Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: ZF/PYl1lx8dlfkMkK66Pu/qz7jx4Z7es0+IE4K39cek=
Subject key identifier: 12:74:F1:EE:DC:8C:4E:B5:4E:72:7C:A6:0D:C3:9C:DD:AB:89:FA:64
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 019749314AF124F798AA46BF6877590DED8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 09D0
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: UbocSnN6p5gwQ1gPFjyu8EPe2x31KAL/uo8CCAxMYjI=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4a:f1:24:f7:98:aa:46:bf:68:77:59:0d:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=1274f1eedc8c4eb54e727ca60dc39cddab89fa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:7c:96:34:8a:5a:9c:b5:3e:29:68:25:4a:
6b:86:84:fc:6e:7d:bb:86:03:e8:4a:79:69:ae:b9:
52:86:e2:22:f6:db:94:96:af:dc:40:d5:00:89:02:
a3:e7:0d:5e:d0:c9:b8:22:f3:55:8e:78:67:8f:c7:
6c:93:d3:3c:6f:a6:38:32:67:d9:1a:fc:a1:35:b3:
29:c5:2d:c0:6c:43:df:38:52:b3:33:8f:9e:60:f0:
6c:87:f4:f4:96:33:83:6f:5a:34:56:64:d6:64:0f:
f3:54:5c:28:e9:27:70:38:af:15:8e:f6:ad:a2:73:
23:38:e7:e6:e9:cb:b9:23:13:12:e5:25:3c:b3:82:
a3:32:86:08:28:0d:38:04:e6:2a:31:6a:c5:c3:64:
2b:b0:dd:a5:1e:3e:ff:b3:9a:c5:5f:fb:fe:a1:d9:
f8:62:b4:fd:cc:ce:64:b5:30:84:38:b6:b9:24:62:
f3:84:8b:f4:c1:ce:f0:76:71:f9:e8:d2:b3:b4:ca:
fd:be:ec:0f:7b:5a:99:ce:ff:ed:b9:b4:a3:ea:62:
df:ef:38:c5:dd:64:d8:c3:e9:58:c9:ac:b8:0e:80:
79:5f:37:6f:5b:56:9b:65:fc:29:4b:b4:46:1e:e9:
fb:ba:a8:50:15:f0:e9:4c:b1:63:c4:13:38:fd:58:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:F1:EE:DC:8C:4E:B5:4E:72:7C:A6:0D:C3:9C:DD:AB:89:FA:64
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d3:4f:fa:ad:a3:e6:e0:d6:2a:58:ce:86:f9:fe:23:25:c5:
2e:29:37:93:6d:c6:a9:44:7f:f3:e0:e5:a4:1c:3c:d2:eb:98:
6a:83:29:07:ba:1a:62:06:23:3a:69:a3:01:46:58:cc:c7:88:
05:54:46:45:22:28:05:87:e4:39:ed:a1:57:be:1e:11:3d:b0:
ca:b2:85:64:23:ff:ca:97:d5:5d:bf:1f:87:24:37:8d:04:8a:
1b:79:16:23:f4:52:8b:dd:be:59:0b:e8:ae:52:89:ef:8e:93:
f5:7c:55:7f:61:4b:d9:a6:7b:7b:98:bb:4c:08:39:b0:2c:0d:
08:41:30:78:ef:78:62:42:94:ab:48:d4:10:df:f4:df:30:9e:
51:af:f0:db:d3:df:3e:fb:85:8b:fd:99:19:af:cb:04:2d:67:
91:72:21:27:1f:f8:9c:1d:74:e6:39:4e:27:e5:98:e9:4c:de:
f1:ce:87:33:e4:28:77:e7:a2:4b:36:30:a6:b3:e9:9f:b8:cf:
13:45:ab:65:20:75:8c:9b:5e:ef:eb:39:f0:d5:f0:78:27:81:
a0:09:c6:21:0b:0c:6e:af:7b:61:49:ba:92:ae:08:ac:51:fe:
91:63:cf:fb:46:6f:52:d9:dd:35:09:aa:0a:6b:c2:0f:86:86:
15:54:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:08 2025 by rpki-client