb:18:bb:59:b8:22:92:b6:23:
d7:36:73:f9:1d:81:4e:7e:4a:91:18:aa:ba:61:80:65:d4:e8:
cb:09:8c:b7:3f:a5:53:03:3c:f5:4c:03:75:8e:49:2d:3e:e3:
c5:9b:34:1f:91:17:ec:56:a6:26:01:aa:39:b5:e5:dd:86:b6:
48:ff:07:90:ef:75:5e:a8:78:e7:55:bb:ce:71:fa:54:e8:aa:
de:5e:65:76:60:60:f3:98:c6:dd:e0:87:90:8a:e1:94:78:16:
6b:e1:d5:c3:98:63:1c:17:90:b4:b2:ec:6a:0d:04:1d:9a:80:
5e:e5:aa:23:00:d5:0c:42:f4:0a:cf:aa:e1:bd:6b:8e:29:e9:
c0:90:7b:ae:c4:d7:a5:cb:d7:91:90:e3:25:d9:95:8b:2d:4f:
05:52:7d:3a:65:5a:64:65:fa:f7:06:1c:9b:25:ef:32:cf:18:
eb:75:61:e2:2d:94:6c:d7:8c:ae:79:be:d0:f7:0d:b5:17:cf:
62:e5:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:43 2025 by rpki-client