Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: GdTnFg+rL8ba5e50o9jQG34VU/sVZ0sFdaYiLM0+RLs=
Subject key identifier: 96:37:3A:A3:F7:AA:8B:93:FE:99:26:EC:FE:BC:92:A7:45:42:EB:80
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 019A2C9FC12D39AB1257A2B69011EAB7B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 21:00:58 +0000
Manifest this update: Tue 28 Oct 2025 21:00:58 +0000
Manifest next update: Wed 29 Oct 2025 21:00:58 +0000
Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: Y/4rQGyIWt1Yuz35Xw0WuBAouNjjz4LhaPFzYiUMhkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:c1:2d:39:ab:12:57:a2:b6:90:11:ea:b7:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Oct 28 21:00:58 2025 GMT
Not After : Oct 29 21:00:58 2025 GMT
Subject: CN=96373aa3f7aa8b93fe9926ecfebc92a74542eb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:98:83:96:96:66:b8:df:24:76:a2:ee:15:
7a:d0:f0:0a:66:5c:06:c6:14:6c:9d:e4:6c:44:a8:
47:be:09:c7:13:db:43:90:0e:cb:36:a3:3e:fc:f5:
a7:61:ea:da:35:cd:ca:a7:d3:61:e4:14:03:ac:68:
f3:d6:44:e4:4a:54:eb:b8:d7:6c:c4:bf:64:7a:fb:
9a:14:d2:66:ae:4a:7d:9f:de:aa:27:bb:49:c0:e4:
be:a7:74:d4:e3:69:e7:ba:7b:3b:3f:08:c0:8e:58:
10:73:7b:ad:03:88:0f:54:0f:1a:d7:27:5b:28:33:
52:82:31:41:18:12:bd:55:0a:57:6a:cd:49:ac:2e:
4d:a8:24:62:4d:8b:b2:fc:3e:0d:45:95:cb:f9:0d:
c6:31:62:0c:a0:04:2f:1b:2c:bb:9a:3f:c3:21:60:
e0:ed:80:5a:15:12:ee:86:24:9f:4d:cb:df:82:49:
2c:bb:c7:df:a8:78:09:15:a1:fa:c1:37:47:e0:f7:
d7:24:a9:bf:ad:04:d1:f3:63:67:2b:ab:3c:42:24:
52:30:d0:bf:70:82:75:86:f6:ed:3c:55:a1:76:c2:
24:76:0c:7e:d3:73:d2:c9:f4:f7:df:1e:56:87:78:
b8:19:ab:41:50:ae:3f:25:b6:ad:96:33:73:bc:e8:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:3A:A3:F7:AA:8B:93:FE:99:26:EC:FE:BC:92:A7:45:42:EB:80
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:d7:59:2c:3f:55:b7:1d:71:72:5e:24:27:d1:ae:0f:0d:
e1:a5:af:4f:c3:2d:05:c6:c9:51:a8:da:22:ed:08:37:2a:9e:
eb:4c:66:a6:6f:7f:41:c3:66:06:35:ff:34:d5:a2:96:90:5f:
00:1e:56:67:ab:82:05:d6:d1:2f:eb:a6:13:24:5d:4c:30:f4:
63:09:b1:bf:f3:06:29:5b:f9:b5:c7:cc:3b:1d:b2:a4:30:d4:
8e:08:76:68:ed:f5:a4:77:eb:1c:f3:8a:f2:e4:60:32:2c:d8:
53:69:a0:37:72:c6:32:dc:8e:af:31:62:8d:63:d8:ff:67:57:
a4:67:59:76:69:5f:35:85:34:ad:c9:0d:56:b6:6d:08:a4:ae:
7e:40:4a:15:b6:01:24:86:2e:3f:e9:61:e5:8b:97:3a:92:83:
e2:db:77:22:47:7c:ee:68:2e:cf:8e:10:57:5c:9b:32:45:b5:
44:10:5e:eb:6d:b2:9b:b2:34:76:bd:ec:6c:83:8e:80:58:df:
c2:20:68:03:b5:12:7d:7d:6a:e7:6b:b1:5e:af:4b:91:f1:23:
a8:cb:9a:3c:4e:26:65:df:0c:73:85:0f:2f:ae:24:56:60:c6:
9e:45:d1:8c:e7:2d:fd:0d:6f:d2:1b:17:e1:e9:3f:38:3e:56:
82:f3:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:59:30 2025 by rpki-client