Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: K58vgp6lDd93RzZlzc68gWTprO9BxQkI5C91p+XL5jg=
Subject key identifier: 75:6A:BB:95:15:88:FC:82:9D:57:AC:66:3C:9F:B8:0F:B7:79:E1:2E
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 0196748C04F961A92A7639C130B0174DFC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 0FE0
Signing time: Sun 27 Apr 2025 00:00:55 +0000
Manifest this update: Sun 27 Apr 2025 00:00:55 +0000
Manifest next update: Mon 28 Apr 2025 00:00:55 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: /MDdg4ZYaxvvQhxWcwr8QbP3aZJkrOnbBPoC+V+2pj4=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:04:f9:61:a9:2a:76:39:c1:30:b0:17:4d:fc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Apr 27 00:00:55 2025 GMT
Not After : Apr 28 00:00:55 2025 GMT
Subject: CN=756abb951588fc829d57ac663c9fb80fb779e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:62:fd:10:a2:63:27:0c:84:6a:f1:82:fc:
52:20:79:72:cc:cc:5a:fd:c0:cf:3e:b9:bb:74:88:
db:5a:f6:fd:6f:d2:65:37:63:93:b5:4a:96:5e:16:
ee:35:0b:c5:bf:44:e6:38:64:d6:6f:10:b9:93:b4:
ca:3e:b2:83:23:06:4e:c5:25:8c:56:54:31:e9:23:
fe:74:2b:b5:58:94:ca:23:ed:13:9a:bf:22:6f:6c:
90:ea:67:ab:04:4b:cd:b3:74:57:d8:6e:25:99:f4:
03:5b:65:f7:9a:e6:84:33:c0:36:15:b1:28:f7:cb:
c6:70:92:6e:b1:a5:7f:2e:d6:85:49:44:0b:38:49:
6c:48:54:46:88:86:78:06:73:4c:e1:e4:69:65:28:
a9:0b:0a:4b:90:81:68:6b:d8:e2:34:e7:84:fd:c4:
64:0b:bb:b2:1c:70:ef:dd:37:81:77:3a:65:29:7d:
b5:e0:45:36:b7:9e:ff:e1:7d:33:f7:a8:21:7f:67:
6e:e0:24:a0:35:e8:6f:be:78:c2:05:f8:39:c2:22:
d8:8c:8c:3c:71:63:88:b3:b6:38:2e:88:82:70:32:
76:ff:3f:a0:a9:d0:b5:55:21:7e:00:38:b3:4f:11:
db:97:cf:1d:15:a7:d4:6b:98:4c:dc:4e:51:f0:65:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:BB:95:15:88:FC:82:9D:57:AC:66:3C:9F:B8:0F:B7:79:E1:2E
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:57:9e:88:9f:4c:c2:49:f9:58:50:91:92:ba:89:85:3a:21:
32:5a:35:c5:19:49:9f:f4:b6:66:3f:5e:48:ad:4b:c8:60:35:
de:2f:30:a0:83:66:3b:c8:7b:12:a0:05:00:74:f9:54:2f:a2:
89:ac:87:c6:64:62:e7:cf:e6:6e:77:ce:67:e0:6b:a1:f0:72:
4a:9e:bb:20:94:48:9b:ba:18:57:da:89:1e:91:14:45:7e:1f:
c0:97:7b:7f:1b:26:70:3b:ca:0b:e4:ad:1e:46:46:8f:d0:f4:
16:33:96:28:df:e6:18:7e:b7:26:b1:4c:fa:8e:ee:24:e0:fa:
c9:f9:c5:e1:0b:89:63:b6:d0:22:d7:a8:75:d6:f5:8a:99:4e:
c2:34:4c:71:65:ac:9e:99:ff:06:46:68:ad:b1:86:55:86:6a:
71:44:2b:1f:8f:da:50:45:77:a1:16:c2:3e:57:7b:79:d2:d6:
98:2d:eb:9b:2d:5b:92:45:16:f0:f1:44:13:3e:e5:b7:51:e3:
7e:68:7a:c4:e2:1d:97:2f:69:31:6b:d7:e3:52:e5:4f:23:87:
77:ea:03:32:70:4e:c5:aa:3f:9d:4d:50:c8:9f:1a:aa:14:1a:
19:b9:cb:70:b1:1e:62:fb:12:86:b8:1a:b5:6b:08:8f:6a:c4:
f0:05:1a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jAT5YakqdjnBMLAXTfwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh
ODkwMmUwHhcNMjUwNDI3MDAwMDU1WhcNMjUwNDI4MDAwMDU1WjAzMTEwLwYDVQQD
Eyg3NTZhYmI5NTE1ODhmYzgyOWQ1N2FjNjYzYzlmYjgwZmI3NzllMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU9i/RCiYycMhGrxgvxSIHlyzMxa
/cDPPrm7dIjbWvb9b9JlN2OTtUqWXhbuNQvFv0TmOGTWbxC5k7TKPrKDIwZOxSWM
VlQx6SP+dCu1WJTKI+0Tmr8ib2yQ6merBEvNs3RX2G4lmfQDW2X3muaEM8A2FbEo
98vGcJJusaV/LtaFSUQLOElsSFRGiIZ4BnNM4eRpZSipCwpLkIFoa9jiNOeE/cRk
C7uyHHDv3TeBdzplKX214EU2t57/4X0z96ghf2du4CSgNehvvnjCBfg5wiLYjIw8
cWOIs7Y4LoiCcDJ2/z+gqdC1VSF+ADizTxHbl88dFafUa5hM3E5R8GXiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVqu5UViPyCnVesZjyfuA+3eeEuMB8GA1UdIwQY
MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt
ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm
LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1eeiJ9M
wkn5WFCRkrqJhTohMlo1xRlJn/S2Zj9eSK1LyGA13i8woINmO8h7EqAFAHT5VC+i
iayHxmRi58/mbnfOZ+BrofBySp67IJRIm7oYV9qJHpEURX4fwJd7fxsmcDvKC+St
HkZGj9D0FjOWKN/mGH63JrFM+o7uJOD6yfnF4QuJY7bQIteoddb1iplOwjRMcWWs
npn/BkZorbGGVYZqcUQrH4/aUEV3oRbCPld7edLWmC3rmy1bkkUW8PFEEz7lt1Hj
fmh6xOIdly9pMWvX41LlTyOHd+oDMnBOxao/nU1QyJ8aqhQaGbnLcLEeYvsShrga
tWsIj2rE8AUa/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:31:29 2025 by rpki-client