Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: vasFUypgAy+O7Id9AQDrr7p06cSEcRP2I5415xe7eJc=
Subject key identifier: 8C:D2:81:29:32:9D:6D:8A:FB:6B:62:54:86:89:99:D6:F4:0E:2F:DA
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019849D2D636ABBC3AF75816ACD9955915AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 03C3
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: yV4qD7UFnUyn8fC3A7o1lj1u1WLh73WO5Feyak1IMUI=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d6:36:ab:bc:3a:f7:58:16:ac:d9:95:59:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=8cd28129329d6d8afb6b6254868999d6f40e2fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:2d:82:f8:49:7b:a3:cc:5a:ce:07:8c:8d:
57:f2:c6:cc:de:60:2c:b9:5a:eb:a6:02:90:f1:88:
3c:43:a3:1e:03:6a:5f:f4:b3:36:f9:54:de:f8:6c:
68:15:a6:92:a3:40:f3:97:e1:fa:4b:fe:cb:1d:6e:
4e:fc:36:fb:d4:a8:cb:5f:9b:fb:bf:29:2b:b8:92:
64:88:80:dc:57:5c:18:79:4e:e9:83:d8:47:8e:0a:
33:dc:2c:58:be:25:41:cb:8c:f6:fd:fb:a4:fd:90:
73:5f:88:fe:3f:9f:fb:c5:9c:c5:9f:ef:ac:df:fa:
39:f1:20:05:36:d6:9d:24:11:fc:a6:21:c3:73:02:
3f:61:6d:ea:66:74:8f:ee:7f:52:60:b0:7e:b9:8f:
40:86:80:4b:c3:aa:1e:39:0a:7c:bf:45:84:48:fb:
97:96:5b:38:af:85:83:eb:83:5b:f7:29:31:00:6b:
20:b4:43:49:7f:72:0d:11:d0:f3:f7:5c:43:17:5b:
de:ed:4b:fa:44:71:89:b5:7d:67:a3:ba:f3:09:71:
ff:fb:0d:94:0f:1e:2a:0a:82:91:b6:f8:6a:6c:ea:
cf:27:07:08:ea:b3:f6:60:d0:9f:07:59:12:d5:f1:
62:6d:ef:bd:e7:74:88:f5:8e:57:67:e2:53:b9:2a:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:81:29:32:9D:6D:8A:FB:6B:62:54:86:89:99:D6:F4:0E:2F:DA
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:01:e2:13:0d:0b:5b:e6:de:d9:fe:8c:b1:81:64:05:b8:
2b:af:fc:54:a1:3f:4a:18:7d:ac:91:51:85:94:bc:c8:50:42:
ef:05:d2:7c:4c:72:dd:44:85:3a:c6:bc:bf:b1:79:1c:94:ed:
46:31:3a:c1:23:c3:a9:41:82:b0:87:de:2b:eb:1c:15:8b:4e:
93:4e:02:2c:6f:8c:8a:41:fc:60:7a:ff:54:d8:f7:ea:3e:a7:
12:b1:33:1e:72:5b:df:17:e1:12:7a:58:ca:90:6c:88:dc:1f:
3c:32:6b:93:ed:32:d4:e3:58:d4:a1:e6:2d:74:1f:0d:e4:8a:
9c:af:71:f7:33:c0:b0:00:9b:1a:94:75:4d:32:f2:70:4c:9c:
96:de:29:39:0b:15:92:b0:01:68:a0:c2:55:93:9c:e8:4b:1f:
c1:1b:e6:73:cb:10:2d:ec:0d:2e:8d:1e:19:77:12:db:f5:2a:
e9:2e:d8:d8:6f:c7:33:6e:c9:65:30:73:72:ae:ac:00:f9:7a:
41:9d:2c:78:34:01:ff:c1:c2:0a:72:cd:a5:2e:37:af:08:62:
a5:e3:e2:44:7f:ad:d8:7f:62:1a:02:7e:76:29:5b:4b:58:10:
ac:b9:d5:63:79:91:e6:20:11:39:ce:31:05:1e:28:17:68:8e:
16:eb:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:23:54 2025 by rpki-client