Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: cReFCyoTfTUF65ixyHZ9LkbSQsZdCO6t/TbKpj+K89s=
Subject key identifier: 0F:39:C8:67:FA:40:76:FF:20:51:3C:56:11:00:9C:5A:6A:5B:09:54
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019872CF910A21938FC1BD671BD1335B8863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 10EA
Signing time: Mon 04 Aug 2025 02:01:02 +0000
Manifest this update: Mon 04 Aug 2025 02:01:02 +0000
Manifest next update: Tue 05 Aug 2025 02:01:02 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: ohL6G+TucB4bigc0F454g9ymQukgoz3j/k9Yg1dsNJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:91:0a:21:93:8f:c1:bd:67:1b:d1:33:5b:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Aug 4 02:01:02 2025 GMT
Not After : Aug 5 02:01:02 2025 GMT
Subject: CN=0f39c867fa4076ff20513c5611009c5a6a5b0954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:63:5e:66:df:8b:a1:a8:f6:64:67:6d:62:
f6:59:dc:c8:03:df:fc:b2:e1:4a:a2:a8:5d:2d:f1:
7b:b3:f6:8f:bd:9e:c6:3a:26:bc:fd:35:dc:7a:cd:
83:c0:69:1b:96:09:ca:23:0c:08:fa:6e:be:8a:60:
50:4a:3f:18:e1:87:a1:c6:ce:03:d0:9d:69:c7:b3:
6e:ca:60:e8:e4:59:51:12:1e:d8:b5:4f:e9:07:b3:
1d:57:25:3d:e4:f1:91:0b:f7:21:95:84:c0:79:4a:
10:76:75:ed:82:72:4e:3b:1d:ff:c9:9b:88:ee:ec:
18:06:57:08:86:53:9b:03:a9:47:fb:85:d5:8c:af:
ed:7d:f4:72:e3:13:f5:9a:b6:0f:e0:15:13:97:ce:
28:9b:90:43:8d:5c:13:4b:99:df:c3:4e:d4:30:90:
22:e1:63:b1:4a:a6:14:5f:aa:8b:cb:7f:5f:86:f7:
0a:9e:5d:25:dc:0f:80:76:74:6d:5f:80:b0:ff:db:
bb:cc:7c:ec:e7:79:ee:f1:b0:d2:47:6b:ee:8f:fc:
f5:9a:7b:95:f9:c4:0e:80:50:0c:00:5f:b8:d3:32:
6e:29:da:ea:6f:10:4d:e4:14:bf:7f:6c:8e:81:19:
77:1a:3c:2f:85:55:02:35:56:22:34:08:a8:96:ca:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:C8:67:FA:40:76:FF:20:51:3C:56:11:00:9C:5A:6A:5B:09:54
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b9:86:f0:3e:09:84:00:43:89:57:8f:ee:59:d5:b6:3b:94:
aa:c3:04:0f:b9:cf:07:27:02:3c:36:03:1f:16:81:c1:c6:25:
d7:ca:ad:74:1d:66:c3:b3:7a:9c:66:83:e7:14:a4:3d:77:16:
e5:0e:26:81:fc:c1:d1:b3:22:54:6c:db:88:ac:d0:25:3a:c9:
ed:aa:8e:32:ed:c6:d0:39:fe:99:e7:a7:ba:c0:4e:58:f3:33:
26:b2:1d:65:77:03:4a:42:57:04:c1:de:61:02:34:3a:9d:6b:
a4:b8:57:11:f3:a8:82:83:38:fd:71:af:01:e3:15:da:f8:59:
cf:e6:92:b6:92:93:78:13:4e:7a:bf:39:78:27:38:70:03:66:
b9:aa:62:95:af:76:76:1c:d4:84:31:8f:74:18:48:a1:9b:da:
d6:a2:84:1d:d5:f1:6e:63:a0:20:7c:f0:82:81:cf:e0:72:f1:
4f:30:4b:5e:bf:bc:00:8d:f6:bf:3d:71:c9:ae:c9:2b:31:6a:
d2:de:28:76:68:3e:ed:f2:d6:6d:7b:d4:dd:a3:24:85:8f:88:
c2:8e:53:39:59:2e:10:cc:8e:5f:b5:28:ed:b4:86:44:22:44:
2b:8b:d6:86:8a:06:a8:42:c0:7b:3d:fd:4e:13:c1:38:7f:8c:
36:56:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:16 2025 by rpki-client