Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: +8TougoLJ3/KH06+91Bxq9N9a8TMovEXiGkEuAm/BT0=
Subject key identifier: 48:F4:74:1B:A9:53:BE:59:77:4C:52:4E:9F:1D:12:F0:62:6A:AA:5D
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 01976BF439075DEBEA10A36A261DF2FB20BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 09E2
Signing time: Sat 14 Jun 2025 01:00:56 +0000
Manifest this update: Sat 14 Jun 2025 01:00:56 +0000
Manifest next update: Sun 15 Jun 2025 01:00:56 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: B5qLWOo0DjuBpDHvPjtTtz3qSJQKpABEcE7Lv5aSHyw=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:39:07:5d:eb:ea:10:a3:6a:26:1d:f2:fb:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Jun 14 01:00:56 2025 GMT
Not After : Jun 15 01:00:56 2025 GMT
Subject: CN=48f4741ba953be59774c524e9f1d12f0626aaa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:8d:83:e9:cc:0d:bd:f6:85:89:5d:f3:25:
79:c8:e8:1e:f2:7c:d0:b4:4b:12:fd:e8:22:23:a6:
34:44:07:2d:2a:a6:66:81:c5:2d:72:74:5b:4e:ee:
c9:ff:ec:f7:16:3d:27:e6:a8:87:e0:5b:78:92:ed:
45:58:c7:5d:a2:0d:42:99:ab:34:7f:77:fa:24:98:
06:ae:1c:de:f7:61:92:c4:7c:14:a6:88:f2:ed:55:
3c:1e:a2:5f:eb:fd:7d:67:63:19:d7:d4:89:37:95:
40:2b:1d:99:2c:44:ad:37:54:87:36:2b:44:91:54:
5e:e0:1d:fb:b2:fd:55:90:6d:d5:ff:7e:2a:e1:d5:
b2:17:f2:70:80:2b:06:69:38:da:08:4d:4d:4d:da:
af:21:aa:4b:11:0c:b1:ca:d4:00:62:aa:4f:02:d3:
1b:95:e8:0f:5d:f2:df:25:e8:f1:fd:04:29:e1:71:
d4:3e:47:dc:0c:23:6e:be:97:95:29:10:61:79:a7:
52:78:49:5d:9d:0b:ea:35:c3:12:de:8a:c0:4d:64:
b8:85:6c:f0:52:6d:1f:56:c1:d4:e5:0b:b8:4b:36:
a7:76:56:1f:6b:16:71:6a:5b:34:78:9f:9d:33:0b:
97:4f:40:e6:2d:92:d7:70:d8:8b:62:26:12:94:37:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:74:1B:A9:53:BE:59:77:4C:52:4E:9F:1D:12:F0:62:6A:AA:5D
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:93:f4:49:93:09:51:e8:b4:dd:f0:78:88:21:c5:a4:77:
ae:78:39:f1:10:93:33:fe:52:60:ca:48:34:f2:57:79:cf:a3:
2c:cb:37:3e:60:52:1a:42:23:11:a4:3c:44:0a:1b:5f:b0:fd:
7e:29:56:1d:24:f6:66:5b:67:fe:f9:b2:bb:49:83:5c:70:7d:
f2:d5:60:77:9b:89:b7:9c:3f:0c:ed:1a:93:72:03:53:f0:4d:
41:c8:31:ca:f0:5f:c7:bc:53:6c:b6:37:c8:19:09:dd:1b:1b:
8d:b4:dc:12:01:b4:b8:0b:aa:38:7b:17:a3:95:50:73:4e:e6:
86:00:63:e3:a8:64:67:bc:ad:91:75:52:63:87:f5:d5:58:fd:
42:f8:5c:24:a0:a5:33:dc:33:39:8a:cb:84:24:71:2d:02:7f:
d5:de:29:45:54:81:a7:e8:bd:6b:28:bb:48:93:20:13:19:97:
41:bf:db:dc:cb:ea:a6:be:8a:e2:59:4b:28:ee:c4:81:cc:84:
06:7a:06:3c:b7:23:d6:13:12:58:0b:85:34:7d:28:8e:2e:8d:
46:af:f9:c4:3e:5b:4b:45:88:a6:8a:ee:4b:07:60:dd:0b:40:
2c:b4:ed:4e:e5:4e:ff:54:47:4b:db:5c:59:91:08:69:35:cb:
5b:e2:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:49:57 2025 by rpki-client