Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: NfabZXBfCX+g1Jusg6Yw15tiuwD7EWtfrqCSWLmCeOI=
Subject key identifier: E8:31:15:F8:EB:6D:A2:E3:AC:BA:41:1E:2A:AE:36:A5:C4:1D:62:0D
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 0196756773F9681B6CBF66DCDE602FE3F674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 091D
Signing time: Sun 27 Apr 2025 04:00:36 +0000
Manifest this update: Sun 27 Apr 2025 04:00:36 +0000
Manifest next update: Mon 28 Apr 2025 04:00:36 +0000
Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=)
2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: HLZmGLlNMsUsAiugtP9dfgnnB+kK8wXC/hi+AXctQ9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:73:f9:68:1b:6c:bf:66:dc:de:60:2f:e3:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Apr 27 04:00:36 2025 GMT
Not After : Apr 28 04:00:36 2025 GMT
Subject: CN=e83115f8eb6da2e3acba411e2aae36a5c41d620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:13:f3:b4:84:f9:da:de:de:54:51:95:ff:
fe:62:35:bb:d1:f5:09:1f:04:45:4d:bb:61:71:4e:
24:fa:ea:a9:0c:97:73:1e:81:92:38:13:0f:33:8e:
40:8e:ce:b9:b8:e7:c0:f2:d8:00:fb:11:6e:0f:3c:
af:d3:60:06:f5:30:b8:51:0f:e7:b7:4a:3a:98:75:
3c:19:56:f4:b6:b6:f9:d6:1b:77:87:20:43:af:2b:
1f:8a:08:24:1a:c6:11:b2:f0:1c:af:10:8e:ee:ee:
6d:93:04:89:e1:7d:6f:2d:4f:03:22:9c:15:12:0f:
a9:c1:3a:c5:67:9c:41:5c:87:8f:e1:d9:3d:32:17:
64:f7:65:88:29:49:89:f8:02:96:26:d3:2f:c7:15:
c9:df:c0:ac:a9:06:a1:40:14:88:61:d5:91:0c:54:
60:1e:7c:0a:34:79:82:ba:9f:0d:b6:f5:28:ed:1b:
07:cb:f0:25:7b:05:96:24:83:54:bf:6e:38:c4:49:
bf:85:0c:97:39:2a:95:7b:f6:9e:46:cb:47:a7:54:
6d:f0:66:33:b8:aa:16:7f:58:84:b8:72:7e:26:5c:
6b:89:dd:4f:e6:cd:7d:87:61:31:23:63:05:8a:a7:
08:09:f0:c2:4f:f7:f8:4e:cc:b1:09:c9:e2:ca:10:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:15:F8:EB:6D:A2:E3:AC:BA:41:1E:2A:AE:36:A5:C4:1D:62:0D
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:ff:e0:28:d4:28:f1:c0:92:85:ea:bd:0f:e7:81:01:46:
4e:96:4e:81:c3:02:d9:3b:d0:58:f7:05:3c:2c:a9:89:5e:fb:
54:b6:2f:15:61:dc:ab:70:78:a9:c6:8d:97:ca:b2:b4:d1:4e:
5e:4d:61:8e:c6:8f:ab:7e:c0:01:dd:7a:9b:95:38:18:fe:27:
d7:6f:72:6f:f3:f7:bc:61:1b:d6:d4:a4:6a:1e:3c:d1:8d:9f:
c4:a8:d5:fd:09:bb:e1:07:c4:71:41:b5:c6:37:91:cf:c6:19:
35:e7:67:11:5f:7e:e3:c0:5e:bb:02:d3:00:14:cf:34:cb:03:
09:41:03:71:3b:e8:99:e4:aa:34:55:06:63:a7:d2:07:10:a2:
1c:6b:1e:4a:e2:e4:c0:b2:a1:27:72:28:ce:d3:71:97:65:04:
99:9a:02:be:0e:c6:f7:92:bc:63:1a:1a:3a:d9:54:52:41:34:
16:4b:63:85:f0:ef:17:96:cc:d6:75:43:d6:b9:ae:d9:b1:04:
72:fb:38:a9:b4:d0:40:b7:37:e2:4a:2f:e5:cc:6e:4e:c4:98:
30:5a:70:5d:63:34:49:7a:b6:5f:26:7a:c1:66:b2:75:e2:92:
82:fb:0b:4c:07:11:6b:71:02:35:98:fe:ab:1b:33:53:46:d9:
88:73:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:14 2025 by rpki-client