Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: UE/JTSBk1JAWsWHcsiL4i8Z8gWKl3PKzXDZta+qsdyo=
Subject key identifier: 96:AF:6A:0F:4B:70:02:6B:A4:EA:D1:98:13:2B:3B:61:A7:F0:B2:7C
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 01992E22AE3519FC4D5A7DF460829AA250B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 1127
Signing time: Tue 09 Sep 2025 11:00:48 +0000
Manifest this update: Tue 09 Sep 2025 11:00:48 +0000
Manifest next update: Wed 10 Sep 2025 11:00:48 +0000
Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: WzHko2gfzG6ktnwQ/O2yRZlJESmHlOseBzciKfMpJzE=)
2: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
3: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (hash: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:ae:35:19:fc:4d:5a:7d:f4:60:82:9a:a2:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Sep 9 11:00:48 2025 GMT
Not After : Sep 10 11:00:48 2025 GMT
Subject: CN=96af6a0f4b70026ba4ead198132b3b61a7f0b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:39:d3:b0:15:56:da:d6:26:93:6f:fa:53:
b3:11:e5:44:0f:1f:fc:77:f5:06:5d:11:c1:3b:45:
87:12:e7:aa:cf:61:0c:35:02:c4:08:6e:77:36:87:
ed:29:8d:c9:2a:cf:ee:c7:00:df:56:87:62:8f:0b:
a8:fc:f7:e7:ab:cf:29:ca:19:90:3f:2a:e1:56:ac:
5d:1b:8b:f3:1f:d8:51:81:aa:48:22:eb:c1:82:73:
bb:c1:fc:24:e7:88:1e:71:3c:14:f2:53:44:31:f3:
65:8c:1e:11:29:34:88:28:cf:ee:6b:07:4f:09:1e:
81:06:9a:8c:dc:2a:90:78:10:04:38:ba:ce:a1:46:
0f:21:fd:dc:11:24:9c:de:2a:e4:c8:dd:b7:94:5a:
5e:94:d1:ca:25:8e:f2:9d:4f:c6:5d:9a:f7:a8:d7:
22:9d:28:e5:26:52:b7:60:11:10:95:c7:e3:1f:2c:
76:ee:ca:92:fc:49:c6:b8:5b:bc:41:f9:44:3a:99:
8b:0f:ce:29:f6:01:96:26:a7:fd:dd:2e:00:eb:64:
15:06:b1:81:62:2c:0a:48:bf:bd:04:1e:7a:68:86:
9e:8f:72:87:62:7f:2f:35:74:d9:d1:25:93:69:8e:
54:1b:d8:b2:d7:75:33:4c:8b:03:a1:30:1b:8c:fc:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:6A:0F:4B:70:02:6B:A4:EA:D1:98:13:2B:3B:61:A7:F0:B2:7C
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a9:cb:63:d0:89:c0:b1:1e:ab:81:45:33:65:fd:ee:e1:fc:
0e:eb:27:dd:a0:ec:3f:8c:48:38:66:26:30:94:35:de:a3:15:
f1:db:6e:52:8d:d5:69:0b:ea:b2:b8:ed:ce:7f:19:ff:07:08:
a5:3d:6d:15:3d:11:f9:96:7b:a4:23:f5:bc:44:59:f8:d6:4f:
ef:a9:4b:8c:f9:31:5a:a5:35:91:13:26:1f:22:67:5b:3a:ac:
89:3b:8c:9c:fa:29:c7:ee:8a:95:81:f7:34:fd:d9:dc:ac:46:
18:c2:4b:7e:09:2f:77:15:dd:67:fe:c5:2e:ca:29:28:18:3f:
ae:ae:c1:32:25:ae:e9:64:92:fa:0a:8a:b6:f4:16:08:7d:d3:
77:b3:43:ff:0c:c2:19:96:e7:c2:f1:79:46:4f:af:57:5f:cf:
3f:d8:4a:54:77:55:c5:53:98:4a:9a:1c:23:f6:60:4d:b6:b0:
0c:a8:e5:ea:03:cc:3f:13:b7:d8:a4:19:62:49:48:de:d6:a1:
00:9f:52:c3:61:31:f6:25:05:8a:d5:b4:06:0f:7f:65:cf:a9:
a4:3e:bf:b8:c6:6d:6a:81:42:7f:37:b0:3f:fc:8f:ed:52:2d:
cc:bc:a8:8f:33:bc:48:b5:0e:26:36:b3:22:7e:57:ad:01:8b:
fc:74:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:18:18 2025 by rpki-client