Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: VcIdYPGhrEDF4r+/C0/AYhQTNn8oaAG+tldCZ+gORpI=
Subject key identifier: 15:9A:1B:EF:D3:68:A7:D8:30:9D:3C:E1:A0:94:E1:9D:BC:DD:33:19
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 0198684C9CB7A508FAA475DFB978D73A3F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1173
Signing time: Sat 02 Aug 2025 01:01:47 +0000
Manifest this update: Sat 02 Aug 2025 01:01:47 +0000
Manifest next update: Sun 03 Aug 2025 01:01:47 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: VrsN09O6yhScfZ0M5o46fUEYzH6/zAtcVkpeiLcN4s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4c:9c:b7:a5:08:fa:a4:75:df:b9:78:d7:3a:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Aug 2 01:01:47 2025 GMT
Not After : Aug 3 01:01:47 2025 GMT
Subject: CN=159a1befd368a7d8309d3ce1a094e19dbcdd3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:ac:ab:7b:52:29:40:18:b3:b6:71:6a:4c:
2e:dd:a1:62:ea:82:29:30:2b:40:89:1f:05:1a:e4:
bc:1d:71:31:5b:e5:cb:96:2f:87:52:b1:a0:e3:b9:
77:2c:34:0f:09:4d:b4:2c:bc:11:02:04:93:cc:66:
ad:46:1e:0e:91:80:f2:62:bf:a2:cf:24:ef:ed:e5:
68:aa:d9:5c:df:f7:78:da:cf:f2:56:84:ed:30:25:
6d:d7:ed:c2:26:0e:80:d8:cb:b0:cd:75:25:c9:1a:
f1:1f:d6:08:06:7c:c1:53:ae:e9:24:6e:67:c5:06:
dd:db:5b:0a:fc:05:dd:a5:6e:39:42:01:62:9d:7e:
ab:8f:7d:0c:7c:ac:c8:3a:cf:76:5b:b0:45:52:9e:
e0:db:3a:f8:4f:72:ed:8e:43:0e:7b:3e:62:fe:d9:
c5:79:a6:af:30:f0:d7:cb:99:bd:5e:bf:74:90:c1:
ee:54:25:d7:9e:33:5e:a5:b7:b3:5e:47:ef:f6:25:
ea:2a:e2:60:2b:1c:51:8e:f3:92:43:1f:3b:b9:f8:
4f:da:0a:53:fc:91:87:4a:0c:26:f3:0a:dc:4c:ea:
a5:fc:16:c9:0b:46:54:7c:3d:a9:40:94:b0:0e:5b:
c0:c0:0c:9e:60:ad:4f:2d:cb:3d:62:f6:17:a6:04:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9A:1B:EF:D3:68:A7:D8:30:9D:3C:E1:A0:94:E1:9D:BC:DD:33:19
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f4:1a:a7:f7:64:c7:fe:28:3b:66:33:bf:33:3c:37:f5:1b:
98:84:2f:0e:c9:93:5e:4c:02:11:99:7a:9d:b7:4e:1a:3f:34:
6a:60:91:40:f1:fd:75:95:e7:97:67:6b:4b:69:22:07:2d:77:
77:ce:2a:08:2f:f1:19:b0:1e:30:44:2c:1e:a8:b9:ef:b2:31:
0c:1f:83:3c:43:f5:9f:e9:c6:ab:51:6f:75:3c:10:b6:47:10:
45:47:ce:2b:df:2a:07:77:85:cd:cd:3c:99:a8:b4:59:60:6b:
e5:1c:b7:9d:05:07:68:79:45:3f:b7:40:db:c4:63:4a:fb:82:
d6:57:96:eb:a9:34:4e:8a:67:7f:98:bb:f2:13:e8:e5:b5:c1:
d4:3d:ba:1d:29:2c:5e:b4:18:a7:2f:0c:cd:0b:78:30:f7:0b:
6f:38:04:1d:98:f7:19:0f:77:0b:8c:28:77:7d:3e:6d:54:ec:
98:f3:28:2e:85:3c:27:4b:59:e3:2d:28:be:43:e5:63:c6:42:
a3:e9:26:06:49:94:3b:09:ba:51:14:db:92:ed:16:60:f8:93:
ed:ac:2c:6c:51:bd:d4:1d:2d:95:4d:cb:ea:d3:72:f0:ad:4b:
26:24:ea:1d:2f:13:d4:c5:6f:15:b4:d8:02:28:61:e4:dd:cd:
e3:69:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 06:55:57 2025 by rpki-client