Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: axv9MNVtXIKY3eiSC6rwwA8W1MgXNQ6tXW+xLgTisUY=
Subject key identifier: D6:03:AD:61:1B:3C:28:9A:24:A4:53:DF:51:1F:C2:9F:11:49:6A:9C
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 0197469DDB530AD3B49083D4678B3B31630D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 19:00:39 +0000
Manifest this update: Fri 06 Jun 2025 19:00:39 +0000
Manifest next update: Sat 07 Jun 2025 19:00:39 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: vOAfVA3th1xN8Fgj8QFToPEb8RGna3WYdDOGkqhyCgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:db:53:0a:d3:b4:90:83:d4:67:8b:3b:31:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Jun 6 19:00:39 2025 GMT
Not After : Jun 7 19:00:39 2025 GMT
Subject: CN=d603ad611b3c289a24a453df511fc29f11496a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:94:47:cf:d1:31:a6:6d:88:1a:5c:f1:37:
1d:48:c0:83:72:91:a4:bd:d7:9c:44:cf:2d:04:cf:
b6:3d:00:f3:9c:4c:1b:ac:c1:bf:7f:2a:f5:74:33:
6a:7d:13:95:b7:30:c0:2f:13:24:45:24:8f:e0:e5:
d4:b8:26:bb:32:12:5c:dd:60:d4:c4:98:10:06:d9:
86:99:65:96:0d:fa:68:5d:46:a9:d2:a8:e5:2b:77:
fd:03:90:1e:f9:0b:0a:ec:d0:60:80:72:f4:b4:86:
0c:a2:7f:26:1d:e8:fe:80:4b:df:d9:82:ed:bf:b5:
ca:95:d9:a5:a8:83:d9:5b:89:92:07:9f:81:f9:d6:
33:4e:28:a7:b8:6c:c4:f7:ef:72:60:62:e2:7d:b3:
df:24:a4:2f:01:6b:46:41:09:c4:4e:80:72:da:df:
68:3d:a9:f5:05:b5:83:66:ad:13:f5:d7:ea:0f:77:
cd:34:e7:4a:8b:45:d1:08:21:42:ea:88:fe:da:03:
69:e0:c1:99:61:70:e2:11:76:a4:de:87:8d:5c:87:
58:60:bc:28:9e:89:9e:09:86:ed:33:44:04:63:e3:
95:84:44:16:eb:df:fb:0f:95:25:42:c0:b9:00:ba:
2d:f9:79:a4:9f:39:63:92:09:79:90:00:4d:e3:80:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:AD:61:1B:3C:28:9A:24:A4:53:DF:51:1F:C2:9F:11:49:6A:9C
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:79:9f:51:c3:a2:f7:36:70:a3:8b:c5:78:6b:63:73:b9:
37:56:24:c0:d3:a9:fe:b6:e9:65:67:88:e1:0a:d7:da:e8:4e:
bc:70:f4:59:26:81:23:30:b0:fb:7d:6c:d1:c9:41:93:53:e7:
06:3a:bb:2c:4a:a9:4b:ec:66:34:3e:21:e7:57:4d:6e:ae:77:
1f:34:fe:05:df:e8:c2:1f:10:3b:8d:65:f9:13:97:e2:c6:34:
63:2e:91:48:21:20:2a:bf:e0:12:c1:16:b3:25:26:ea:5b:1a:
85:48:4f:6b:59:d9:17:49:66:d2:35:39:72:d3:76:1b:7f:af:
3c:2e:1a:e0:2c:7b:0f:d7:9b:92:87:1f:31:6d:f0:9d:8e:64:
78:5e:fc:7f:27:8f:6c:cb:11:c7:4b:ac:d4:41:7a:c5:d5:b2:
3e:21:32:de:04:e7:cf:ed:23:7e:55:28:55:7e:ff:90:b6:64:
19:b9:6a:4f:62:29:ba:de:00:f3:98:1a:b0:4f:80:91:0e:f3:
ef:3e:3e:ca:73:22:74:10:0d:79:bd:05:2f:fa:a3:90:71:e6:
c2:9a:22:01:bb:49:b4:56:e2:82:1f:87:59:08:13:50:fa:02:
18:06:8b:59:5d:a0:fd:39:98:01:32:e9:d6:fe:bf:d9:77:f1:
86:54:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:06 2025 by rpki-client