Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: scEgAqhaHkooFwXUEwHOEYtPFaV46kvcFTg99QlPySg=
Subject key identifier: 33:C2:6F:0D:22:31:0B:8F:7E:67:B4:A9:55:66:86:9C:2D:B6:70:56
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 019A71B8B237C4A626737A4CC27D94B16778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: gxxrFqzWaEmQUwbB9ldeYF8EWoPJi6XkOQTDrsPcxls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:37:c4:a6:26:73:7a:4c:c2:7d:94:b1:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=33c26f0d22310b8f7e67b4a95566869c2db67056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:56:4c:a4:f7:00:84:45:33:62:db:fe:ab:
97:24:b8:25:ba:cb:99:99:9f:35:3e:9e:eb:03:77:
f9:3e:07:6e:a1:04:aa:01:f8:8a:ff:85:43:e4:54:
8e:d0:97:65:22:47:a5:85:26:6b:95:75:38:58:22:
de:f9:8e:cc:79:06:87:c1:cb:26:be:d7:a7:5d:a6:
24:4e:22:aa:09:19:b4:11:c6:ba:74:88:fd:0d:0d:
fe:d6:8c:fd:e6:c7:4e:75:9c:08:79:9f:a2:e0:a5:
eb:bb:68:e4:62:34:c5:89:73:b3:9a:bb:5d:6f:53:
44:c9:2a:c4:36:c3:18:06:1e:60:ec:dc:01:ae:e8:
af:2a:0d:3e:f1:eb:45:00:3c:e3:2e:4a:c5:be:fa:
ed:99:ea:44:f4:15:80:49:99:26:75:18:48:85:f8:
88:c4:9b:69:c6:d9:47:45:d2:71:59:10:be:aa:56:
bc:a7:50:6f:4f:65:df:80:c5:03:6c:ea:ba:52:1a:
51:05:c2:db:3d:d1:4a:75:df:e9:85:4c:3e:fb:47:
5f:c8:f1:b6:9b:2d:98:3c:28:e6:c5:68:11:b6:d1:
50:94:76:4a:75:c4:ad:82:8f:97:9b:29:d1:b1:94:
de:e7:6a:5e:ad:02:ee:dd:f5:b9:03:2e:62:40:02:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:6F:0D:22:31:0B:8F:7E:67:B4:A9:55:66:86:9C:2D:B6:70:56
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:ee:bc:cb:9c:8d:1f:58:ca:97:eb:d8:3f:5d:31:70:36:
93:49:1d:6f:e6:e0:bb:a1:64:df:60:c8:fc:37:d7:f3:50:23:
7d:25:d7:4b:7b:d8:0d:cb:17:4e:f7:35:3a:bd:a9:3b:14:bf:
2f:49:c2:3e:ae:14:18:81:09:49:bf:f3:4c:c2:da:e0:8a:c3:
7d:08:e9:a8:5b:59:74:77:70:66:50:30:4f:6a:26:78:4f:d0:
5f:9a:9b:75:63:5f:09:7e:2d:40:78:cf:14:95:8a:70:84:ff:
87:b7:e1:ab:b4:a5:47:07:97:62:9e:7d:89:7f:e6:d5:8e:0f:
dc:94:74:98:2b:f6:e4:67:cf:48:50:b3:c9:fe:d2:ac:e6:6a:
a5:22:df:54:d9:65:b4:cc:87:4d:f5:67:c4:28:0b:82:a5:01:
6c:d0:da:2a:14:08:3f:25:b1:e4:46:d0:0a:f4:c8:c5:ac:54:
9a:9e:c0:ef:f6:3b:e6:96:6c:d7:c3:9a:6a:f5:f9:db:a7:56:
95:25:f1:2c:6a:ab:c6:47:73:c6:99:a2:63:20:ec:4a:31:9f:
e4:9e:c6:3b:b4:81:2d:30:3a:6c:40:00:98:7a:14:a3:fe:bf:
1b:4c:3a:ce:7a:b2:36:7a:32:de:a2:43:04:7f:80:75:94:2c:
7a:b6:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:47 2025 by rpki-client