Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: PDJx7TRmewS1YqKJMs9ET/XxRWw+D3pv4izG38d5u9Y=
Subject key identifier: 9E:E0:79:5D:CC:56:52:E3:C3:30:D7:1F:1F:B6:49:28:58:9C:5D:B2
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 0197868EF8C14151E0594EFD5C3A09BA9960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0E87
Signing time: Thu 19 Jun 2025 05:00:06 +0000
Manifest this update: Thu 19 Jun 2025 05:00:06 +0000
Manifest next update: Fri 20 Jun 2025 05:00:06 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: +Of/C00v8aQXcma+y96cyz60/Ix362ZeEwlPlmIGTYQ=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8e:f8:c1:41:51:e0:59:4e:fd:5c:3a:09:ba:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Jun 19 05:00:06 2025 GMT
Not After : Jun 20 05:00:06 2025 GMT
Subject: CN=9ee0795dcc5652e3c330d71f1fb64928589c5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:19:cf:a4:f0:f1:dc:99:d7:40:0b:f5:b8:
77:b3:f0:0f:7a:c6:32:74:16:12:0b:51:55:65:03:
16:65:a1:f1:4b:44:42:db:c6:7a:b3:13:57:27:f4:
d4:d9:49:66:84:07:2c:00:d8:14:3b:66:1c:85:32:
02:9b:70:38:29:ea:db:1a:b7:e1:42:4e:e4:00:57:
42:60:2c:84:51:f1:90:ab:a1:75:47:c1:89:b9:d5:
ce:07:22:b8:ca:e3:0d:fc:e3:6a:7d:4a:27:3f:52:
03:d9:47:dd:0b:7f:6c:38:7f:e1:8b:dd:15:0f:b0:
68:74:c1:9c:e3:e2:4e:bb:dd:2f:d5:5a:99:e5:01:
00:b1:75:97:80:eb:3e:99:a8:98:b4:6d:8f:da:cd:
dc:6c:07:ea:67:9a:84:96:94:49:1d:b5:cf:3d:34:
d2:d6:17:27:9d:39:4f:b2:d3:c1:0a:a1:c4:18:2d:
9e:60:cd:21:b2:00:fb:26:22:13:eb:31:a3:d0:50:
bf:2d:57:6c:a5:99:90:c8:31:a1:1a:2e:1d:bf:51:
bb:c7:37:29:ac:28:1e:a6:96:9b:ad:b4:f6:e9:38:
5c:04:8b:21:2d:24:87:f9:48:a8:ca:c0:e2:d3:1b:
37:24:83:d9:77:33:35:4e:62:e6:36:08:23:55:9c:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:79:5D:CC:56:52:E3:C3:30:D7:1F:1F:B6:49:28:58:9C:5D:B2
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fd:b4:e2:47:df:fa:2d:fc:64:0d:ce:5a:e2:9e:d9:dd:a8:
2c:fc:63:93:1f:29:bf:6c:8a:4f:b2:bf:4c:1d:c9:31:7d:df:
33:41:9a:0f:11:f1:f6:f7:7f:42:5e:a9:b7:dc:0a:fb:59:f7:
17:dc:dd:2b:39:a8:87:9c:a6:35:e1:3f:03:8e:74:fd:07:4e:
9f:f6:1e:c5:6a:41:71:54:cd:59:5c:a6:12:1d:af:3d:2f:e4:
24:47:db:f1:15:ef:8c:0c:9f:fa:fd:a4:5b:ef:ac:5e:77:2c:
36:ff:c6:42:0f:d4:07:e0:fe:55:e3:82:56:93:54:80:72:cf:
d0:23:10:c0:bd:82:74:2d:56:0c:a2:03:ed:bb:83:5e:55:bf:
d5:81:c2:bc:7e:21:2d:b8:b8:36:4e:9c:84:3e:da:2a:f7:c6:
52:14:ff:77:ce:b5:77:28:c1:1e:d0:7d:b2:fe:c1:92:10:46:
d5:5c:b2:fb:67:b0:20:36:6f:db:c8:11:2b:c7:cc:86:46:2e:
53:53:b5:31:5f:4e:34:ef:2d:f3:98:01:5b:62:12:fc:f6:77:
71:03:0f:22:42:d5:f8:55:6f:f7:39:26:2c:40:d2:0f:0e:77:
9f:1d:b5:23:48:5b:3d:f0:2c:03:3b:4c:ad:fe:ca:94:30:2b:
7e:34:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:36:31 2025 by rpki-client