Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier: qC9U8t2BSzlY0oyVQ9cQo9qZZ1S5lbtqAbTRfqye1SM=
Subject key identifier: 17:EA:F1:6E:EA:F6:87:F2:9C:8A:E4:4E:DC:6C:1A:63:82:12:49:7A
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 019A71B7E495DDF2E6C4DF69ADBE9AFF87B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number: 0215
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=)
2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: e92bBe+SLx4qjg8ubGVMEuSj2B5QzibBnFXyLiqyaaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e4:95:dd:f2:e6:c4:df:69:ad:be:9a:ff:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=17eaf16eeaf687f29c8ae44edc6c1a638212497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:81:d6:78:2e:04:33:37:94:27:69:d9:d7:87:
20:e1:f1:61:7b:ed:d5:da:f4:65:ac:a9:7a:92:71:
a1:23:34:98:10:f6:15:6a:c2:3e:09:28:56:b5:47:
c8:07:12:91:8d:a9:5a:63:70:0e:e8:c2:7c:49:52:
d3:b0:35:f1:3a:bd:5a:d2:9d:f7:61:93:4a:a1:80:
d9:03:17:40:d5:41:ce:88:74:eb:02:ab:5e:ab:b3:
d5:82:d4:04:1a:7c:23:52:f0:df:4e:0e:35:92:30:
47:f2:08:7c:17:d9:75:41:16:07:dd:a8:fb:8b:99:
80:36:64:ed:6a:f2:0e:e1:75:e7:1d:cd:47:6d:90:
08:94:4d:1e:e1:b9:4d:33:d9:70:22:b9:b0:08:06:
b8:44:d1:1f:5c:6e:48:04:0a:03:0f:2e:e5:fc:1c:
7a:7d:a1:dd:33:de:fe:df:62:16:d4:39:ea:95:1b:
fc:3b:f7:df:97:8b:0d:24:b7:cd:fb:fd:ae:cb:a2:
5d:0b:01:fa:10:94:5c:f0:66:12:99:25:86:8e:31:
69:70:36:b4:e4:e7:49:08:91:4b:29:35:f3:2d:23:
63:1d:b3:e6:04:e3:12:63:2a:e5:4a:07:96:f0:5d:
29:61:1f:1b:9f:00:44:3b:fd:18:86:a2:7c:0c:91:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:F1:6E:EA:F6:87:F2:9C:8A:E4:4E:DC:6C:1A:63:82:12:49:7A
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:fc:cb:4b:b5:38:e0:f1:ad:8c:54:08:ec:83:cc:b6:b9:
d8:b4:44:65:fd:e6:dc:da:d2:a9:91:88:a0:b7:c4:4d:d7:4c:
02:25:c8:a9:18:1c:a5:27:10:0d:15:0d:28:1a:2e:04:2b:5b:
f0:7d:73:3a:96:b1:f9:51:4d:03:da:98:37:dd:02:7b:57:71:
9c:03:f0:51:22:c3:ae:8b:d9:c5:30:fd:c0:df:f4:82:08:a2:
8f:62:bc:6c:ad:1f:16:44:4f:19:52:fe:cb:fc:7b:d2:8f:f4:
15:b6:11:64:5f:6a:7f:89:27:1e:67:52:b1:e0:65:9d:31:91:
cf:3e:7a:79:f5:1f:9f:25:ac:22:36:ef:4b:58:63:bf:73:3e:
b3:f3:84:0c:c0:83:8c:a6:94:c8:22:fe:ec:a7:02:75:66:ea:
ac:dc:62:fd:b5:d7:b3:9f:f5:0e:0f:87:36:b7:ea:cd:83:67:
a3:83:3a:d3:17:40:96:d3:4d:24:b4:46:9b:f2:21:87:48:0d:
97:1d:43:97:68:e1:fc:e4:93:b2:1c:3b:8c:04:54:eb:61:b5:
d4:55:1d:f2:86:a3:2d:c5:12:17:db:a0:f1:a0:ae:1f:62:9e:
d6:81:53:d3:16:bc:e0:68:9f:ff:e8:95:5d:f1:fe:95:51:97:
8b:5d:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:45 2025 by rpki-client