Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: 5A2GgZqsgjh3jwgOBX/pp4XHwrbYMbCSqPI44ZnlwYg=
Subject key identifier: 66:EA:2C:49:09:7B:87:C5:6C:62:72:BA:47:7A:15:1A:CA:0C:9B:28
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 0198D65F9EAABCDFD66D326C95E69F40A3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: Xm+N2izowgNvULuUgmNlzo3mKhAHabqIZ4OwP3WSgPM=)
2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9e:aa:bc:df:d6:6d:32:6c:95:e6:9f:40:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=66ea2c49097b87c56c6272ba477a151aca0c9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:96:56:21:35:10:14:20:63:1f:d2:c7:d1:
4f:94:ef:38:26:6e:88:14:8f:c2:f1:6b:11:68:b0:
be:c1:9f:b4:00:04:ad:5e:d3:13:b4:eb:59:6d:a7:
ee:74:ca:8b:a3:8b:5e:db:2c:da:ef:37:cb:99:f4:
9f:60:ce:29:dc:51:14:62:ed:02:d7:e7:8c:e5:0f:
4a:b6:ac:e2:4c:a3:52:50:de:c5:6d:bb:8c:c3:c0:
bf:04:61:d0:ec:d1:41:70:0d:92:77:18:fc:9f:ae:
01:28:81:5c:2e:e4:88:55:45:53:3e:c2:c5:84:51:
dc:f5:3b:62:17:10:86:c2:cf:cd:00:bb:f9:49:17:
8c:87:2b:da:c8:1b:eb:2f:77:a1:0c:91:1a:cc:bc:
f3:ab:95:92:f0:b8:24:c9:98:c8:2c:6b:34:6a:a9:
a1:d7:1d:7c:85:f5:52:e3:dd:94:41:aa:16:07:55:
2c:14:f6:c8:23:54:a6:46:1a:d4:df:ca:cd:7e:4c:
96:5a:90:a4:8c:c8:3b:8b:08:39:f2:94:0b:56:6e:
1d:dc:d5:e8:4a:5b:f4:6a:d3:57:5c:f8:38:98:77:
bd:18:6b:42:58:e9:41:54:02:95:58:15:09:eb:42:
4d:58:7a:77:99:f8:53:dc:9a:7f:df:89:7d:4c:ee:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EA:2C:49:09:7B:87:C5:6C:62:72:BA:47:7A:15:1A:CA:0C:9B:28
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:1b:63:60:43:16:d1:04:58:9a:08:e0:1e:a3:b5:4d:c0:
07:9d:93:66:33:9f:10:c1:23:bf:eb:84:e3:4e:f2:0a:f1:ee:
5b:9a:29:76:5b:1b:a7:30:e2:4e:b3:10:24:9e:1d:be:97:85:
44:b5:e7:00:99:ae:57:79:36:b8:bf:fb:02:99:14:86:91:5d:
f8:3a:1b:35:1a:b8:f4:21:58:01:d2:95:1c:eb:b4:be:89:40:
4e:55:7a:57:c0:b7:87:22:9e:be:2e:82:84:c0:c0:b4:1e:73:
54:ab:63:c5:6d:3f:2b:d7:21:62:04:24:38:3b:5a:10:15:24:
e8:07:95:3b:51:4b:2c:dc:f0:b1:a6:23:9c:0c:00:6f:81:98:
92:9d:1a:ca:0c:cd:e6:a4:f8:97:31:61:9d:78:bb:1f:eb:64:
04:07:eb:8c:a7:81:7b:26:4d:59:05:03:3a:a3:d7:ee:b6:c5:
f9:65:d5:11:8b:22:8b:dd:d0:d6:79:cd:db:96:0e:10:6d:84:
4d:d8:33:a0:16:b8:12:fe:6d:d2:36:30:ed:9c:81:7a:3c:4b:
73:12:95:02:d9:81:71:8a:95:12:c8:ee:65:29:e0:b3:90:30:
3a:ae:1e:ea:41:bb:3b:1e:ba:e6:98:34:dc:3c:51:62:df:f5:
d7:d0:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:45 2025 by rpki-client