Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: dR4cj7FCaxUNpUFVfOWNned8jQ7rXGA8da7YmHOkd84=
Subject key identifier: E1:EE:39:A1:DF:4B:B4:C1:8B:64:06:94:6E:59:AE:F8:F7:49:48:07
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 0199FD3414F09D8521B426DC0EDF4BB21216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 0AF1
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=)
2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: 7+HAjAAV3DPEH9YMljCsWVwspDKz29ggbxiRhQL4xy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:14:f0:9d:85:21:b4:26:dc:0e:df:4b:b2:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=e1ee39a1df4bb4c18b6406946e59aef8f7494807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:9f:1f:41:41:f8:ff:e7:e9:6d:86:9f:a7:
29:a1:71:8d:13:b3:ea:9e:15:22:b9:5c:40:18:78:
ca:f3:57:21:47:f4:5b:8b:03:9f:2a:9e:6b:34:4c:
ed:13:01:9e:99:32:3d:76:1e:73:db:10:e7:9b:27:
2a:93:27:f9:e1:29:14:b8:10:6a:7b:d1:af:61:6e:
11:3a:62:91:22:b5:69:18:3b:e5:0b:d5:98:88:2d:
bd:48:16:56:56:fa:f5:22:f7:bb:2e:c1:3f:bc:1e:
80:a1:c4:c2:40:0f:6f:3f:c8:d3:4d:52:21:7a:20:
64:68:be:c0:a5:55:65:64:d2:ce:85:50:9e:ee:53:
24:36:93:1e:e6:e0:3e:77:e2:a2:27:2f:f2:f1:8d:
13:f4:66:bd:8a:75:1f:ca:cc:47:83:27:85:a8:c1:
b0:57:8c:2b:13:7b:68:6e:e6:2a:45:aa:56:be:00:
e0:73:b6:8e:1b:e6:d2:4c:53:d8:7d:a0:83:dd:76:
1f:e7:f1:64:2d:27:4d:42:dc:65:35:00:01:d3:d2:
c8:d6:50:eb:6f:5f:aa:87:3f:7a:3d:9d:64:14:99:
e3:40:90:5f:79:99:46:64:2a:30:da:06:98:b3:54:
0c:8f:c7:7c:f4:78:cc:68:62:34:9a:55:97:fe:33:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:39:A1:DF:4B:B4:C1:8B:64:06:94:6E:59:AE:F8:F7:49:48:07
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:c5:09:12:50:b5:a0:86:88:6d:2d:4d:5f:36:9c:51:86:
4f:6c:22:51:bc:a4:b6:73:8d:f1:2d:05:91:6d:b3:e5:66:d2:
bf:a5:8f:43:74:42:e2:7f:5e:8f:6e:90:f3:a0:b4:82:14:76:
ef:48:fd:65:d3:b6:26:33:02:87:93:00:c8:15:b9:a4:09:b3:
23:ae:a1:66:4b:e5:36:ca:f8:66:2e:bc:77:a3:cb:b3:79:a1:
5d:3a:d4:d8:27:78:9a:1d:d4:19:d9:df:08:13:bb:7b:5d:f1:
a2:48:34:21:53:ae:61:28:a3:96:55:e0:52:4c:08:7b:d0:3a:
57:b6:8f:5b:1f:fc:22:04:e4:5c:40:94:93:e7:2e:d6:70:bd:
3b:da:63:85:91:5e:18:6e:73:65:0c:e6:37:fc:15:9f:63:a7:
7b:aa:76:0b:24:1a:61:f5:f5:13:98:60:b3:d3:0a:c8:1f:86:
3b:19:75:4d:b4:3a:e6:b0:50:d7:84:69:c4:3d:eb:b4:25:9b:
ec:50:59:8f:18:44:83:f1:cc:70:ed:78:a3:1f:2b:76:89:96:
28:24:0f:b5:0e:87:28:3a:51:85:f0:09:e8:19:5b:7c:b5:0c:
9a:30:e5:2f:f1:db:ad:42:44:f6:ad:f7:10:d6:2e:f8:33:32:
48:0b:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:54 2025 by rpki-client