Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: Vkblgo1c1FQHmKxgHIVMkt4nNPmRYtKIPU/S2wOU1iw=
Subject key identifier: FF:E3:C0:8A:7E:35:B4:16:7A:1E:8D:69:FE:F0:99:F7:CE:83:60:B6
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019748F9E9C04AF57FAC3FE65797DF9D0795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 104E
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: nQvR0WCSzsk7hTxFJKw4P+otryIyqVBCr03y0yWV0kE=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e9:c0:4a:f5:7f:ac:3f:e6:57:97:df:9d:07:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=ffe3c08a7e35b4167a1e8d69fef099f7ce8360b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:36:11:4a:f3:88:2b:ce:eb:6d:49:6e:d1:
91:1d:b5:09:0c:fd:3f:88:a1:6a:93:e4:b3:ba:a8:
ff:48:1d:a3:81:f2:18:86:e9:ef:c8:b8:56:c7:e3:
3b:79:10:85:64:a3:4e:38:62:8c:6c:47:e3:c7:35:
1d:80:b2:99:44:b1:f2:6a:0b:0d:39:c2:c8:02:fb:
00:8f:ac:48:04:fd:05:a1:28:78:cd:81:47:83:f6:
03:a9:6f:08:29:fc:f9:40:04:3d:bc:6a:2b:93:a0:
8d:5b:b5:23:8c:28:06:2d:1b:47:7b:f5:fd:0c:71:
51:18:ae:9a:28:d2:af:3d:b9:8f:46:7a:f7:d7:ad:
67:be:a3:ee:ec:80:e3:4b:63:50:64:56:20:6c:df:
f8:75:17:e0:43:c8:72:a7:04:1b:6d:8a:85:7b:93:
5c:87:c8:79:41:31:4b:b9:60:4c:68:0d:a9:8f:58:
f5:de:b7:95:06:c7:20:4e:c0:37:ec:b1:59:9b:9b:
b9:9b:a4:3d:42:c9:55:c2:41:ff:50:40:db:f7:ea:
4f:9f:2f:be:b7:3f:c8:78:ba:a8:6a:90:94:47:fb:
11:1c:19:cd:d4:9c:ce:1f:2f:81:b6:4a:d1:20:bc:
40:4e:3a:c8:57:19:92:f7:77:7d:66:da:21:6f:25:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:C0:8A:7E:35:B4:16:7A:1E:8D:69:FE:F0:99:F7:CE:83:60:B6
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8e:d2:c1:28:e4:d8:30:c3:27:63:8c:93:35:ee:f3:96:ca:
6b:26:36:c9:79:17:1e:fd:0f:46:cb:3d:c2:d3:2d:b8:48:db:
44:48:73:b2:a3:f5:c7:ef:7f:19:0b:f5:c5:0e:08:7b:62:f8:
80:52:bd:74:bb:44:c7:b9:59:b2:c1:5b:f6:da:95:ba:8e:09:
2d:3b:79:ad:b3:84:af:de:f8:6d:82:0a:4b:b1:6b:36:d2:8d:
6a:45:4e:b0:aa:18:e3:af:ae:7c:e9:37:2c:89:4f:10:9b:2f:
08:87:8f:52:1d:db:2e:18:0d:77:38:51:ce:81:ce:a2:11:98:
ea:ad:84:10:f5:cd:d7:56:50:56:50:87:b2:20:94:e6:e9:c3:
18:b6:08:ba:36:ba:e9:cb:5d:9d:e0:68:fc:9b:9c:3d:00:c1:
23:77:87:e2:65:ce:35:81:d6:f4:bc:19:54:c8:e9:d0:ad:5f:
6a:4a:b0:91:b2:0d:48:1d:a7:e6:30:02:88:c3:34:b0:e4:0a:
0d:7f:3a:88:39:66:6d:8a:21:3d:e9:f0:68:12:5e:a8:37:b5:
d9:70:48:06:55:a1:68:73:71:ea:ff:ed:dd:f6:58:fa:7d:ea:
00:6a:7d:58:98:ae:94:94:ec:ec:ec:67:05:85:9e:a0:a4:34:
61:9f:6f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+enASvV/rD/mV5ffnQeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjUwNjA3MDYwMDI3WhcNMjUwNjA4MDYwMDI3WjAzMTEwLwYDVQQD
EyhmZmUzYzA4YTdlMzViNDE2N2ExZThkNjlmZWYwOTlmN2NlODM2MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDk2EUrziCvO621JbtGRHbUJDP0/
iKFqk+Szuqj/SB2jgfIYhunvyLhWx+M7eRCFZKNOOGKMbEfjxzUdgLKZRLHyagsN
OcLIAvsAj6xIBP0FoSh4zYFHg/YDqW8IKfz5QAQ9vGork6CNW7UjjCgGLRtHe/X9
DHFRGK6aKNKvPbmPRnr3161nvqPu7IDjS2NQZFYgbN/4dRfgQ8hypwQbbYqFe5Nc
h8h5QTFLuWBMaA2pj1j13reVBscgTsA37LFZm5u5m6Q9QslVwkH/UEDb9+pPny++
tz/IeLqoapCUR/sRHBnN1JzOHy+BtkrRILxATjrIVxmS93d9ZtohbyUhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/jwIp+NbQWeh6Naf7wmffOg2C2MB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio7SwSjk
2DDDJ2OMkzXu85bKayY2yXkXHv0PRss9wtMtuEjbREhzsqP1x+9/GQv1xQ4Ie2L4
gFK9dLtEx7lZssFb9tqVuo4JLTt5rbOEr974bYIKS7FrNtKNakVOsKoY46+ufOk3
LIlPEJsvCIePUh3bLhgNdzhRzoHOohGY6q2EEPXN11ZQVlCHsiCU5unDGLYIuja6
6ctdneBo/JucPQDBI3eH4mXONYHW9LwZVMjp0K1fakqwkbINSB2n5jACiMM0sOQK
DX86iDlmbYohPenwaBJeqDe12XBIBlWhaHNx6v/t3fZY+n3qAGp9WJiulJTs7Oxn
BYWeoKQ0YZ9vyw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:37:52 2025 by rpki-client