Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: 884jNZwAhCzy36imn3MwjFgFRLqCqpAq2RTYR6rT/pc=
Subject key identifier: B6:6D:32:73:5A:30:8A:2F:29:7E:36:E6:EA:59:2C:9C:12:79:5B:00
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 019A4F9975C7B120BB878F750DF5247097A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 0B61
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: QVjESeBh9I42rf25eOqJU8oVVwu+iaPGS8sR7S1a/B4=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:75:c7:b1:20:bb:87:8f:75:0d:f5:24:70:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=b66d32735a308a2f297e36e6ea592c9c12795b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:be:65:46:81:c7:9e:2e:ae:10:dc:c9:3f:
8c:41:00:6e:19:28:cd:6c:32:87:e9:d4:94:4d:fc:
c6:2c:9f:de:96:8e:24:e7:da:9c:48:b6:9d:a4:a3:
0e:94:95:8f:a6:17:eb:54:b7:9f:35:f2:3c:60:41:
d2:16:85:b3:40:8f:3e:b2:2b:9a:24:b3:ea:bf:c7:
22:19:d1:f6:a6:19:00:38:9c:f0:8d:47:a0:d8:af:
58:89:3c:f8:76:72:09:a0:75:1c:dc:3a:30:78:66:
8e:6e:d0:25:89:8a:f6:6d:34:c5:c0:56:a1:30:c8:
06:24:18:d7:c5:42:13:71:32:0e:5f:14:22:e0:38:
4f:58:cf:d3:a5:14:0b:7a:40:54:49:10:80:be:08:
c7:ff:b5:c0:0a:6c:ce:58:bb:8d:ef:1e:07:00:af:
f1:c9:e5:9b:82:fb:e3:09:8d:4a:69:f1:40:40:f4:
f9:ad:6e:18:42:dd:52:fd:d3:a0:77:13:a0:57:c9:
4e:45:b7:83:af:ba:2f:a4:33:d0:42:cd:08:e3:df:
d3:f1:a7:f9:57:f9:41:6e:e3:98:e5:35:76:8b:ac:
c1:2d:2f:e5:7c:c8:83:4d:0b:82:57:3f:cd:93:8d:
80:a7:e8:af:f6:13:ba:47:ee:36:3d:88:33:aa:b6:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:32:73:5A:30:8A:2F:29:7E:36:E6:EA:59:2C:9C:12:79:5B:00
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fe:ec:11:95:6c:fc:d3:12:f6:ad:b3:55:5a:04:f8:47:35:
d5:8e:b1:1d:38:f3:d5:2c:ed:f7:e4:eb:8d:f6:bc:e5:b0:4d:
46:00:90:66:df:bc:2d:c6:90:7a:7e:69:60:a5:13:ee:c3:07:
7d:06:15:1b:a8:ea:a6:a9:db:da:4c:ef:73:30:67:95:1a:e3:
3a:bf:ff:8c:0f:ab:61:70:b1:f7:b5:30:11:ae:06:bc:f1:d7:
a5:e7:ba:be:46:db:d6:1b:ec:48:ab:e0:f2:fc:56:db:34:74:
49:45:69:74:f1:65:b9:fa:98:d3:89:93:e6:7b:51:ee:fe:4b:
da:e6:5c:ad:e8:49:bd:68:4f:8f:e8:18:5a:c1:f9:c4:a0:0b:
da:aa:e5:b7:69:98:1d:27:fb:c7:b3:9c:6b:62:13:c4:bc:28:
b0:36:0d:8a:16:0a:cd:a3:c2:16:1e:27:ef:fa:45:3c:0e:5f:
33:02:92:2c:74:b1:a3:53:5c:7b:96:d9:6a:a8:8c:e8:47:e5:
b4:7c:45:ef:9f:4f:23:af:e2:7b:c1:a0:b2:cd:ec:15:5b:dc:
46:0d:41:c3:33:91:53:30:47:96:2c:99:a6:17:48:d3:1e:63:
2e:76:1f:90:e0:8a:ce:28:49:75:63:88:bd:7a:43:0b:d5:01:
f6:ef:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:22 2025 by rpki-client