Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: QVVjynqzJmqSBUu4iqizFmjb6m1l0RiDDKXGe7t2Vfw=
Subject key identifier: 85:11:9C:21:D5:C3:38:6C:33:27:2F:BA:5E:4A:1D:2F:F2:E3:5B:4D
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 01974666F2B8C39DDD72FB243D32C92F8766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 10DD
Signing time: Fri 06 Jun 2025 18:00:41 +0000
Manifest this update: Fri 06 Jun 2025 18:00:41 +0000
Manifest next update: Sat 07 Jun 2025 18:00:41 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: d13j5kv/jRxQXOOtekqsKiJlG2uIkaVz3SlsE8dbFS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:f2:b8:c3:9d:dd:72:fb:24:3d:32:c9:2f:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Jun 6 18:00:41 2025 GMT
Not After : Jun 7 18:00:41 2025 GMT
Subject: CN=85119c21d5c3386c33272fba5e4a1d2ff2e35b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:ba:e6:d3:d9:2f:d2:43:ae:5f:3c:37:20:
f8:a9:06:71:7e:43:44:6a:0f:9f:51:76:c4:23:c0:
d7:99:b6:bf:ce:d7:b4:d6:1a:2e:e4:71:a5:ce:5c:
ab:e6:db:02:2c:24:4e:23:94:fb:05:a2:0f:c9:88:
d9:14:d7:52:e2:eb:64:7c:cf:28:b7:33:bb:70:b1:
06:eb:eb:e6:7a:ce:e4:92:a4:60:4c:5d:0c:6c:30:
a3:b0:16:57:2f:25:2c:42:ce:2a:d6:09:62:be:66:
26:51:c8:3e:e2:26:43:db:43:ba:d6:95:0a:d5:9f:
69:37:ee:95:eb:5c:69:3f:11:bf:37:de:d3:11:df:
96:76:aa:9a:24:a4:11:bb:e8:a9:c5:21:be:78:bc:
2a:da:d9:76:5d:5f:90:24:35:04:9e:ec:ff:92:32:
3a:94:0f:8c:c1:bf:3c:80:50:a8:a3:9c:12:37:e6:
1f:08:8b:6a:df:66:b6:10:17:ee:80:13:c3:f6:73:
91:73:30:fe:fb:77:f9:06:49:64:01:d0:a1:2f:08:
6c:16:ba:01:e3:5a:88:ee:db:a5:fa:1a:a9:59:30:
86:e3:b0:19:12:c6:a6:fe:1d:90:ce:01:c6:67:f6:
9f:39:6b:50:45:57:2b:45:b8:b6:a2:28:6a:25:15:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:9C:21:D5:C3:38:6C:33:27:2F:BA:5E:4A:1D:2F:F2:E3:5B:4D
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:88:cc:e9:85:b4:9a:17:2b:f4:4b:bf:d2:47:cf:5f:db:
a5:ab:94:d4:e3:17:de:a6:d6:55:04:9a:09:90:9e:2f:a7:ec:
30:81:ba:dd:d7:e4:69:49:8a:3a:09:77:13:a5:37:7a:b8:b4:
f9:91:91:9a:2d:95:ff:df:38:8e:3c:d3:c7:09:d0:2a:d4:59:
ce:8b:f5:42:de:aa:f1:1e:65:46:49:24:8a:5c:cc:da:20:3f:
cb:57:6f:5b:86:9a:ce:e1:83:57:5f:63:11:37:65:b4:c4:b4:
e5:67:7e:9f:ff:69:9d:36:d8:42:4f:12:a9:58:c6:d4:6d:16:
a3:55:d8:5a:72:61:07:15:52:df:49:7f:05:a6:af:05:19:97:
54:96:81:99:f2:ad:2d:65:12:6b:3c:50:30:17:34:45:d3:8a:
95:43:b3:e2:9a:e4:04:40:31:8b:1d:d3:1b:89:81:fb:07:7a:
c4:fd:5f:67:fc:2d:f5:af:66:13:cb:ca:e7:98:06:a3:48:f7:
d5:12:f3:e1:bc:9a:fd:68:fc:5b:79:8b:68:79:f0:20:de:1d:
fe:f5:61:ae:70:b0:a4:b4:7a:f7:1a:7d:ea:0c:0a:6b:f0:42:
0e:70:43:fa:74:6e:57:f8:82:19:f2:67:3a:a3:2b:9d:dc:03:
a3:a2:6e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZvK4w53dcvskPTLJL4dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1
YjBkZjcwHhcNMjUwNjA2MTgwMDQxWhcNMjUwNjA3MTgwMDQxWjAzMTEwLwYDVQQD
Eyg4NTExOWMyMWQ1YzMzODZjMzMyNzJmYmE1ZTRhMWQyZmYyZTM1YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixK65tPZL9JDrl88NyD4qQZxfkNE
ag+fUXbEI8DXmba/zte01hou5HGlzlyr5tsCLCROI5T7BaIPyYjZFNdS4utkfM8o
tzO7cLEG6+vmes7kkqRgTF0MbDCjsBZXLyUsQs4q1glivmYmUcg+4iZD20O61pUK
1Z9pN+6V61xpPxG/N97TEd+WdqqaJKQRu+ipxSG+eLwq2tl2XV+QJDUEnuz/kjI6
lA+Mwb88gFCoo5wSN+YfCItq32a2EBfugBPD9nORczD++3f5BklkAdChLwhsFroB
41qI7tul+hqpWTCG47AZEsam/h2QzgHGZ/afOWtQRVcrRbi2oihqJRUneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIURnCHVwzhsMycvul5KHS/y41tNMB8GA1UdIwQY
MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt
NzM0ZmFiNmZlYzZmLzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm
LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbWIzOmF
tJoXK/RLv9JHz1/bpauU1OMX3qbWVQSaCZCeL6fsMIG63dfkaUmKOgl3E6U3eri0
+ZGRmi2V/984jjzTxwnQKtRZzov1Qt6q8R5lRkkkilzM2iA/y1dvW4aazuGDV19j
ETdltMS05Wd+n/9pnTbYQk8SqVjG1G0Wo1XYWnJhBxVS30l/BaavBRmXVJaBmfKt
LWUSazxQMBc0RdOKlUOz4prkBEAxix3TG4mB+wd6xP1fZ/wt9a9mE8vK55gGo0j3
1RLz4bya/Wj8W3mLaHnwIN4d/vVhrnCwpLR69xp96gwKa/BCDnBD+nRuV/iCGfJn
OqMrndwDo6Ju5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:52:16 2025 by rpki-client