Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: 2af03VSklfSaLNo/Xg2Enq4wIQzXuxiL1y1/fJpifmQ=
Subject key identifier: E5:B0:BE:B7:C5:04:88:85:B2:BC:4A:C9:35:3F:5A:38:1A:42:FC:A7
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 0196767A4303100D87725E074E52DD244B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 02D1
Signing time: Sun 27 Apr 2025 09:00:46 +0000
Manifest this update: Sun 27 Apr 2025 09:00:46 +0000
Manifest next update: Mon 28 Apr 2025 09:00:46 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: +8bCZRWbj2ZO37X8aHOsnDfd6tLj7okqlTYkDsLVFJU=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:43:03:10:0d:87:72:5e:07:4e:52:dd:24:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Apr 27 09:00:46 2025 GMT
Not After : Apr 28 09:00:46 2025 GMT
Subject: CN=e5b0beb7c5048885b2bc4ac9353f5a381a42fca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:a7:2a:26:dd:ac:e5:68:4b:ae:a0:3d:92:
eb:56:89:e6:ba:2d:b8:ef:b9:6d:73:bb:fb:90:a6:
10:7a:da:8d:87:10:64:12:a2:0f:83:f4:aa:2a:47:
af:3e:79:08:10:1f:63:d1:88:f3:53:9a:7b:38:0d:
5b:8f:b6:9c:ea:31:7f:d3:19:d4:ca:1d:b1:9d:b4:
06:d4:b9:fa:eb:73:65:d7:6a:a9:49:aa:dd:f9:41:
c7:55:95:bb:32:7b:f0:34:2b:15:c7:a8:fb:55:a9:
a5:39:52:23:33:86:61:1b:46:a5:c8:2f:80:e8:75:
a9:ac:e8:b4:27:02:cf:9f:c6:b1:46:c1:61:6a:14:
d7:11:49:b1:7f:e0:2d:5a:8d:59:87:17:62:f6:5d:
21:e3:72:e3:61:b3:5a:25:6b:54:7a:ef:5c:dc:2b:
9c:0c:e1:47:72:90:fd:80:a3:9f:dc:ee:09:87:c9:
2b:a1:44:b7:72:17:e6:3e:b9:b8:b4:33:1e:1d:e5:
7a:73:fc:27:ea:eb:e8:43:50:d8:60:86:34:4e:0c:
bc:d3:27:c9:a5:d4:be:b7:7b:1a:d6:a6:8d:a5:b2:
3b:c1:e4:e0:11:5a:28:86:c3:8d:d7:5e:d7:6c:55:
f7:a4:cc:e2:2f:6f:f2:bd:bf:49:2c:24:78:1d:60:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B0:BE:B7:C5:04:88:85:B2:BC:4A:C9:35:3F:5A:38:1A:42:FC:A7
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2f:ee:5d:e2:4b:5c:80:6c:40:01:59:83:38:64:1d:fa:d0:
45:b1:fb:ea:2c:bb:03:4d:0a:23:8d:ed:06:80:29:d3:f8:18:
d3:f9:bb:10:79:9c:4a:38:ba:82:ed:9f:02:21:ca:1c:f6:04:
5c:cb:1a:77:c4:5c:4e:01:0d:a8:af:a4:19:c6:04:16:9a:1c:
b4:94:2f:77:9a:ac:e2:9f:70:5b:c5:41:09:bc:66:12:b5:c3:
f6:00:d1:0c:31:87:ff:87:8b:86:43:24:a7:26:e3:64:eb:fc:
dd:6b:81:22:e6:d5:be:87:64:45:1d:97:e3:1f:20:89:19:87:
ce:cd:16:a8:bf:94:05:ad:88:00:35:be:16:30:52:fc:27:e1:
77:0c:1f:b2:ee:0d:d8:93:16:f3:b3:64:8a:e1:8c:a8:e8:13:
ff:c2:a3:09:27:12:92:08:67:30:71:d5:f4:e6:ad:a9:f9:1a:
fe:7f:27:ef:e3:b3:d3:d8:04:fb:fe:42:17:98:b0:de:89:06:
e8:08:65:83:89:66:57:3a:79:3b:41:6a:04:e7:ba:75:ae:34:
08:c6:08:85:cd:e7:14:e2:d6:62:ba:02:e6:7f:de:e1:22:c9:
d5:fb:43:ec:56:d9:09:94:99:c5:8b:9c:d8:ba:99:4c:92:6f:
75:84:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:15 2025 by rpki-client