Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: MbLVNzM+wtnQSAd6fOphREOfBjQpkzP565nabeaQzos=
Subject key identifier: 82:22:BE:D1:D0:3F:61:47:DA:07:AF:E0:13:3E:A7:F2:59:8B:F8:1B
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019A1D99C9FE2E0C030D2EAEE6A7D3527202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 11A3
Signing time: Sat 25 Oct 2025 23:00:09 +0000
Manifest this update: Sat 25 Oct 2025 23:00:09 +0000
Manifest next update: Sun 26 Oct 2025 23:00:09 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: cuP4G/Vq52cXt6SaIdoJi2E3M1n8FaeVq+Z0L3rp7ks=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:c9:fe:2e:0c:03:0d:2e:ae:e6:a7:d3:52:72:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Oct 25 23:00:09 2025 GMT
Not After : Oct 26 23:00:09 2025 GMT
Subject: CN=8222bed1d03f6147da07afe0133ea7f2598bf81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:86:85:f4:41:54:18:64:04:75:09:d8:64:
ad:14:32:45:4b:c7:eb:bf:04:11:2f:0c:2b:9f:0a:
b5:12:c0:bb:5b:46:ba:3a:df:36:e4:e3:8b:76:24:
af:84:a1:7c:99:c4:64:04:03:3a:97:55:c5:7c:36:
83:36:29:76:84:2a:3e:81:74:77:f2:cd:6c:32:da:
28:32:9a:10:ab:26:b4:72:8f:16:04:c6:ae:8b:a8:
2d:6f:99:15:4d:56:b7:be:18:c5:a8:fa:91:d3:4e:
a9:8b:3a:27:e5:d0:48:5b:06:a2:99:ed:b0:0d:b3:
9d:56:39:29:0c:c1:3a:14:a1:42:4f:4c:ca:e6:e1:
ba:3f:d6:da:df:89:d4:c8:08:23:5c:aa:bc:de:2a:
41:17:0e:59:9a:68:ba:a8:d1:d4:fd:70:dc:31:b3:
c3:52:3b:b9:44:eb:f5:8a:f6:ac:be:7c:14:7b:39:
19:61:73:9e:b8:20:9d:ac:8d:94:2d:f8:7f:c9:2e:
75:6a:71:48:d3:28:f0:6b:94:63:c2:68:1b:e2:e2:
b7:af:9f:2c:06:51:65:7f:19:fe:9e:6a:27:28:29:
0b:5d:da:ae:24:eb:c7:c6:f4:f0:bd:d6:73:7e:6b:
60:02:5c:13:12:12:d5:5c:98:77:93:d1:a1:17:5f:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:BE:D1:D0:3F:61:47:DA:07:AF:E0:13:3E:A7:F2:59:8B:F8:1B
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e9:20:42:c1:c8:0b:ac:53:93:36:3e:f9:c8:46:af:ba:cc:
28:d0:c0:57:aa:f4:92:65:e5:71:99:6d:7c:43:88:95:72:58:
a9:a8:71:3f:1e:5f:18:ad:2e:b0:72:01:75:9b:4f:6a:e6:32:
7c:01:45:87:2f:d7:d8:5f:ca:df:bf:43:05:24:42:da:61:ce:
5a:a0:e4:26:c0:15:24:84:c7:b0:58:f2:35:66:9c:b9:97:97:
35:20:ee:e3:c1:ce:9a:69:7b:ca:34:06:95:ea:4d:78:bf:ff:
b2:26:94:3b:09:8c:39:09:06:52:80:15:b3:d2:6f:b6:29:ed:
f4:62:4f:16:f0:d7:b8:7d:16:ed:e5:bd:d4:2b:fd:ee:4e:d9:
7b:35:22:f3:b9:78:30:25:18:18:c5:79:08:28:8f:31:e5:16:
36:29:bc:77:08:fa:d7:b8:17:31:a6:90:36:85:a7:b9:f8:91:
7e:5e:e9:86:71:c5:af:e3:51:a5:2b:2d:7b:ed:ec:a9:d7:19:
d2:66:70:9c:d6:30:74:59:de:69:9c:6f:35:39:a8:23:e9:c6:
cb:fe:f9:89:c8:a0:11:3f:3c:80:e6:5e:c9:59:3d:e9:47:55:
94:02:9a:ed:4b:f6:8e:e4:67:cb:17:61:40:d4:a2:04:23:02:
36:40:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:22 2025 by rpki-client