
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier: 5hXSz1lBCWL07+CFYC+SQrKLGwzaZklacwCWowSPIcc=
Subject key identifier: 02:93:9F:08:0B:2A:2E:00:46:94:B7:07:AC:B6:55:68:71:35:E6:FD
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019A21404228F50F451E25532A3829449A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 16:00:50 +0000
Manifest this update: Sun 26 Oct 2025 16:00:50 +0000
Manifest next update: Mon 27 Oct 2025 16:00:50 +0000
Files and hashes: 1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: fAZa6ygis5Me8W5Icx/uxJVY2H12DJWqluOEDSwUZaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:42:28:f5:0f:45:1e:25:53:2a:38:29:44:9a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Oct 26 16:00:50 2025 GMT
Not After : Oct 27 16:00:50 2025 GMT
Subject: CN=02939f080b2a2e004694b707acb655687135e6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:93:c7:a7:79:c5:09:09:13:93:f9:9e:31:
f2:31:5c:56:33:76:9b:49:d4:2b:32:4e:b6:1a:16:
ed:13:1f:49:c6:2e:c4:4e:ac:d5:2d:58:2d:30:0c:
1b:1f:d8:48:52:36:2d:91:25:4b:ea:dd:ae:61:ce:
3f:c3:9e:db:9e:fd:98:27:95:74:4b:4a:09:74:5b:
18:94:c7:fc:d0:54:ab:39:93:7d:c9:e2:b7:9e:a2:
9a:d1:cb:e1:32:f6:75:6b:79:ff:97:30:4a:94:28:
99:bf:41:41:3e:01:6c:87:6e:e1:cf:75:b4:71:6e:
be:e9:09:03:cf:9a:5e:9e:0b:3f:f7:e9:41:b0:42:
bd:4e:71:0a:60:69:d8:c2:3b:f8:80:0b:31:2d:ee:
37:b1:5b:99:49:67:ff:7a:84:6c:1f:1c:ab:56:f1:
d2:4e:65:cd:64:26:9c:99:59:2a:54:da:99:f1:35:
1a:b2:0d:14:e0:0d:fc:c1:f9:e2:18:2d:70:99:15:
f0:28:86:8f:fb:49:d0:9d:0a:2d:0a:76:8e:96:af:
2f:58:1a:c1:68:4b:12:a2:5f:83:33:94:95:60:4f:
59:1e:36:04:b1:90:fb:a4:f9:65:e5:d2:24:d8:80:
a8:13:c3:5c:b0:1e:a5:ed:2b:8e:b8:90:43:f4:da:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:9F:08:0B:2A:2E:00:46:94:B7:07:AC:B6:55:68:71:35:E6:FD
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fb:fa:e5:5a:f6:e5:ef:03:5e:c8:ee:a8:1b:dc:b2:d8:d2:
fa:85:bb:4b:e2:d4:e0:a9:be:c9:4e:d9:14:97:5c:9a:00:83:
40:99:1a:1a:33:76:95:19:f2:b5:0e:cd:51:d7:8c:13:ff:1e:
60:df:7b:0c:74:22:7f:b8:5b:86:e5:ff:d2:99:89:9b:6d:13:
c5:36:8a:d6:44:fb:66:38:a3:f6:8e:f7:d9:68:6d:fa:6a:22:
63:2e:34:88:bc:27:29:56:31:36:84:87:a1:bd:c4:a7:4f:a0:
bd:67:aa:eb:14:74:5a:35:de:42:03:4e:4f:1f:87:7c:be:8e:
59:42:0d:15:99:fb:35:1a:2f:cc:ee:35:eb:bd:e6:82:f5:ce:
af:16:53:2d:b7:8e:2f:eb:da:c7:b7:ff:29:36:80:ed:d5:bc:
25:ec:49:e6:51:19:22:43:52:f7:35:eb:14:24:d7:34:72:6d:
92:83:80:10:97:c3:0b:c5:42:ce:85:e7:16:eb:ca:e4:dc:ab:
ed:2a:e8:a9:6a:3a:85:50:ef:37:e4:9a:51:79:6e:30:b8:13:
1d:5b:b0:2d:34:b0:81:25:83:21:1e:01:62:cb:c3:de:f4:15:
b1:11:a4:63:9a:50:32:ff:fb:af:00:ac:82:72:43:14:d2:39:
d6:1c:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:14:35 2025 by rpki-client