
Manifest
$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
File: BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft (raw, json)
Hash identifier: Ri3Z2m4bxysj7bvJE30c327xHmxk7y05YqKxn+4sCN8=
Subject key identifier: CE:DB:3F:55:9A:82:42:38:4D:BD:B2:EC:4C:41:81:EE:64:82:05:75
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Certificate issuer: /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial: 1B69F7BECD8065D0A25D5E9B01C48B60247AAE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
Manifest number: 015F
Signing time: Fri 21 Aug 2026 01:21:19 +0000
Manifest this update: Fri 21 Aug 2026 01:16:19 +0000
Manifest next update: Sat 22 Aug 2026 01:44:19 +0000
Files and hashes: 1: AS200454.asa (hash: niaO5itGOgM5yJefkbbicM5xDBdwreU4VJc+rDCZ5mY=)
2: BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl (hash: gFLsKolVaSEMVh1IHmlleetcVtywmS9VhMWWW8xyF8M=)
Validation: OK
Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 01:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:69:f7:be:cd:80:65:d0:a2:5d:5e:9b:01:c4:8b:60:24:7a:ae:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Validity
Not Before: Aug 21 01:16:19 2026 GMT
Not After : Aug 22 01:44:19 2026 GMT
Subject: CN=CEDB3F559A8242384DBDB2EC4C4181EE64820575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:60:d9:59:c6:28:00:80:03:65:3d:dd:2c:
f7:bd:b5:4c:e6:fa:f1:31:59:60:d0:bb:b2:50:2d:
1c:0a:ee:c6:f0:0e:ed:15:f5:d2:8f:01:da:41:d2:
7b:ea:d2:63:e6:09:ce:ec:b9:ec:64:79:5c:cb:92:
f8:d9:1d:fa:6a:7b:1b:25:f4:31:99:67:f9:de:34:
b1:6f:af:b1:1e:f5:1d:7b:d4:c4:3e:f3:08:ec:71:
d3:17:8b:3f:ec:13:64:49:cd:09:0d:ad:93:a0:8d:
89:20:24:ac:ee:67:7b:1c:45:23:5a:7e:29:48:13:
b5:f3:d8:18:18:39:31:c5:53:bc:db:68:37:d6:c1:
8f:f2:2a:fc:5f:da:cf:ca:43:fa:f5:c4:6d:8a:05:
fd:92:44:6d:9e:48:ac:4c:73:1f:15:6c:35:7e:3d:
28:a0:15:cd:47:ae:2e:80:e2:37:08:a6:a6:b0:8e:
bc:af:a8:74:14:36:1e:1e:78:cf:cf:46:45:37:89:
5f:0c:52:a9:06:47:14:40:4d:3e:ff:61:d9:1b:84:
d8:53:d1:ef:b2:1e:6f:af:e2:4a:59:ce:61:10:2f:
ae:dd:34:11:35:59:c7:23:cb:10:5d:a1:7a:82:26:
36:d8:ac:ec:b0:7a:59:f9:0e:12:f8:e9:7a:db:e9:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DB:3F:55:9A:82:42:38:4D:BD:B2:EC:4C:41:81:EE:64:82:05:75
X509v3 Authority Key Identifier:
keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:ab:da:25:3c:58:26:68:c3:69:a4:44:37:af:88:05:34:
4f:31:4d:b1:6e:06:00:16:08:9b:7c:cf:44:80:6a:41:43:87:
