Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: HBRGJBvrT37gT5E3SzaXNukzhcJKILwNDQLZyXTFv2k=
Subject key identifier: 49:DD:24:5A:D1:B2:55:D6:EA:54:59:42:FA:51:FD:6E:F0:41:6B:3C
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 0198744FE23661B3B21420ADA2FAF7E51A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 03D9
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: abhWxm2fi9+Hm3DAVtxBEwdC4vYRco8tQ6fOafyrXKA=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e2:36:61:b3:b2:14:20:ad:a2:fa:f7:e5:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=49dd245ad1b255d6ea545942fa51fd6ef0416b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:f9:15:40:76:14:10:4f:d3:53:1c:cc:db:
d8:23:b9:79:2a:8c:fb:ff:1a:37:5f:3b:3d:49:b8:
bf:96:f7:7f:27:91:28:62:96:f9:2b:78:20:aa:5a:
74:4c:d4:31:a0:ea:f5:a9:85:36:dd:90:14:95:6a:
e1:8e:dd:f9:5a:f1:87:ea:41:41:9c:a8:bd:50:bd:
f8:9f:c9:77:98:df:d4:38:c7:df:4b:2a:ae:dc:c9:
d4:fb:b3:86:29:9c:f2:ab:d8:bb:dc:6b:8c:f7:d4:
f9:91:c7:e0:ee:59:a2:28:39:5b:c6:fe:fe:fb:6e:
e4:c6:8f:9a:69:0c:a1:01:41:69:a7:7c:68:f0:0b:
c2:9e:94:22:88:2b:83:24:e8:ab:2b:74:23:6b:6f:
ac:8b:27:b9:fb:79:29:a2:79:1d:80:13:ed:7c:8d:
d2:a4:6f:7e:6e:66:3b:fd:2e:43:ed:2f:90:55:21:
80:37:87:c1:7b:a2:67:f4:6b:fd:8e:03:f4:d2:ef:
f2:5e:13:05:ae:54:6f:ca:76:12:c5:9d:eb:f7:33:
85:10:54:14:c8:73:3a:db:90:54:c4:4b:dc:7e:cc:
66:64:84:67:77:55:84:fb:32:ea:04:3c:3c:a5:53:
10:ba:e8:e5:20:d2:77:ae:99:95:0b:63:c3:55:e5:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:24:5A:D1:B2:55:D6:EA:54:59:42:FA:51:FD:6E:F0:41:6B:3C
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:5f:78:14:3c:75:b4:8e:46:4c:97:a9:d4:ef:08:e4:3a:
fe:de:6b:f1:5f:ea:73:58:38:68:f1:fc:14:50:e4:a4:25:e6:
29:b5:22:23:8c:3f:7a:a2:85:d5:33:86:78:9b:96:57:65:f5:
4a:36:83:0a:69:ad:c5:d8:95:2b:a8:1a:50:76:a5:bb:e8:0f:
61:72:9e:55:3e:29:74:ff:d5:a4:33:3c:ef:db:01:e4:36:65:
d7:49:82:11:14:37:ab:ab:33:bf:6b:bf:10:6d:55:24:03:1e:
4e:1f:21:3b:68:9d:e3:76:fe:8d:bc:32:df:c9:d4:da:43:4c:
e4:b8:9c:3f:48:79:fc:1c:d1:ad:40:d5:09:a9:de:b1:8f:b8:
e6:fd:36:c4:3e:7a:ff:7b:f7:a7:ea:54:f9:b4:fd:14:f3:dd:
7c:fb:b3:f0:d4:a5:12:09:69:06:9a:e9:8c:21:30:0c:e9:3c:
61:ad:3f:6e:8c:c3:27:99:c5:9f:b6:6b:ca:b6:ba:2b:1a:72:
81:d0:f5:3b:f4:f6:63:00:90:f1:6d:ba:e3:bf:44:1b:1d:54:
a6:de:8f:bc:a1:35:a2:13:ef:64:7a:18:3b:e5:ea:71:d1:3a:
95:bc:4f:d3:9c:9b:c6:28:a0:b7:fd:41:1c:ae:40:1d:32:88:
b5:d2:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:39 2025 by rpki-client