Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: hZUziOHd3QnKcPW4+CPR6PQnOjxTsh51RXIdHrnG0Sw=
Subject key identifier: 22:15:5B:B6:27:CC:F4:EE:A1:AB:9A:2E:4D:14:4C:D8:87:DF:CF:FE
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 019A706E363C1E5402E34258DDA711E41964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 0B72
Signing time: Tue 11 Nov 2025 01:01:02 +0000
Manifest this update: Tue 11 Nov 2025 01:01:02 +0000
Manifest next update: Wed 12 Nov 2025 01:01:02 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: MjSa8sXLTpQJ8a21bzl5vcej5/Vt/dXArL4BQcw3UMo=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:36:3c:1e:54:02:e3:42:58:dd:a7:11:e4:19:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Nov 11 01:01:02 2025 GMT
Not After : Nov 12 01:01:02 2025 GMT
Subject: CN=22155bb627ccf4eea1ab9a2e4d144cd887dfcffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:ed:31:ac:7f:1f:ae:e9:ae:3d:c7:05:61:
ef:65:a2:6f:0b:91:bc:35:a4:2d:42:16:ea:ce:7b:
a2:ea:0c:27:42:13:c5:24:ad:19:5f:4d:c0:0d:92:
76:d7:32:7a:bb:10:3c:a0:bb:98:10:8b:4b:cb:ad:
c0:34:d5:62:cd:72:ef:5f:ac:5f:db:1b:bd:72:56:
00:89:f2:93:2e:4e:db:ca:a2:90:83:7b:31:20:f8:
1e:f3:95:2c:77:c6:ca:97:75:ff:62:b9:b0:5b:bb:
62:5f:6c:0b:0d:55:fc:a8:91:d4:08:08:3e:53:5b:
cc:8f:ec:2c:69:57:fa:21:62:73:5f:48:33:6b:0c:
b0:53:e1:e3:58:95:6c:3d:1c:71:02:95:1d:a4:3e:
78:e9:7f:01:81:6d:a5:b5:4c:1b:50:13:9c:76:12:
c4:b0:3f:64:f5:d7:99:d6:6d:03:8c:8e:c0:7c:44:
a5:d4:f6:8b:74:ef:20:7d:50:a4:39:a3:75:ab:ec:
45:06:99:ae:8e:a3:ae:20:1e:36:b1:db:e3:07:e1:
dd:a2:90:33:09:b9:4e:0a:dd:eb:7a:74:d0:ee:4d:
2c:5a:cf:5d:53:7a:16:b2:41:4c:a2:b8:96:08:74:
41:50:3c:35:74:3a:c4:85:6f:e8:2b:84:6f:39:b9:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:5B:B6:27:CC:F4:EE:A1:AB:9A:2E:4D:14:4C:D8:87:DF:CF:FE
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:08:d9:71:37:bd:0f:6d:5d:2e:d6:ab:ed:75:c5:78:b9:
a5:49:7d:f2:01:fd:95:62:50:2c:3b:ff:d8:4f:b8:48:47:87:
c2:a1:91:46:d3:ad:07:7b:9e:63:37:eb:8a:d9:51:6b:f7:06:
de:4b:8a:55:cf:f2:b9:20:da:05:73:40:1a:83:bb:fc:7f:9e:
d4:29:73:7f:72:eb:00:c8:41:1c:91:7b:92:e9:b5:40:b9:97:
67:00:73:49:bb:01:ea:54:20:9a:16:7f:83:a0:66:d1:7a:78:
f5:38:cd:f4:f0:c4:88:1f:89:d1:01:c9:79:d4:2a:af:2e:05:
9e:b4:bb:90:c1:5f:96:10:8d:d5:1f:00:81:0a:7f:98:60:40:
9d:d0:c5:ca:58:f9:ab:4c:b3:6e:f1:71:27:8b:61:66:23:d5:
64:78:74:e9:73:08:19:99:b5:75:5a:86:a7:60:9a:f8:63:ce:
8b:11:1d:a3:bc:40:ea:ef:46:bb:29:fe:fc:ad:44:f8:a3:6d:
a3:07:98:2c:d2:88:7b:a6:ae:8d:83:61:8f:1b:25:17:d5:08:
97:60:2a:0f:6e:ee:b9:bc:d0:a0:44:9a:51:97:6e:83:41:af:
8b:3b:bb:3b:d2:a8:4a:3e:b0:12:0a:5f:4d:59:59:13:aa:27:
b1:f9:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client