Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
File: Le43b1HIyKVVUo1MFesfTKOZxJE.mft (raw, json)
Hash identifier: mwORgXSH365iuUMJopyhayOtSnWw3qwNBU5vWkiqvQA=
Subject key identifier: 99:CA:9D:74:85:86:C1:73:C9:51:77:49:6E:11:98:BB:1C:88:50:80
Authority key identifier: 2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
Certificate issuer: /CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Certificate serial: 0198D66080E73363ED25F5AB7D9EAEC48D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: Le43b1HIyKVVUo1MFesfTKOZxJE.crl (hash: Tsx37evpV5/tlusrFHGz2p9B6BEk5sQfW/K7BqzxvkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:80:e7:33:63:ed:25:f5:ab:7d:9e:ae:c4:8d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=99ca9d748586c173c95177496e1198bb1c885080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:02:ce:d6:51:02:0a:c1:7d:70:a4:35:1f:
af:fe:27:96:c6:cd:32:33:54:fa:54:29:21:d0:92:
c3:ca:15:6b:b9:80:76:40:32:03:72:32:86:56:80:
27:12:c9:fb:e3:61:47:97:0d:06:7e:dc:49:64:22:
27:7d:a9:6e:e5:6a:90:99:2a:31:7f:97:ea:6f:43:
34:ec:3e:4d:8f:61:9a:a3:11:d6:82:a3:f3:f9:f6:
02:9a:be:87:a3:f4:88:17:51:df:62:33:18:96:7e:
27:18:cd:11:d0:a1:c5:b7:97:3a:02:4f:6a:98:7e:
24:4f:5f:79:0a:9e:0a:a9:82:c0:53:29:87:9e:08:
64:4e:48:91:00:46:f8:a6:ce:16:2a:3a:71:31:b8:
48:16:e3:5b:5e:21:fb:5d:5e:80:6b:2b:64:b5:77:
cb:2b:8f:bf:4c:f5:70:39:3a:28:4c:2c:f9:0f:ef:
f2:41:2c:2b:db:ae:3d:e1:1b:b0:b3:fd:d6:7e:f8:
ba:57:3a:21:5d:ed:7e:e9:a4:08:81:fd:00:eb:01:
6f:e6:98:98:63:9a:b8:59:97:72:d3:c8:36:5a:8d:
42:8b:82:05:b0:a3:a4:9c:68:9b:98:b0:8c:9b:4a:
17:cf:b3:d5:e5:4a:92:44:5b:f9:a0:b4:0c:30:f3:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:9D:74:85:86:C1:73:C9:51:77:49:6E:11:98:BB:1C:88:50:80
X509v3 Authority Key Identifier:
keyid:2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:93:93:59:e1:5b:5d:94:03:6e:ef:6c:60:22:92:da:f7:
06:1a:55:df:e9:b7:58:ed:c4:eb:de:60:dd:b2:05:00:7c:20:
d5:f0:28:4c:1b:2e:65:f0:db:00:fa:a3:2b:b8:c6:a4:b0:8f:
b6:27:33:94:4c:ef:8c:db:72:e5:0c:07:b1:86:5b:5d:1f:3d:
a3:bd:cc:34:80:b1:8d:08:6c:5f:03:c3:81:f9:3d:db:0d:e5:
cf:62:43:85:b3:15:0b:7e:36:79:39:d1:fa:b8:99:c8:d1:71:
58:39:51:86:19:0b:5a:11:4b:8c:d7:7d:7a:ff:6a:cd:c1:58:
b2:14:d9:c1:d3:24:3b:c4:1c:6a:70:63:2e:40:8c:1c:26:f7:
3f:c8:54:36:ad:fa:d2:0a:ff:4c:30:46:1e:3b:5d:55:46:e8:
2e:7f:e1:d2:8a:b1:8e:8f:5d:8e:9e:30:38:37:44:30:82:56:
64:01:c4:c3:70:db:fd:89:25:da:78:af:96:5b:36:3d:27:b9:
ab:13:65:4b:24:04:d6:8b:cc:5d:f3:ef:1e:bd:79:23:9f:68:
fa:61:27:bf:15:4b:9c:e4:dc:16:6e:73:02:76:29:4b:00:5d:
1b:97:dd:7f:55:c9:90:d7:b3:2d:4d:57:60:d3:8d:f5:0e:04:
66:8f:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:01 2025 by rpki-client