Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier: F3BswRjnil+evBjQirrPUruW7u76hhRss0ZuKsiRiEo=
Subject key identifier: 50:65:68:40:4F:23:61:1B:08:9B:64:16:56:12:55:03:CC:44:70:C9
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 019673E6E4B101D072FB799B5DCBF27E6FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number: 04
Signing time: Sat 26 Apr 2025 21:00:33 +0000
Manifest this update: Sat 26 Apr 2025 21:00:33 +0000
Manifest next update: Sun 27 Apr 2025 21:00:33 +0000
Files and hashes: 1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=)
2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: kwMmzISNkJALAG+jrMcu14QEXYW6wWlOneWSgryKrxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:e4:b1:01:d0:72:fb:79:9b:5d:cb:f2:7e:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: Apr 26 21:00:33 2025 GMT
Not After : Apr 27 21:00:33 2025 GMT
Subject: CN=506568404f23611b089b641656125503cc4470c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:71:ae:b7:74:c6:e0:c1:e0:82:92:ad:3c:
d4:89:de:97:6d:d2:5b:ba:bd:6a:4f:62:35:ea:18:
e5:fd:3e:45:6a:4f:e6:53:b4:bf:f9:a3:4c:14:aa:
be:0e:ff:3d:aa:7a:06:32:33:01:e2:1e:61:b6:e4:
27:21:d4:1c:aa:f9:3b:86:83:d0:69:cd:6e:f8:ac:
86:3f:cc:f1:60:0a:67:7c:8c:bb:cf:24:c4:f5:9a:
7a:32:7b:c2:9f:19:e1:e3:84:e7:85:1d:57:f3:70:
7c:c9:94:dc:4a:7e:e7:74:73:b2:7a:79:31:89:a6:
aa:c6:40:7e:c6:af:e1:f4:b3:58:79:35:89:e9:2d:
d5:00:7e:39:8f:ba:36:5b:10:45:63:b2:83:60:9b:
e1:56:82:9a:39:54:b9:10:6f:56:c6:6a:c0:c3:3b:
22:1c:de:6a:1f:5d:f4:21:e5:e1:77:34:51:0e:7f:
86:1c:b4:9c:bf:c6:8f:f6:64:e8:60:29:19:7e:7d:
97:d9:a3:49:d7:77:cf:a9:9b:a7:59:89:2c:1e:a9:
91:ba:6d:3a:2d:12:2e:80:8b:65:b8:08:4a:8a:dc:
d7:6e:67:31:62:cb:08:a5:69:a4:e1:d8:1c:7a:57:
8d:78:fb:c4:af:97:cc:3a:a5:5e:c1:47:eb:e9:ac:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:68:40:4F:23:61:1B:08:9B:64:16:56:12:55:03:CC:44:70:C9
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9a:89:dd:0b:2a:29:d0:cb:85:b6:cb:c9:d4:20:df:22:dd:
48:28:2d:33:4c:c8:11:90:30:9b:39:e6:e2:1e:f2:46:fb:0b:
13:6e:50:3d:2e:72:eb:08:2c:ff:bb:66:9d:06:d7:11:03:82:
a9:33:41:27:24:78:35:aa:78:2b:d4:a2:61:e0:72:d4:6b:e2:
46:c1:dd:cc:dd:b5:8f:e9:59:a3:26:90:a1:8b:d2:f9:1c:99:
a5:05:53:e0:16:01:4b:b6:4e:60:64:c8:f1:93:bf:51:ef:e4:
c6:bc:2d:16:1c:77:56:bf:8a:4b:f7:9c:49:c0:a7:f0:7c:0c:
7e:f0:f9:a6:9f:bf:2c:27:a3:92:fe:6f:7c:d8:2a:90:26:d7:
45:81:5c:2d:5c:5d:f1:95:16:6e:ea:73:bb:2e:7d:28:18:d7:
1e:a6:c4:67:66:a2:f5:aa:3f:a0:c5:23:12:6e:0e:90:a3:3f:
0b:62:f8:58:de:bc:31:7a:6b:e4:9e:4d:5d:e0:ab:ea:17:2a:
ba:1a:08:c5:16:1b:e7:fc:50:59:3b:27:3e:5f:4d:ba:a8:bc:
c2:77:bd:df:f4:56:51:cf:38:8c:51:4b:86:26:0e:ea:80:b7:
aa:d2:09:82:8b:2e:7f:a7:6d:f0:5f:3f:c0:f4:69:e5:8b:34:
c3:9e:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:22 2025 by rpki-client