Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: oonOu7ZuJrdxpSnX16yVkCzfp3gi9Rs3IjmqmE84zk0=
Subject key identifier: 3C:EC:CA:F4:6A:39:32:96:E0:C7:AE:E8:F0:5A:44:85:4A:14:30:8C
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019931C852BC7BC5B9CEE550AF8969E2D3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 04:00:35 +0000
Manifest this update: Wed 10 Sep 2025 04:00:35 +0000
Manifest next update: Thu 11 Sep 2025 04:00:35 +0000
Files and hashes: 1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: P7YGheWuporqt4ImpbHyqnek8kVYmOLy0+6rdKI4O64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:52:bc:7b:c5:b9:ce:e5:50:af:89:69:e2:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Sep 10 04:00:35 2025 GMT
Not After : Sep 11 04:00:35 2025 GMT
Subject: CN=3ceccaf46a393296e0c7aee8f05a44854a14308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:7a:7c:f3:50:f7:d2:ff:42:bc:49:bb:3f:
79:a4:ee:b2:36:5c:42:06:8a:bd:27:27:16:0e:f8:
66:29:60:8c:c5:ee:25:00:d0:fd:b4:a0:7c:e6:62:
7f:93:11:fb:e5:ad:e1:59:0a:b4:b9:63:de:f0:a2:
fd:8d:4b:0c:54:44:66:91:43:80:83:f1:86:5a:9a:
e2:7e:58:15:a1:57:de:57:c8:2f:ca:ef:8c:ca:12:
f4:0a:27:bf:b8:a2:b9:ae:51:95:b3:22:42:09:22:
23:61:cc:3b:21:57:11:31:fd:4f:07:05:de:bf:f3:
f4:40:54:52:0f:8f:c8:39:da:7a:c8:8b:80:f3:33:
18:36:18:e9:9c:ec:26:f1:68:7e:d2:89:9f:a6:ec:
c8:94:df:4c:9c:69:f0:3e:06:1a:63:f0:a5:b1:d4:
4f:c1:12:41:01:42:5b:f5:43:3b:34:98:fe:50:9c:
58:cd:51:e4:55:f1:97:58:f6:d3:f1:40:74:dc:d0:
9b:05:62:c3:f7:d8:12:d1:2e:c2:6b:0b:64:2f:c4:
a2:fa:1b:22:16:0a:a2:a5:c2:3f:7f:db:65:76:88:
98:5f:17:8b:5f:77:ca:18:a0:41:e1:20:c4:91:5c:
1c:a0:2b:0b:94:b5:d5:f8:99:07:0c:a0:1d:59:9c:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:CA:F4:6A:39:32:96:E0:C7:AE:E8:F0:5A:44:85:4A:14:30:8C
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6a:b2:17:d8:53:ec:ce:71:e6:fa:33:fd:69:b3:2c:f3:72:
92:55:b0:26:e3:f4:5d:9b:f1:30:11:2b:60:ff:0a:01:28:f7:
80:c0:aa:6d:53:c6:c8:de:76:22:17:a0:3e:60:13:0a:71:cb:
3e:08:ec:4f:5a:eb:d5:2b:6c:8c:b6:c2:47:38:1f:4c:99:19:
17:46:da:ab:01:22:d9:1c:4a:78:dc:54:6e:3e:e9:9c:b4:2f:
6f:95:fb:78:1e:40:c3:98:3c:53:bb:02:74:cf:56:3f:34:e8:
50:96:b5:dd:d1:51:1e:86:68:5b:43:43:6f:dc:15:e5:17:97:
cc:21:d9:3e:60:1d:d9:8f:7c:f7:c5:90:f5:7b:75:e4:81:69:
23:8f:a6:84:46:32:ed:6d:17:a7:94:13:95:64:3b:44:90:41:
6c:7e:2d:1d:87:0c:ca:66:30:f0:c3:bf:29:5d:e4:e7:42:ad:
9c:31:f4:b8:80:8e:27:b1:7b:1b:8e:a5:e7:49:45:52:1c:b1:
5d:27:46:e6:87:20:7e:3f:42:9f:bb:96:d0:a7:4a:62:41:44:
f4:ff:c9:3a:eb:77:0a:77:4a:e8:d4:0b:97:ef:9c:02:fb:00:
40:0f:22:35:ff:7b:3f:49:7a:28:97:62:b5:71:62:7e:09:0d:
d8:59:71:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyFK8e8W5zuVQr4lp4tPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjUwOTEwMDQwMDM1WhcNMjUwOTExMDQwMDM1WjAzMTEwLwYDVQQD
EygzY2VjY2FmNDZhMzkzMjk2ZTBjN2FlZThmMDVhNDQ4NTRhMTQzMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ch6fPNQ99L/QrxJuz95pO6yNlxC
Boq9JycWDvhmKWCMxe4lAND9tKB85mJ/kxH75a3hWQq0uWPe8KL9jUsMVERmkUOA
g/GGWpriflgVoVfeV8gvyu+MyhL0Cie/uKK5rlGVsyJCCSIjYcw7IVcRMf1PBwXe
v/P0QFRSD4/IOdp6yIuA8zMYNhjpnOwm8Wh+0omfpuzIlN9MnGnwPgYaY/ClsdRP
wRJBAUJb9UM7NJj+UJxYzVHkVfGXWPbT8UB03NCbBWLD99gS0S7CawtkL8Si+hsi
FgqipcI/f9tldoiYXxeLX3fKGKBB4SDEkVwcoCsLlLXV+JkHDKAdWZxofQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzsyvRqOTKW4Meu6PBaRIVKFDCMMB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmqyF9hT
7M5x5voz/WmzLPNyklWwJuP0XZvxMBErYP8KASj3gMCqbVPGyN52IhegPmATCnHL
PgjsT1rr1StsjLbCRzgfTJkZF0baqwEi2RxKeNxUbj7pnLQvb5X7eB5Aw5g8U7sC
dM9WPzToUJa13dFRHoZoW0NDb9wV5ReXzCHZPmAd2Y9898WQ9Xt15IFpI4+mhEYy
7W0Xp5QTlWQ7RJBBbH4tHYcMymYw8MO/KV3k50KtnDH0uICOJ7F7G46l50lFUhyx
XSdG5ocgfj9Cn7uW0KdKYkFE9P/JOut3CndK6NQLl++cAvsAQA8iNf97P0l6KJdi
tXFifgkN2FlxYg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:25:35 2025 by rpki-client