Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: 5G1hGXomBCrPSMFCnphkfsFH/274Co0wmmZYVBzIB0c=
Subject key identifier: BA:34:B1:E5:C1:5C:33:B3:CD:1D:65:C8:11:F5:EA:7E:6C:2C:FB:FE
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 019A4D746929CE4D5BA31A5D093B6CAB9CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: zEcP/vEPHDI/iu0yzBfjJ8irwu+N7uYCwAdIb1teX/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:69:29:ce:4d:5b:a3:1a:5d:09:3b:6c:ab:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=ba34b1e5c15c33b3cd1d65c811f5ea7e6c2cfbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:74:b4:27:f5:08:87:00:6b:01:39:fd:4e:
f4:d6:cb:37:e6:53:12:e8:67:0c:6c:21:83:94:e7:
5a:2d:e7:f8:53:b2:f3:e3:18:4a:94:a5:08:bc:4d:
ae:ab:a8:ec:00:ca:f6:a8:71:48:b5:25:fb:73:7f:
81:54:fd:c1:7a:a6:40:ae:11:75:72:7f:48:ff:82:
07:f0:55:84:ae:0b:8a:13:bf:cf:77:4c:4e:8d:7b:
c8:b4:e3:2f:e0:de:61:0b:ea:91:7d:d6:b1:3d:3c:
ea:74:65:32:27:36:30:50:b1:9a:b9:f4:bb:83:c3:
10:f5:0a:86:0c:4f:25:e2:d6:e5:e0:73:97:89:de:
5f:27:d2:8b:05:56:3e:7f:c2:5b:6d:49:6b:91:d4:
aa:02:56:b2:d7:5a:dd:e7:c7:aa:59:67:44:0a:8d:
45:b2:c2:b3:70:80:70:27:a9:0c:fd:a6:d1:b3:82:
b6:18:d4:ea:7c:fa:ba:0e:f2:40:a2:7b:20:ae:ad:
0b:f2:f1:f0:83:1e:2a:f0:54:4e:65:5e:a1:b4:cd:
b3:f6:2f:51:03:53:e2:df:24:90:7c:32:6d:62:dc:
4d:08:5f:42:63:3c:d1:b9:88:cb:47:1a:5b:35:82:
71:5b:7f:a3:8b:75:0b:3a:c4:1d:1e:21:8c:97:22:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:B1:E5:C1:5C:33:B3:CD:1D:65:C8:11:F5:EA:7E:6C:2C:FB:FE
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:56:5f:b6:a2:87:2b:5b:2f:ed:a7:0b:60:fe:cb:8a:ce:
f5:5b:f0:78:4f:9c:1a:bc:63:63:a0:13:f6:70:62:c5:e1:72:
0b:94:7c:74:04:da:69:09:43:6d:22:e8:29:da:26:92:ea:4c:
31:22:f5:da:8b:06:8b:24:28:78:14:ee:ee:c1:2d:05:cd:1a:
ec:96:c0:d2:b2:7a:8b:84:cb:8d:6c:f1:af:e0:8a:73:87:96:
5f:40:b1:c8:91:5e:fd:aa:fb:c3:77:e1:df:ad:fc:6d:02:09:
5f:1a:46:e0:a9:ea:86:3c:38:81:4a:85:b8:2c:50:5c:77:c6:
3c:3a:a6:09:1a:8e:3b:d4:2b:b8:24:ef:91:04:4c:d7:ea:43:
1c:19:fa:a3:82:86:1a:3f:97:8d:9e:8a:c4:69:dd:81:e5:c7:
f8:b0:93:a7:d1:db:82:a5:90:d9:89:87:7f:fe:1c:9f:84:77:
c6:f6:a2:38:b8:fd:70:a2:1b:60:0a:1c:3e:45:a2:bb:69:43:
4d:6f:74:4b:43:3f:e9:10:16:99:3f:b5:1f:40:7b:89:64:8f:
a7:ce:07:80:e6:cd:bd:81:ea:91:ef:c8:2f:d4:64:b4:02:f3:
e1:1b:5e:f1:3a:a2:c1:1f:ec:63:d0:a0:b2:34:40:2c:6a:10:
27:c2:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:20 2025 by rpki-client