Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: B2CqzJcO8n3FyBRPXBmqwkJm7i6A7oeZsdu8VgtOj7E=
Subject key identifier: F5:45:F3:82:08:37:00:01:79:D0:8C:20:5E:AC:00:21:4E:B7:12:28
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019916F5B18BBED358B49376113C51B9FE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 113F
Signing time: Thu 04 Sep 2025 23:00:24 +0000
Manifest this update: Thu 04 Sep 2025 23:00:24 +0000
Manifest next update: Fri 05 Sep 2025 23:00:24 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: fm+DhGyz6ghVctQkd3oXu4ijQphvd7qrjjn2IFdpPxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:b1:8b:be:d3:58:b4:93:76:11:3c:51:b9:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Sep 4 23:00:24 2025 GMT
Not After : Sep 5 23:00:24 2025 GMT
Subject: CN=f545f3820837000179d08c205eac00214eb71228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:1b:6b:bd:b8:cc:cf:15:5e:0c:d7:45:97:
09:98:fa:16:81:58:5e:03:6d:87:36:89:df:6c:6d:
dd:ed:e0:36:73:75:6e:37:ab:1e:11:f1:fa:a9:83:
df:ce:03:5c:6b:7b:c1:3d:c7:12:1a:ec:93:e7:76:
d3:9d:d9:29:9d:2c:c1:f1:33:07:7e:30:09:0d:d4:
b4:06:9b:53:40:fe:9f:35:24:e0:1d:b7:d5:d2:d1:
1e:80:4a:6f:70:ab:ae:fc:8e:7e:a4:42:07:9c:a2:
67:1c:db:ab:a9:05:54:c1:4f:88:7b:23:aa:13:c0:
eb:6d:5a:87:df:c3:a6:f1:90:1b:23:f8:25:c1:bd:
28:b5:47:20:41:ff:ca:82:26:ef:f6:8f:ab:a9:2a:
ac:e5:ee:bd:90:ed:a3:73:98:77:f3:3a:73:3b:9c:
66:f3:1c:f1:eb:ca:31:63:7f:4d:bf:7f:99:0e:3d:
4a:d9:34:a8:4c:94:80:aa:e3:70:ea:a9:91:43:1d:
6a:1a:ff:a5:0d:f8:8b:aa:2e:64:08:00:16:2e:09:
71:41:39:7b:05:bd:97:f4:d0:4e:eb:d6:0f:b7:cb:
58:39:ea:51:cb:3d:7e:68:25:76:20:23:7f:56:9d:
2d:bd:e8:68:60:a5:ce:0a:f1:fa:7c:90:4a:53:ce:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:F3:82:08:37:00:01:79:D0:8C:20:5E:AC:00:21:4E:B7:12:28
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a2:e0:9e:8f:d7:4c:93:d0:83:b7:a1:4c:56:60:a1:b1:f2:
18:6b:d6:38:fc:35:88:ca:20:fa:65:45:de:7a:14:12:72:27:
8a:a5:95:27:05:d5:0a:a7:86:87:06:18:dc:ce:b1:d7:76:7b:
95:77:f4:de:3b:12:12:12:7f:ea:f0:0a:fd:e2:a4:ed:ee:0d:
02:79:14:66:9e:c6:19:ca:ba:c1:8d:5a:0c:83:75:17:6c:52:
cb:27:83:78:90:84:b0:b0:e2:8f:9d:df:7f:f4:03:14:b9:11:
c6:a0:48:3f:cf:f5:0d:07:68:b7:78:6f:42:ce:92:90:db:bb:
9e:e1:aa:0c:75:77:27:0a:78:37:b8:13:2c:a7:dc:ba:5e:32:
3d:a8:13:13:6f:96:90:bb:fe:6b:e6:d8:aa:24:70:06:fd:14:
76:d6:e0:1c:30:63:c1:5c:27:b5:05:f1:5b:fe:8b:20:01:75:
e1:28:9f:df:2f:0c:54:14:6f:17:91:6c:82:de:e4:b8:55:22:
a5:8b:85:65:9c:fb:5f:8d:9e:92:a6:54:d7:56:b1:b7:47:14:
dd:e8:b8:42:b6:41:bf:8f:ed:f9:07:44:9b:c3:24:9e:63:72:
54:44:de:18:89:61:6d:63:f7:b5:51:17:04:6c:80:18:79:68:
e6:5f:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:33 2025 by rpki-client