Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: o7JGnCeosc1Nd9tGKpN1X0JWTZSSf7YfjeIOsqKRsYQ=
Subject key identifier: C3:79:42:41:1F:FF:82:8F:8E:A1:3F:27:BF:FA:6E:E4:FB:E6:38:77
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 0196C2A6C1BDD34853A0DCF47A3F819A10D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 0945
Signing time: Mon 12 May 2025 04:00:30 +0000
Manifest this update: Mon 12 May 2025 04:00:30 +0000
Manifest next update: Tue 13 May 2025 04:00:30 +0000
Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=)
2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: gfN4Y6F/zDJF+qpgZbSaTDPcytLb9DWKqruRl1kbFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c1:bd:d3:48:53:a0:dc:f4:7a:3f:81:9a:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: May 12 04:00:30 2025 GMT
Not After : May 13 04:00:30 2025 GMT
Subject: CN=c37942411fff828f8ea13f27bffa6ee4fbe63877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:97:38:51:ce:91:f2:ad:82:07:9e:11:36:
26:cf:60:f3:cf:18:27:d7:ba:c4:16:d6:23:24:44:
0d:89:2b:62:b1:3e:57:b5:e9:d4:c5:f7:69:07:08:
1e:08:5e:21:ff:e1:e2:2a:67:32:72:1f:78:a1:bd:
03:84:7a:60:2b:f4:87:3b:25:4e:29:26:93:ea:93:
ae:e0:d7:cc:8a:bb:a4:0f:d9:6b:e4:a7:c5:6e:1c:
97:7e:d4:21:b7:a4:78:04:3c:e5:59:4d:d1:3e:85:
27:e5:52:4e:a1:93:10:0b:7e:0c:c7:33:76:77:16:
fe:97:b4:91:3c:4a:d9:52:08:1b:91:fc:d8:30:6f:
1e:58:af:21:60:ba:a8:27:71:24:57:49:70:c6:1c:
54:11:63:92:28:19:cf:87:33:8f:38:f5:33:dc:df:
c2:85:9a:62:28:fb:11:8f:64:4b:63:ec:98:06:48:
33:48:28:ff:2e:b4:cb:62:57:1f:f3:3e:8d:d9:9e:
e7:1b:eb:05:e2:1a:e2:86:5f:ab:a7:2f:22:db:0f:
cd:59:a0:da:32:4d:49:fe:ca:d8:cb:81:02:eb:78:
94:62:16:f4:5f:4b:b5:c9:f2:b2:b0:0f:47:37:e9:
78:77:19:9a:3f:13:57:17:f0:6b:49:6f:1b:53:44:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:42:41:1F:FF:82:8F:8E:A1:3F:27:BF:FA:6E:E4:FB:E6:38:77
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:bc:79:26:eb:58:00:c2:f6:a7:72:00:fa:a7:bf:81:03:
9e:a7:55:40:f9:8a:9c:f1:09:43:24:5a:53:3b:34:47:58:63:
88:a3:0e:13:41:f7:53:36:23:dc:4d:b1:57:8d:a5:f4:12:4c:
ea:6d:77:09:c7:58:cb:14:46:f9:85:2d:e3:cd:1e:f9:18:60:
ac:11:23:05:b9:6f:c2:ba:5f:42:38:62:bf:d1:22:84:31:51:
7c:ac:70:ba:e8:12:44:de:10:0c:eb:d2:52:c4:f0:2d:29:0c:
f8:f2:65:ae:6e:1a:85:0c:41:73:b9:e9:27:c1:b3:7e:da:ea:
7e:64:cc:25:3b:7e:17:09:21:a2:43:dc:76:fc:fc:c0:57:37:
40:83:8f:e9:d1:b5:0e:20:af:75:a4:14:12:49:6a:53:cb:8a:
67:8f:0e:0a:55:a0:cb:60:5c:3b:41:0e:91:0a:e0:01:f4:7b:
6b:b4:e6:a1:3b:8b:38:87:01:14:2e:d0:38:a3:6d:a4:68:56:
2a:20:7d:1a:e8:59:8b:0d:9c:a6:f5:f7:5f:22:8f:3b:fe:e8:
a8:85:0c:34:92:7c:4b:2c:1d:40:2b:31:b8:48:d2:d6:13:7c:
d5:59:6e:2a:f2:ce:af:4a:80:7a:5e:13:4c:20:ae:bb:cf:9d:
96:d9:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:15:57 2025 by rpki-client