Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: BKg4XbzAuwOqDrG9U51w12IKud5cNfGMG5CBa600gtc=
Subject key identifier: 98:CE:59:FA:74:D6:A1:9D:99:03:91:EB:3A:D5:57:98:89:49:69:4B
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 019647B394BE6436FFFAB4ECD69D7ED97525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 14F3
Signing time: Fri 18 Apr 2025 07:01:13 +0000
Manifest this update: Fri 18 Apr 2025 07:01:13 +0000
Manifest next update: Sat 19 Apr 2025 07:01:13 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: RpJxayG2duSzlo+acHcJZGrhiv+bsCzQGGZrK6/kgX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:94:be:64:36:ff:fa:b4:ec:d6:9d:7e:d9:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Apr 18 07:01:13 2025 GMT
Not After : Apr 19 07:01:13 2025 GMT
Subject: CN=98ce59fa74d6a19d990391eb3ad557988949694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:bf:6d:57:6e:b4:1c:39:e7:40:d7:29:d0:
60:f4:f1:7d:ff:45:ed:e5:6e:d2:8e:91:41:a6:39:
d8:3c:5c:53:22:8b:64:db:69:96:6b:13:50:63:07:
c6:21:41:d0:49:c6:3a:ef:f7:c0:19:c4:09:c5:32:
5f:6e:c8:05:4e:30:94:93:b0:ed:28:b2:3b:1c:36:
e1:02:c6:02:c5:96:4f:45:37:b8:e0:4d:db:76:24:
32:f2:a1:b1:ec:02:8c:37:71:10:b6:d9:fe:bd:9d:
61:b0:68:be:42:51:9e:b3:80:41:58:42:74:4a:f7:
f2:2a:1e:1e:f4:2c:3d:59:95:c6:4a:07:5c:2a:64:
48:be:da:40:9c:e1:99:74:c0:ad:15:c1:31:20:b2:
f5:01:13:d7:24:d8:30:18:64:80:78:45:d5:2d:d8:
1f:16:45:29:91:a4:eb:07:ae:45:52:da:45:ab:b7:
47:2f:7c:bc:17:70:bb:87:7e:d4:0b:67:79:63:8f:
43:55:53:27:cb:f8:15:a8:08:9b:a6:36:e1:ce:a9:
ec:08:a3:8c:99:d1:56:b6:3c:93:4f:39:8a:b9:60:
4d:3c:16:74:4a:5d:2b:b0:59:ff:ef:53:fa:fb:ca:
7a:82:79:dc:5a:b9:c2:19:ae:03:e9:00:92:2b:47:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:59:FA:74:D6:A1:9D:99:03:91:EB:3A:D5:57:98:89:49:69:4B
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b7:bd:e3:91:f7:1b:53:68:ca:3b:7f:b8:9f:a2:fd:d8:6a:
64:dc:be:fe:3a:73:43:83:3c:13:6e:b7:77:e2:9b:ff:ee:ee:
3c:df:6a:e9:c0:4f:23:1d:68:23:fc:ca:03:5a:72:c0:98:46:
81:3f:85:a8:16:a4:53:46:86:16:9a:92:3d:19:28:44:28:d7:
e5:95:9e:a1:2f:9c:9d:6f:e4:68:f5:8d:d5:03:f1:c3:3e:f8:
29:4f:08:21:6b:51:2a:80:53:f4:01:f6:64:0d:66:21:a7:f1:
a2:ad:91:10:9b:cf:99:cf:fa:d2:dc:88:7e:78:50:5b:fa:90:
7c:47:19:9c:f4:eb:7a:e3:1f:67:fc:3e:7f:92:b2:dc:64:d5:
36:b4:78:62:c3:49:ae:e9:1f:40:d2:c6:e2:8c:90:35:f7:a4:
42:f7:63:8a:ab:47:9c:87:3f:ce:bc:bd:56:35:ac:83:86:ae:
c4:49:17:f9:12:47:91:c1:d0:25:5c:e9:a9:48:a9:ef:cf:38:
91:06:04:c2:2e:48:2e:9f:09:7b:2e:c1:ed:64:45:c0:55:40:
83:0e:34:5e:66:6d:b2:40:45:37:97:78:97:cc:47:72:b1:5e:
dc:47:7a:a2:f5:1e:b7:75:f6:16:10:9c:30:26:ec:a0:3b:c5:
7d:90:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:07 2025 by rpki-client