Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: IzCCVOLeIG09XKcKYlYoihmM4ps6kOgUH4lwRNtN2O0=
Subject key identifier: 39:69:08:28:39:1E:E2:CF:B9:60:3C:64:12:6F:C2:C2:69:2D:75:D0
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019A4E4FB23C4AF38C504924C368F2BAE3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 04CF
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: h6SFWryYRtOrj9rij5U64bhlSsxDEBUCl1+i1d/Vvrg=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
4: yFZR2dMAN5V-U5yvB8zako3sBAI.roa (hash: Su1HZF/T/54lCtr91bZGjGbSwHR7/PFdtQAeMPFLxmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b2:3c:4a:f3:8c:50:49:24:c3:68:f2:ba:e3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=39690828391ee2cfb9603c64126fc2c2692d75d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:29:34:0b:ee:31:67:6e:d9:f2:7b:ff:36:
f1:37:c7:fd:12:01:5a:24:89:74:d6:4a:eb:ae:0d:
be:63:68:22:3f:7a:18:f1:8e:68:c9:f4:7f:97:b9:
4f:68:6a:51:51:39:15:90:25:a3:7a:7e:c8:2c:d0:
51:26:55:4e:3c:9a:75:7a:f1:71:d3:a7:99:4e:fb:
24:1d:34:5e:c7:d0:ce:f6:8a:cd:1f:df:60:41:7c:
db:74:75:15:c7:f7:a3:a7:71:a9:ad:57:88:54:5a:
9b:96:96:ed:be:5c:b2:59:ac:46:8c:eb:06:39:28:
93:24:ae:e1:b5:3d:91:c3:3d:5b:c6:d0:cf:70:f6:
09:0d:3b:f7:73:e0:77:c9:93:ff:b1:35:7f:cb:23:
92:22:32:25:a0:98:57:7a:c2:4f:3b:00:66:e7:3b:
ac:36:34:28:37:7f:da:8b:42:b6:3c:e6:23:0a:c9:
e6:39:c2:e5:92:ba:1d:68:c0:57:7c:03:74:e8:54:
17:c8:48:0c:13:60:8e:d6:5b:8e:7f:59:b9:ea:d5:
9c:dc:85:ae:e3:55:3f:35:79:21:19:2d:6d:5e:72:
0a:55:6f:90:b7:93:a7:02:78:64:42:93:92:2e:24:
16:d3:b0:2d:e3:7d:14:1f:bb:d5:71:d6:44:10:46:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:69:08:28:39:1E:E2:CF:B9:60:3C:64:12:6F:C2:C2:69:2D:75:D0
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:63:3f:23:29:72:02:de:96:ea:89:57:73:7e:e1:06:99:6e:
86:7f:4e:0c:96:b8:06:f1:12:2a:26:35:5b:e3:fe:19:1b:eb:
aa:bf:97:b2:c9:22:09:07:d9:93:e1:7f:62:46:30:c9:f3:29:
f2:bb:50:ee:ed:4c:5c:f1:b4:80:e7:01:52:92:2f:9c:e5:4d:
31:fd:e9:4d:6b:4e:aa:1c:cf:68:58:ac:5c:b6:43:57:64:85:
a7:ba:df:07:a4:b7:d4:3c:ff:c4:52:a3:de:b7:fa:98:4b:d2:
3d:77:ad:06:37:7e:10:c1:ac:3b:ac:7b:b4:50:9c:5d:1e:5f:
08:72:fb:1a:09:17:d9:54:4a:08:08:af:aa:20:56:5c:1d:29:
b0:c2:a9:1c:76:7f:82:08:3d:1f:90:57:8a:08:ee:92:68:9e:
f6:50:a6:1e:d5:3c:da:1d:0f:38:8a:51:82:ce:5f:a5:46:cb:
39:b2:c9:0b:c6:e5:41:4d:29:eb:7d:10:dd:a2:bf:f7:13:1e:
3f:cc:d2:1a:7c:87:01:aa:37:62:d1:4e:cf:c6:c2:32:27:93:
c7:7e:f6:d1:27:e2:04:52:d3:36:4c:5f:68:9e:fa:fe:5c:ce:
46:00:7d:bb:d3:46:35:88:2f:16:50:5e:13:d2:9a:f0:5d:bd:
0c:49:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:49 2025 by rpki-client