Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier: VgdrB3hM15Xo6m89a+t7F4TAwjPc7sG5VYYah/Pb5sI=
Subject key identifier: 53:DC:4E:AB:42:82:1A:6C:62:93:DE:38:C6:34:70:AF:C8:21:80:FD
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 01987B9C904C9FCA5C5CDF23CBAC517C6B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number: 0111
Signing time: Tue 05 Aug 2025 19:01:54 +0000
Manifest this update: Tue 05 Aug 2025 19:01:54 +0000
Manifest next update: Wed 06 Aug 2025 19:01:54 +0000
Files and hashes: 1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=)
2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: remeT6RHNIkADw096rk5TkxbMFofZ90SXq4e+gydzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:90:4c:9f:ca:5c:5c:df:23:cb:ac:51:7c:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: Aug 5 19:01:54 2025 GMT
Not After : Aug 6 19:01:54 2025 GMT
Subject: CN=53dc4eab42821a6c6293de38c63470afc82180fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:66:19:ad:e7:3f:e5:86:c2:ab:4e:93:6f:
50:af:31:4d:bc:7d:2f:f5:a9:0e:ea:b8:0e:22:b9:
07:e9:61:6f:36:51:85:27:8c:5a:e0:fc:d7:19:ea:
6d:19:91:7a:1e:69:c9:94:85:65:55:74:ea:bb:c4:
df:3a:98:c3:34:61:68:c5:db:5c:b5:3a:41:33:50:
e2:fd:67:a1:4d:0c:80:ad:da:43:c0:77:de:ff:e4:
a2:0f:5a:c1:de:f8:17:cb:50:98:04:3f:8b:9c:81:
79:59:8a:83:99:67:03:ca:a4:90:dc:89:49:74:e6:
ed:c1:7c:38:98:36:89:40:6d:bd:08:a7:84:77:fb:
f7:4c:20:64:71:69:59:58:62:f7:fd:af:d1:fa:0a:
40:0e:c6:57:38:a7:73:c3:23:96:f5:58:87:b5:16:
49:d1:56:b0:7e:82:12:59:2d:7a:b7:67:92:54:87:
0d:c0:e2:49:98:fe:93:76:52:d5:80:10:ce:6d:d5:
a7:8d:3f:7f:73:13:43:3c:95:ef:f2:a0:5a:ef:88:
6d:d1:34:58:39:c8:52:9f:0a:44:49:89:de:3c:49:
37:b2:89:10:35:35:c9:2b:a1:ab:bd:8b:d9:27:c0:
85:d0:19:20:a1:a4:20:8f:1b:e7:5c:21:fd:18:16:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DC:4E:AB:42:82:1A:6C:62:93:DE:38:C6:34:70:AF:C8:21:80:FD
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:40:1e:9d:13:0f:11:52:03:3a:1f:f1:c8:16:22:7d:b0:
47:bc:ad:19:c5:c2:40:aa:a3:61:2b:cd:15:79:04:d1:ff:a3:
9e:42:a5:8e:91:a3:0f:68:f1:e9:e8:d8:57:57:a1:54:16:e4:
10:80:bd:30:60:ae:43:33:6f:df:09:5f:d6:f8:f5:56:31:29:
fd:41:d7:5e:22:cd:17:9a:93:bb:79:83:1e:a9:18:c3:d9:97:
dd:79:52:4a:26:76:3c:c0:10:dd:8a:9b:f4:36:b7:77:39:9e:
03:a7:9d:20:c5:1b:d9:dc:2b:ed:7e:26:5f:19:24:be:b5:9f:
e1:0f:6e:1b:0f:4b:b4:48:78:e9:68:ca:56:78:f6:63:11:15:
7b:e5:98:e9:29:9a:4e:78:07:64:38:38:b5:56:a7:9b:4a:77:
a4:cf:3e:fc:38:74:51:99:15:71:5c:16:2c:5f:8a:28:47:49:
1e:06:42:9d:b6:44:b5:9e:75:d4:cd:a0:47:f0:bf:31:26:1a:
61:d0:38:f5:81:48:92:72:57:7f:31:51:09:11:73:f2:05:6b:
8d:df:39:df:9c:3e:ba:a5:fd:1b:e0:e2:4d:8f:16:b2:13:c3:
ab:53:f0:0e:20:2f:99:90:77:62:6f:1d:82:69:52:38:de:ff:
ae:ff:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:54 2025 by rpki-client