Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: jPLJkuUqouhl2O+fafcKeCwRPDTmxw9ssocVpaaVFtc=
Subject key identifier: 75:07:A8:02:66:46:47:AB:93:87:32:C4:DE:FD:D5:D6:E3:3D:C4:56
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 01976B85C921CD13D81BE75C49FB21FEED21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0E79
Signing time: Fri 13 Jun 2025 23:00:19 +0000
Manifest this update: Fri 13 Jun 2025 23:00:19 +0000
Manifest next update: Sat 14 Jun 2025 23:00:19 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: zS08EMZf+h6MF1XqTnK1BBnS+XEah1A8XbMTFV4qhY4=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:c9:21:cd:13:d8:1b:e7:5c:49:fb:21:fe:ed:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Jun 13 23:00:19 2025 GMT
Not After : Jun 14 23:00:19 2025 GMT
Subject: CN=7507a802664647ab938732c4defdd5d6e33dc456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:ba:7f:1f:68:78:ca:00:18:a9:72:f2:bf:
39:3d:5d:47:5b:3c:5e:33:38:0f:55:af:0e:02:d8:
d2:57:a1:0a:69:a7:b6:d0:ce:c0:ca:88:82:aa:23:
7f:d3:e4:34:c2:69:aa:e9:b4:65:9c:69:cb:5d:f1:
12:d6:d9:a9:2e:09:2a:d3:e0:e0:88:4f:d4:a1:26:
da:17:dd:a4:61:fa:f2:a8:12:4f:4b:52:c6:62:18:
04:9d:60:6f:4a:06:1b:85:64:f8:06:1a:9f:36:60:
ff:f0:de:f5:61:75:ff:4a:04:35:09:2e:50:40:76:
db:bb:4f:65:9d:2f:cd:95:64:d2:dd:1a:32:2f:b4:
43:bd:5b:ed:da:0e:5e:71:60:49:3b:d7:b4:82:bd:
04:9e:5a:f0:9f:dd:90:5c:f7:c9:58:15:0c:e5:d9:
d8:9e:4a:88:bc:07:cb:1e:d0:1b:f1:02:80:9e:fb:
c9:4f:55:6d:5b:e8:36:25:f5:c1:93:ed:15:0d:06:
4f:89:8e:28:6b:d3:8c:e4:a7:36:e9:26:40:ef:1b:
94:f6:22:08:91:9b:a5:88:9b:f0:2f:b1:e7:9a:51:
40:cd:a7:86:05:a4:84:1f:ab:7d:7b:b4:66:41:c0:
bd:9b:dc:cb:01:0a:2c:22:00:d6:05:0c:da:04:d4:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:A8:02:66:46:47:AB:93:87:32:C4:DE:FD:D5:D6:E3:3D:C4:56
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:7f:08:cf:63:ef:71:14:26:8f:67:9d:e7:33:96:d4:40:
1e:c3:71:cd:55:bc:2e:05:d6:c8:b9:e6:48:fc:eb:c9:fc:ec:
fd:9d:ed:99:33:0b:a4:86:26:dc:1f:6e:d4:19:99:ca:b3:8a:
88:94:e4:31:fe:45:8f:c5:ba:79:22:23:84:80:c5:ea:15:ba:
ca:06:03:5c:5b:4e:b3:01:1d:85:94:19:56:32:75:49:a3:27:
ea:d7:38:30:7c:ee:c4:d5:b8:24:dd:b0:9a:c3:9a:71:22:e2:
9e:e1:8a:29:80:d2:43:4e:ab:66:99:aa:75:a7:f3:14:2a:09:
3a:2d:a9:76:ec:42:2f:80:e9:e7:bb:64:10:f3:a0:1f:e2:33:
77:2a:12:da:28:bb:6a:54:a8:bf:59:db:6e:44:3e:c1:c9:55:
9d:77:b9:3d:30:3f:bd:c6:79:9a:f4:0d:48:24:b9:9e:be:2f:
42:d6:29:de:61:49:69:a6:43:24:31:04:b9:8c:bf:eb:a3:06:
c6:8f:d8:cd:bb:57:a1:47:8e:24:ac:c0:b3:a1:43:11:23:7f:
6e:c2:7e:c7:d8:c8:7a:00:59:22:3d:fe:2c:f6:59:a5:7b:ea:
d6:69:90:04:e6:d4:2d:71:14:93:f5:e1:1c:a8:1c:e6:9a:82:
f2:96:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:46:37 2025 by rpki-client