Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: RZ3yWDanp/k+H48ayrRkemiFJe/1Yi1QJKCuMOfzsN4=
Subject key identifier: A1:D2:90:DC:FA:42:DC:27:AD:CC:25:8C:8E:25:B4:D3:68:A3:66:4C
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019748FA603F3586F6278CBF2253AE9121A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 033E
Signing time: Sat 07 Jun 2025 06:00:57 +0000
Manifest this update: Sat 07 Jun 2025 06:00:57 +0000
Manifest next update: Sun 08 Jun 2025 06:00:57 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: PlCdbyEMvYEU6MgGegNKU4CtAeAI0vrKFF7RcwaG6eQ=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:60:3f:35:86:f6:27:8c:bf:22:53:ae:91:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Jun 7 06:00:57 2025 GMT
Not After : Jun 8 06:00:57 2025 GMT
Subject: CN=a1d290dcfa42dc27adcc258c8e25b4d368a3664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:15:80:0e:ec:3e:8b:40:9a:08:56:41:01:
51:28:6b:57:36:e9:eb:aa:9f:63:13:53:2d:90:00:
03:cf:29:06:27:8c:18:26:d5:06:0f:8a:77:81:62:
d3:66:b7:d5:e6:c7:e4:06:10:16:c4:04:31:5d:e1:
69:fb:eb:ff:bd:e8:bd:ce:fb:74:5a:4f:76:be:53:
03:15:92:06:e1:33:5c:c1:42:ab:76:70:3b:e0:94:
19:27:a2:34:52:9d:39:f1:0b:04:6d:cb:6e:cc:cd:
d8:f6:a7:92:1c:7d:dd:4f:c0:ee:ad:8c:b5:1d:8f:
e3:05:87:92:09:00:de:f1:70:e1:da:ad:37:a9:d8:
aa:51:81:dd:4a:76:fc:12:0f:17:88:07:36:69:84:
29:97:19:ef:1a:69:6b:4f:c8:c8:0f:56:99:a2:93:
62:27:92:6c:21:44:22:29:72:e8:43:73:5a:99:bb:
35:16:bb:90:01:d8:50:ef:44:22:2b:0d:dc:e4:91:
d8:d9:97:7c:cc:df:da:be:aa:34:a6:c2:9e:cf:01:
27:9f:e0:65:cb:d6:8e:0b:1e:e3:81:d0:68:6f:86:
e3:c5:7f:4a:53:91:4d:50:e6:6c:dc:2b:e4:02:f5:
ca:4d:ec:f3:9d:b1:bf:56:85:b1:5e:35:f3:43:3d:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:90:DC:FA:42:DC:27:AD:CC:25:8C:8E:25:B4:D3:68:A3:66:4C
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:36:e2:bd:c7:5a:86:c7:42:6b:c9:4c:a5:e8:42:21:05:83:
8a:66:e4:bf:7f:8b:a3:38:dd:8c:71:20:ec:5f:e0:0a:4c:fc:
cb:9d:9a:de:04:c1:11:67:98:2a:19:d8:f7:e6:f4:d0:f2:50:
c9:0e:f7:59:a5:4c:0a:10:09:f2:8b:ad:73:07:82:0e:c3:a8:
28:d5:b0:ca:ca:3a:13:82:ee:9e:0d:99:48:5e:3c:d9:fc:c5:
37:41:9b:6a:3b:f7:50:c7:55:79:c8:20:9c:71:64:0e:90:70:
df:56:88:c2:2f:b4:5f:f9:03:9f:ee:4c:03:25:b3:62:92:23:
96:2a:3c:f4:2c:7b:ef:ff:51:e6:73:83:11:75:14:f9:3d:c3:
88:02:c5:63:2e:51:70:e3:e8:d1:4e:9b:0e:d0:7c:b3:38:fd:
78:1f:b7:54:ee:18:b3:02:20:3e:7a:c2:cd:fc:94:d8:73:97:
40:e8:61:84:f6:5e:ad:3d:c3:01:a9:00:04:c8:32:13:18:3c:
3f:96:17:23:9a:3d:35:71:f8:99:6d:51:ea:5c:10:2e:f0:ce:
c7:86:26:b1:8e:d3:12:65:02:ed:bd:49:7d:eb:18:3b:53:88:
91:dc:19:a3:ea:eb:33:e4:35:8e:bb:4b:0d:06:3d:50:e7:c6:
e3:b1:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:06 2025 by rpki-client