Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
File: leooNjXLO9FSOoXdycr1MFaNL4E.mft (raw, json)
Hash identifier: UONLDxVdkcY5fj31WpOBJkeXvc4tVR/Ro53uYPE7Wtg=
Subject key identifier: 02:0C:D2:B2:A9:DC:4A:35:D5:A4:61:46:42:11:D9:B8:08:19:BC:18
Authority key identifier: 95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
Certificate issuer: /CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Certificate serial: 0197B7EAC129F3DC49E0E497EE89B4FAAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
Manifest number: 09C4
Signing time: Sat 28 Jun 2025 19:01:44 +0000
Manifest this update: Sat 28 Jun 2025 19:01:44 +0000
Manifest next update: Sun 29 Jun 2025 19:01:44 +0000
Files and hashes: 1: MCsIROpcTR7JKSRfmFoIKjJ_nz4.roa (hash: R67ARze8qlkUfDP9bKevHmAROQGEYMGNSr3mOqKWMMQ=)
2: leooNjXLO9FSOoXdycr1MFaNL4E.crl (hash: 2tbBxRjfTvrsMeO6UzbshFPzb2FDCQPgy1Al9ygN+fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c1:29:f3:dc:49:e0:e4:97:ee:89:b4:fa:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea283635cb3bd1523a85ddc9caf530568d2f81
Validity
Not Before: Jun 28 19:01:44 2025 GMT
Not After : Jun 29 19:01:44 2025 GMT
Subject: CN=020cd2b2a9dc4a35d5a461464211d9b80819bc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:63:b3:63:03:12:0e:f6:3f:79:0f:bd:8d:
19:92:dd:fb:c4:03:68:4d:53:91:d6:1a:d3:ef:16:
c7:1c:ab:35:b1:fc:3c:c4:f9:a3:d9:02:cd:e7:80:
cd:24:29:ed:ff:a8:14:ae:9d:4e:fd:04:c8:70:65:
56:85:37:e8:28:a5:e0:d5:90:4e:c9:61:36:37:b1:
ed:0b:d7:c0:4b:2d:ae:65:cc:8f:ff:b1:00:ad:1a:
36:ba:24:36:d5:98:98:cd:af:0f:af:3e:b9:62:2f:
09:ac:35:ef:ba:18:45:f2:b0:e4:cb:50:ee:84:cd:
3e:3f:c1:2e:28:b7:6e:47:23:4e:b2:20:22:f0:82:
48:db:24:bf:f5:01:c1:4c:cd:c7:10:90:4e:fc:6b:
e0:f3:cc:d2:13:86:58:a3:89:0d:64:27:46:8d:1f:
7a:37:1a:4f:de:34:b0:bf:b1:8b:e3:c5:02:d0:43:
a2:1e:34:cf:16:93:b9:2f:dc:f9:e8:96:1b:8b:ed:
71:d7:79:cb:67:26:f8:44:05:7c:88:32:40:d6:8b:
4c:49:99:4d:7f:39:8f:3d:e5:88:e6:a2:36:07:c9:
3d:b5:a4:c4:7c:48:44:77:c1:a3:b8:fd:d9:cc:68:
a3:d4:68:16:05:4c:75:67:4f:2c:ad:fa:14:f4:16:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:D2:B2:A9:DC:4A:35:D5:A4:61:46:42:11:D9:B8:08:19:BC:18
X509v3 Authority Key Identifier:
keyid:95:EA:28:36:35:CB:3B:D1:52:3A:85:DD:C9:CA:F5:30:56:8D:2F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leooNjXLO9FSOoXdycr1MFaNL4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b46bb-0af4-47d6-a4b8-7ba2686ea518/1/leooNjXLO9FSOoXdycr1MFaNL4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:8c:ef:71:21:23:b2:16:cf:35:e2:9d:58:77:b6:30:e6:
4c:ab:83:4b:00:fe:29:93:6d:36:5c:d1:c8:53:28:e3:4c:2d:
ab:39:b2:b6:c3:f4:72:71:59:ea:03:31:24:f2:61:fd:37:8d:
6f:2b:87:2e:93:a4:e1:07:bc:94:7b:fa:61:4f:a8:39:6a:08:
a9:f1:3e:a3:a3:e4:2a:7b:d8:1f:4c:4a:93:29:a4:71:fe:33:
b0:61:4d:3d:1f:1c:d3:b9:36:a1:57:40:3a:bc:d7:03:6d:2b:
75:fa:a0:ce:2a:02:04:f5:2c:c4:36:74:80:05:ca:56:f9:66:
68:72:00:6a:b0:a4:72:83:1c:c1:0a:77:eb:d1:a1:8a:fb:b7:
ce:fc:b8:36:5a:1e:2c:e1:2a:03:48:e6:2c:d8:14:73:ee:9f:
5e:af:0d:3e:a3:fc:18:fc:1a:8e:d1:37:7e:21:59:f4:71:35:
45:1a:b9:a4:fb:cf:13:17:af:41:7e:e1:28:6b:9b:70:27:95:
c0:0e:fd:5c:0b:0e:b2:b8:0d:83:f7:63:e4:64:b3:fa:10:59:
a4:5e:78:88:0f:1a:04:58:b1:d7:dc:6f:d3:5d:7e:b6:06:93:
6c:b0:7a:76:4c:0d:51:fd:10:07:59:cc:62:6c:68:3f:09:c4:
4f:b7:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:25 2025 by rpki-client