Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: 7x49M8v4eqC+zFBmJpRPdHMB1Ct5tfBjscsLSdmV3oI=
Subject key identifier: 26:53:C8:3F:0A:BC:01:C6:21:B0:60:1B:35:4E:65:D4:9B:7E:BD:31
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 01988EEC69B90C397DB744EDC53F9108FDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1187
Signing time: Sat 09 Aug 2025 13:01:54 +0000
Manifest this update: Sat 09 Aug 2025 13:01:54 +0000
Manifest next update: Sun 10 Aug 2025 13:01:54 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: dpltw/dm0S2D+P3FL5tRrXuz9iY5SneFRIrnuUr95mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:69:b9:0c:39:7d:b7:44:ed:c5:3f:91:08:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Aug 9 13:01:54 2025 GMT
Not After : Aug 10 13:01:54 2025 GMT
Subject: CN=2653c83f0abc01c621b0601b354e65d49b7ebd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:64:b2:68:64:f2:39:d2:60:4a:e9:25:a8:
4c:f3:9a:23:e3:c3:9a:75:65:2b:d1:87:cc:ea:06:
d8:44:1f:d3:b1:35:7e:8e:9e:5b:42:75:56:fd:d2:
38:99:ba:96:af:73:95:1c:a4:b7:23:ef:cc:68:55:
60:5a:28:f5:eb:49:a2:41:cc:85:8f:cb:f3:5e:c6:
e1:90:bf:1b:30:8b:86:09:7c:3a:bd:06:02:97:9e:
ca:4d:e9:30:f7:cd:1f:aa:d9:83:f4:4d:41:ed:ea:
ac:21:83:48:25:8a:95:5b:b9:0d:02:90:b0:72:6a:
b6:9b:e4:9c:a3:15:e0:27:c0:d3:e6:5f:cf:6a:32:
56:7c:9e:a3:2a:c3:d1:dc:86:40:0d:95:b6:e7:2b:
8c:e5:40:84:77:03:5f:1b:37:5d:69:8f:e4:57:bc:
24:e4:a1:d4:1c:fc:e1:89:e3:50:df:70:f2:a2:22:
a4:27:45:f9:50:a2:aa:e6:b2:78:f4:07:4c:8d:b4:
9c:31:13:2c:58:e5:5a:36:48:b3:20:a6:f4:c8:55:
fe:ac:02:14:69:a8:05:ce:f6:7b:d9:f5:c1:72:d2:
c5:22:8e:53:50:43:66:be:98:93:ec:b5:5f:c6:80:
e3:3c:61:aa:ab:73:08:73:b3:12:34:25:35:29:b0:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:C8:3F:0A:BC:01:C6:21:B0:60:1B:35:4E:65:D4:9B:7E:BD:31
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:91:5d:8c:f2:b3:b7:1f:a1:8f:60:0a:57:9b:24:3d:a0:a4:
68:7d:1d:b8:db:7d:37:8d:b6:a4:e2:93:56:8d:93:53:5b:09:
9a:94:ca:00:37:dd:d9:39:8e:3f:d3:80:39:6a:fd:e4:98:cc:
48:69:95:e6:b4:35:d2:6a:f4:06:12:3a:86:2c:97:c4:a3:16:
d0:06:d3:f6:a9:87:be:76:3f:23:9d:63:6f:65:0e:0c:11:1c:
d1:74:29:0f:2b:79:fb:ed:d8:c1:7d:b2:fb:a7:96:26:6c:d7:
aa:77:0e:c1:e1:fe:c0:46:cf:b9:59:23:86:3d:0a:e4:ec:ad:
3f:ba:81:72:dd:3c:cf:7d:88:e4:d3:df:28:4d:aa:6b:71:60:
80:a1:24:91:5d:f1:33:5b:e1:15:a4:f1:e7:a6:ec:5f:51:79:
8c:c4:db:5f:54:8e:31:a6:5c:55:0e:7b:9d:30:92:f8:b8:85:
89:2f:ea:94:5f:86:de:e6:c6:1e:43:2e:85:5c:30:b8:6a:8e:
f5:b8:95:a8:df:0d:40:f5:bc:bb:57:f1:fa:20:59:9e:a4:27:
2d:da:b3:48:56:c9:7b:68:40:77:55:86:45:a2:4a:23:b1:f5:
82:65:b1:b4:b7:9e:f1:d2:c5:bf:b3:9c:40:81:59:e7:c2:38:
ac:6e:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:02 2025 by rpki-client