Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: G5jKWA3fXwEmZNHT8i0KUMOP7cqMuCW5EiC+QdyQ5Fs=
Subject key identifier: 69:F7:FB:3B:47:2F:35:32:DD:8D:5D:88:5A:77:03:83:D5:59:FC:7A
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 019921E73E2AEEDA05F9BADF86482F816B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0F5C
Signing time: Sun 07 Sep 2025 02:00:26 +0000
Manifest this update: Sun 07 Sep 2025 02:00:26 +0000
Manifest next update: Mon 08 Sep 2025 02:00:26 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: ZD8zmxeJld7iGafGgRRoLyRvIEYohWUXb6EEllb2bjk=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:3e:2a:ee:da:05:f9:ba:df:86:48:2f:81:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Sep 7 02:00:26 2025 GMT
Not After : Sep 8 02:00:26 2025 GMT
Subject: CN=69f7fb3b472f3532dd8d5d885a770383d559fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:cd:e0:6b:85:09:48:11:d6:26:6b:c0:92:
9b:19:f8:c7:3e:70:e9:3c:4d:12:38:5c:65:8c:30:
a7:27:75:03:19:42:be:ad:7b:92:61:46:74:7d:35:
47:e0:44:ec:b2:27:58:57:5c:3d:aa:f8:e8:2c:83:
4c:92:b7:77:46:e4:37:40:a9:cb:a5:ef:48:ff:0b:
92:67:0d:4b:6a:f4:4e:82:9e:f1:ff:92:33:f7:d4:
ec:81:93:1c:e3:d7:66:53:96:21:3b:8c:26:e9:fa:
23:95:dd:b8:8f:47:45:c6:fc:04:c3:77:b7:d3:e9:
09:a6:d5:a5:21:66:5c:86:28:0a:d4:bc:a1:c7:a3:
a2:f3:9b:ee:1f:13:9b:39:b9:40:92:38:98:c2:f8:
69:87:0c:0f:af:79:b1:a0:b8:f6:a8:a5:ce:38:81:
5f:f7:02:de:2c:b9:97:70:3d:00:25:61:9a:46:60:
f0:fa:dd:c5:c9:c8:34:ae:66:a3:7f:00:8a:29:62:
0b:f3:6e:db:a5:04:2e:78:32:06:66:46:ec:8f:b6:
86:81:c0:4a:10:a0:d1:0d:51:ae:5d:cf:98:62:0c:
72:69:59:49:30:d2:ea:a1:9d:01:7f:72:d2:a3:69:
ac:3f:9c:45:de:7a:af:d8:f2:c9:52:cf:3d:52:10:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F7:FB:3B:47:2F:35:32:DD:8D:5D:88:5A:77:03:83:D5:59:FC:7A
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:db:5c:66:1c:ab:66:e6:64:e5:50:9a:98:9d:f2:bf:15:81:
12:02:b3:97:08:b3:ee:19:d1:3f:1c:14:2d:86:cc:2f:8c:e8:
dd:d0:c7:5c:3a:c3:ef:12:25:f4:8c:54:0f:ff:8c:cf:c6:31:
a3:b3:ba:dc:bc:77:71:b3:72:82:35:97:0b:b2:97:e9:f8:21:
08:d1:c4:c7:17:69:6d:cb:71:84:81:a1:d9:4f:32:8b:82:6a:
e9:1a:03:8a:d0:e5:4b:40:91:60:15:ef:38:60:a6:83:22:b7:
f2:a3:4d:09:12:29:ff:da:df:90:8c:49:25:dc:e9:ee:30:43:
22:00:79:ed:1a:63:72:67:4f:43:f8:ec:9e:a8:5f:83:c4:12:
a4:1e:24:7e:a9:1d:36:54:4e:bb:88:34:10:68:1f:b6:b4:7b:
9c:f4:a0:5e:91:ef:6e:b0:f0:f6:85:76:7f:07:d1:e1:1c:b0:
e6:16:12:63:d5:f6:67:2a:da:72:af:60:72:86:7b:48:7f:72:
91:a1:e5:aa:27:23:6e:46:eb:54:0d:f7:d3:57:0f:a4:d6:39:
0e:d6:50:89:46:60:69:33:06:ca:cd:da:7d:2a:11:6d:92:80:
34:65:1c:17:12:6a:7c:58:27:fd:b3:06:f5:a2:fd:18:08:cb:
83:d1:20:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5z4q7toF+brfhkgvgWteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWQxYjkzZDNiY2U2YjZhZmNkZTkwMjBiODAxNjdiODVj
NjhmNWIwHhcNMjUwOTA3MDIwMDI2WhcNMjUwOTA4MDIwMDI2WjAzMTEwLwYDVQQD
Eyg2OWY3ZmIzYjQ3MmYzNTMyZGQ4ZDVkODg1YTc3MDM4M2Q1NTlmYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje7N4GuFCUgR1iZrwJKbGfjHPnDp
PE0SOFxljDCnJ3UDGUK+rXuSYUZ0fTVH4ETssidYV1w9qvjoLINMkrd3RuQ3QKnL
pe9I/wuSZw1LavROgp7x/5Iz99TsgZMc49dmU5YhO4wm6fojld24j0dFxvwEw3e3
0+kJptWlIWZchigK1Lyhx6Oi85vuHxObOblAkjiYwvhphwwPr3mxoLj2qKXOOIFf
9wLeLLmXcD0AJWGaRmDw+t3Fycg0rmajfwCKKWIL827bpQQueDIGZkbsj7aGgcBK
EKDRDVGuXc+YYgxyaVlJMNLqoZ0Bf3LSo2msP5xF3nqv2PLJUs89UhDzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn3+ztHLzUy3Y1diFp3A4PVWfx6MB8GA1UdIwQY
MBaAFJXtG5PTvOa2r83pAguAFnuFxo9bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWIt
NTc2Y2U0MTAxNDgzLzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jZjJmODctODE5Ny00NjAwLWEzYWItNTc2Y2U0MTAxNDgz
LzEvbGUwYms5Tzg1cmF2emVrQ0M0QVdlNFhHajFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFttcZhyr
ZuZk5VCamJ3yvxWBEgKzlwiz7hnRPxwULYbML4zo3dDHXDrD7xIl9IxUD/+Mz8Yx
o7O63Lx3cbNygjWXC7KX6fghCNHExxdpbctxhIGh2U8yi4Jq6RoDitDlS0CRYBXv
OGCmgyK38qNNCRIp/9rfkIxJJdzp7jBDIgB57RpjcmdPQ/jsnqhfg8QSpB4kfqkd
NlROu4g0EGgftrR7nPSgXpHvbrDw9oV2fwfR4Ryw5hYSY9X2Zyracq9gcoZ7SH9y
kaHlqicjbkbrVA3301cPpNY5DtZQiUZgaTMGys3afSoRbZKANGUcFxJqfFgn/bMG
9aL9GAjLg9Egqg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client