Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: C/kMhDBthydGqMNVj93qUfvf9xPWqSCgUX1gFjzERBE=
Subject key identifier: 98:CC:D2:8C:40:35:F4:4F:02:97:C9:74:22:43:3F:4E:73:85:7F:17
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 0199635B46FC49B0EA283FD9DA4481049CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 11F5
Signing time: Fri 19 Sep 2025 19:02:30 +0000
Manifest this update: Fri 19 Sep 2025 19:02:30 +0000
Manifest next update: Sat 20 Sep 2025 19:02:30 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: ZWmyebTBHP17eo8wN2fcV8m55fDVe94bQwbxxOKSRyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:5b:46:fc:49:b0:ea:28:3f:d9:da:44:81:04:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Sep 19 19:02:30 2025 GMT
Not After : Sep 20 19:02:30 2025 GMT
Subject: CN=98ccd28c4035f44f0297c97422433f4e73857f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:66:c4:0e:cd:8e:4d:5b:4f:06:57:32:ba:
ee:94:bb:fd:7d:3c:24:8d:3c:98:c0:73:21:c8:33:
11:21:7d:5c:cb:9b:1e:ff:bb:20:71:0d:2c:30:00:
24:63:9e:aa:41:ec:28:18:39:cf:3f:dc:ff:68:8f:
35:9b:23:4c:4c:2f:ac:bb:6b:8d:f0:1e:e5:47:34:
63:d1:0a:ea:a7:fb:24:c7:d9:51:aa:be:28:eb:22:
af:1d:4e:e1:07:2e:a4:25:ae:f4:7e:ed:40:9c:c7:
93:53:6a:e0:c4:02:77:2b:f8:03:47:8f:63:99:4c:
ab:4e:17:3e:21:81:d0:7e:db:04:68:2f:76:31:74:
17:29:20:2a:ee:b9:36:ed:8f:97:25:c0:e9:51:0d:
11:b5:28:a4:86:00:ac:ff:43:2d:8c:45:63:e1:25:
f7:4e:9c:04:62:a0:29:01:9b:1a:cf:be:2a:a1:52:
b6:36:22:75:5a:f2:5c:5c:2d:f0:dc:51:1a:bc:ee:
6c:ca:ab:42:c2:72:20:5f:09:ce:f7:0d:8c:54:4b:
cc:7c:71:fb:1f:4b:85:66:a4:64:af:c4:98:5f:cc:
d0:9f:83:af:97:d5:a6:a8:51:3a:36:bc:4e:9b:8a:
57:06:d1:ba:54:a1:6e:af:73:28:90:07:29:ec:53:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:D2:8C:40:35:F4:4F:02:97:C9:74:22:43:3F:4E:73:85:7F:17
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:21:30:64:58:a5:30:38:e9:41:5b:a2:01:89:f2:07:d0:08:
86:83:97:fc:8d:28:de:2d:af:a2:b4:90:3f:de:05:cc:ca:27:
46:0e:e4:bd:65:1d:4d:5a:94:81:54:37:dc:3a:11:73:79:e3:
7f:4c:dc:c1:60:f8:90:77:9e:6c:e6:95:48:58:62:c2:f5:ca:
af:f9:7b:93:de:77:3c:e5:73:0a:ce:61:86:b6:71:29:a1:77:
11:9a:e2:94:81:ff:1c:56:d7:bd:30:b4:5c:f7:b7:57:b7:e1:
6d:69:cf:06:28:3a:ad:76:57:74:03:5e:6b:4c:d3:df:eb:8f:
58:d6:98:aa:b1:a9:f9:85:95:ca:88:3f:10:9f:5b:af:65:7d:
ae:36:ac:4f:2f:cd:1e:20:02:9d:41:7a:fd:49:ab:0e:7e:31:
0f:7e:39:5f:e2:f2:6c:8b:35:de:49:b7:a5:28:8e:9e:26:e0:
83:f1:74:2f:b5:b8:78:92:71:6b:7d:76:9a:d3:72:5d:de:0a:
22:4c:db:0f:be:c5:75:7a:6f:55:da:25:f0:74:b8:c6:59:3b:
2c:c6:6b:bd:b3:c6:4d:0c:20:f7:45:24:48:ce:20:82:9c:ef:
19:80:c1:f9:c6:2a:d9:bb:7a:5a:2a:2a:f4:6c:6b:30:ff:04:
83:36:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:29:43 2025 by rpki-client