Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: GsJJCihqpoxbVzPXy6zevVvqQq7pfwIVylf/C2XCsls=
Subject key identifier: 51:06:36:22:B9:A1:05:91:A0:E3:D3:3E:23:32:67:8A:50:4C:F3:8C
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 0199239F25D563CFE9A198AF14E96EA58E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: T7hBGlXA6uVNZLIXPKpQ9fl65QLTbnLBtdGgY3r772c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:25:d5:63:cf:e9:a1:98:af:14:e9:6e:a5:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=51063622b9a10591a0e3d33e2332678a504cf38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:b3:88:ff:fb:0d:3e:95:ac:64:55:53:45:
95:98:34:8e:19:35:f1:04:98:b3:28:30:8b:59:c2:
37:b1:89:09:bc:8a:74:65:3c:64:d6:5a:0e:93:0e:
c1:86:bc:60:da:6d:33:33:2f:77:4d:0d:5b:8a:03:
1b:02:30:32:e3:d5:41:b9:e0:1b:e4:2a:04:59:f6:
27:e3:bf:9f:3a:d3:fc:d6:1f:a5:5e:d0:7f:18:0a:
cf:0a:5e:8e:12:64:2b:a7:f1:23:a4:b8:7f:7e:85:
dc:a8:1a:5d:ef:4c:02:92:0c:c9:79:b2:d3:9a:ee:
cf:4e:9f:43:5c:5e:81:d9:5f:fc:61:cc:ce:7e:0b:
4a:f4:fe:fb:97:17:ec:de:96:16:64:23:6c:e1:92:
ff:cf:18:a8:61:3f:0b:77:87:11:34:75:da:67:46:
40:09:5a:e5:da:cc:37:1d:36:c6:d6:4e:c3:58:0c:
41:96:cc:12:0e:41:9b:74:62:18:03:41:a0:be:c3:
ef:3b:d0:a9:6f:64:64:6b:1a:4a:b1:28:ac:14:45:
c1:60:e2:5a:fb:dc:80:67:39:ab:c8:aa:2c:13:68:
b7:df:ca:77:35:47:4c:4f:63:e8:a4:d1:1a:58:66:
11:17:46:30:80:ae:ee:65:fb:26:e8:50:42:e3:23:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:36:22:B9:A1:05:91:A0:E3:D3:3E:23:32:67:8A:50:4C:F3:8C
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:65:17:26:41:dd:54:b7:29:ec:21:06:2b:30:73:cb:73:15:
a2:65:a7:ef:d4:67:55:34:7b:8c:d1:ab:55:ce:d7:0b:59:a9:
86:cd:cf:55:01:8a:63:ab:63:1a:e6:7f:cd:ca:c2:ae:02:0e:
d3:f2:30:80:95:61:57:e2:69:7a:c8:96:31:bf:04:c1:a6:dc:
83:e1:be:12:aa:c6:a8:ae:f5:1d:d7:11:aa:41:53:a7:3c:a8:
9c:54:63:b0:ba:8c:e1:9c:48:16:5e:0e:28:eb:e5:74:59:10:
b2:41:ac:f1:f2:3b:cb:9d:77:f4:b2:21:fb:04:d3:2f:2e:98:
36:96:24:bc:08:1a:5f:cf:d6:ee:d5:8d:d4:1f:53:52:18:24:
63:27:93:d5:bf:0f:7a:30:13:86:d0:17:38:4e:5f:5d:83:db:
81:22:ad:c8:93:3b:7d:c8:1e:5e:65:4a:91:7c:1c:e7:df:2b:
73:e7:0c:53:ff:10:99:81:6e:7f:28:fa:a7:5d:ef:36:8b:69:
95:61:05:c3:8d:be:48:46:6d:15:ae:eb:a1:df:15:60:d6:95:
dc:7b:3f:3c:dc:27:6f:6f:a5:65:e4:a6:7b:a5:88:01:37:44:
4e:30:a2:9f:19:48:af:05:00:c5:f8:c5:fa:42:29:af:df:c5:
6d:93:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:21 2025 by rpki-client