84:59:6f:e6:10:51:b7:ab:49:02:95:8b:d5:18:81:dc:6b:57:
b2:26:01:e5:75:3e:71:35:cf:a4:17:36:3e:cb:de:c5:2c:45:
42:43:de:bc:f9:e8:e3:6a:31:60:60:06:36:66:21:37:24:ae:
73:d1:21:11:34:24:97:67:c7:5f:0a:40:4b:20:96:ee:1c:13:
14:22:fa:e6:b4:18:b2:ff:de:0a:34:17:18:19:53:17:39:ce:
a4:6c:86:30:05:f9:fc:e1:43:f5:19:08:17:e3:25:de:23:e9:
64:a2:d4:e1:f5:5d:fb:d7:69:ae:c0:d2:b7:79:5a:8c:b4:38:
cd:0f:90:36:f5:71:ca:10:67:c1:aa:b1:3c:00:b8:56:b6:4d:
34:32:12:4a:c6:91:23:b4:20:aa:b9:23:e7:82:92:f7:43:31:
f7:d5:9d:b1:6f:cc:3c:f9:2a:f7:c1:43:54:5d:a2:04:32:19:
da:2d:33:68:ee:38:e5:3b:93:dc:09:eb:6e:9d:f4:3e:7b:bc:
10:24:54:7b:1b:1b:c9:f3:24:c8:42:09:ff:1b:08:5f:57:66:
22:48:b4:6e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUG2n3vs2AZdCiXV6bAcSLYCR6rpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmM1YmRiOTdlOTQ3NmY1MDYzODE1ODg4NmQ0ZDk3MDI2
YTViN2FhNjAeFw0yNjA4MjEwMTE2MTlaFw0yNjA4MjIwMTQ0MTlaMDMxMTAvBgNV
BAMTKENFREIzRjU1OUE4MjQyMzg0REJEQjJFQzRDNDE4MUVFNjQ4MjA1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAWDZWcYoAIADZT3dLPe9tUzm
+vExWWDQu7JQLRwK7sbwDu0V9dKPAdpB0nvq0mPmCc7suexkeVzLkvjZHfpqexsl
9DGZZ/neNLFvr7Ee9R171MQ+8wjscdMXiz/sE2RJzQkNrZOgjYkgJKzuZ3scRSNa
filIE7Xz2BgYOTHFU7zbaDfWwY/yKvxf2s/KQ/r1xG2KBf2SRG2eSKxMcx8VbDV+
PSigFc1Hri6A4jcIpqawjryvqHQUNh4eeM/PRkU3iV8MUqkGRxRATT7/YdkbhNhT
0e+yHm+v4kpZzmEQL67dNBE1WccjyxBdoXqCJjbYrOyweln5DhL46Xrb6dCjAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUzts/VZqCQjhNvbLsTEGB7mSCBXUwHwYDVR0j
BBgwFoAUvFvbl+lHb1BjgViIbU2XAmpbeqYwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5sZWl0ZWNhc3Ryby5jb20vcmVwby9D
QVNUUk8tSU5URVJORVQvMC9CQzVCREI5N0U5NDc2RjUwNjM4MTU4ODg2RDREOTcw
MjZBNUI3QUE2LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdkZ2YmwtbEhiMUJq
Z1ZpSWJVMlhBbXBiZXFZLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuG
YHJzeW5jOi8vcnBraS5sZWl0ZWNhc3Ryby5jb20vcmVwby9DQVNUUk8tSU5URVJO
RVQvMC9CQzVCREI5N0U5NDc2RjUwNjM4MTU4ODg2RDREOTcwMjZBNUI3QUE2Lm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAW+6r2iU8WCZow2mkRDeviAU0TzFNsW4GABYIm3zPRIBqQUOHhFlv
5hBRt6tJApWL1RiB3GtXsiYB5XU+cTXPpBc2PsvexSxFQkPevPno42oxYGAGNmYh
NySuc9EhETQkl2fHXwpASyCW7hwTFCL65rQYsv/eCjQXGBlTFznOpGyGMAX5/OFD
9RkIF+Ml3iPpZKLU4fVd+9dprsDSt3lajLQ4zQ+QNvVxyhBnwaqxPAC4VrZNNDIS
SsaRI7Qgqrkj54KS90Mx99WdsW/MPPkq98FDVF2iBDIZ2i0zaO445TuT3Anrbp30
Pnu8ECRUexsbyfMkyEIJ/xsIX1dmIki0bg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 18:33:36 2026 by rpki-client