Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: zhR4F2yDDTF2UndFmKigMEPRkmXp8yyfopdpb/U/cdo=
Subject key identifier: 1B:F6:AD:48:81:58:FF:35:70:8D:07:C5:3D:40:A8:57:15:9B:D2:B6
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019788479B43E36B41BC321B8B9356BE6AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 10FF
Signing time: Thu 19 Jun 2025 13:01:23 +0000
Manifest this update: Thu 19 Jun 2025 13:01:23 +0000
Manifest next update: Fri 20 Jun 2025 13:01:23 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: aTSiZZwX/4QhYuayP6gFE6XPuvZcVloGdBBiK2OLj58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:9b:43:e3:6b:41:bc:32:1b:8b:93:56:be:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Jun 19 13:01:23 2025 GMT
Not After : Jun 20 13:01:23 2025 GMT
Subject: CN=1bf6ad488158ff35708d07c53d40a857159bd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:a0:b2:56:00:8d:75:4e:0f:41:38:88:13:
5a:58:8b:08:ac:c8:01:35:e7:8f:53:bf:70:54:5c:
91:cc:ed:79:19:8c:fd:a9:2b:ba:3f:ed:2b:f6:bb:
b7:6c:9d:3a:78:96:0c:86:aa:e6:4f:60:55:ea:cc:
64:01:c0:44:7c:e8:b4:13:96:cf:0d:4d:00:44:a0:
40:1d:88:0c:e2:0c:6c:5b:d3:ed:2c:5a:6e:fb:a0:
b0:84:84:be:00:92:34:22:36:e4:47:ab:49:38:04:
86:a0:69:0b:41:e4:81:17:ed:4d:18:01:72:13:d9:
ff:95:70:61:be:64:52:7d:64:50:37:31:47:00:b5:
35:9d:06:33:c2:85:fb:f4:e2:ee:a7:ce:73:e0:02:
79:3b:06:d3:3f:90:d0:9b:68:10:85:16:24:94:80:
b1:64:b6:35:ef:b0:bc:55:5e:75:32:de:e1:74:a8:
2e:35:ea:e4:fe:46:41:cf:c5:61:7f:3b:bf:51:fc:
01:5c:1c:b3:6b:dc:df:e4:12:ff:b1:7a:8c:ae:9b:
25:c4:8b:db:44:9c:f9:07:ae:f7:13:88:ed:2f:60:
b0:32:e5:7a:e0:25:4f:56:d5:be:21:94:8c:04:53:
70:b0:57:fb:d6:de:2d:46:e5:af:c4:98:8c:d4:09:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:AD:48:81:58:FF:35:70:8D:07:C5:3D:40:A8:57:15:9B:D2:B6
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:db:d4:3d:89:20:8c:52:e8:d5:47:a1:a5:00:d0:2a:e7:
8f:33:76:79:95:23:27:31:09:6f:93:f6:59:00:41:4c:93:31:
50:b2:8e:5e:50:b8:43:83:1d:18:31:88:c4:c6:9f:63:15:df:
0b:51:9b:b1:03:00:4e:a3:87:7b:fa:a3:9a:cd:f3:a3:35:0c:
62:24:b3:ee:a5:89:00:58:e1:03:01:95:14:6d:44:6d:c0:ae:
46:04:8c:8e:bd:e6:2f:80:8d:a8:16:5d:0a:42:e6:40:3b:0a:
b4:03:d7:98:e8:1a:d9:23:78:76:8e:d7:ea:c4:6c:84:44:0a:
16:1d:6a:5b:69:88:12:34:95:dd:a4:5c:1f:c0:fe:ad:ed:79:
a6:df:af:98:8c:74:25:d6:d5:50:7d:e5:e5:4c:f1:8d:2b:95:
4c:3f:7c:89:4b:62:2f:13:23:33:e1:52:f0:c4:2c:10:fb:b3:
b1:53:6d:14:a2:d6:10:24:5d:ff:2d:24:52:a3:ba:93:11:f7:
f5:bb:dd:98:19:37:ff:d0:3d:c0:18:bb:51:9f:46:aa:00:09:
01:87:b5:8a:a6:21:0a:ed:ad:a8:e7:8c:d3:65:d9:0f:66:31:
f2:70:65:7a:62:99:04:ee:d9:79:ca:17:a1:29:80:8a:17:3d:
8b:f6:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:47:44 2025 by rpki-client