Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
File: Le43b1HIyKVVUo1MFesfTKOZxJE.mft (raw, json)
Hash identifier: BnzflM2DGRaf6z3GkPu2Mosjt7tWsJvaRhyPvJDo36Q=
Subject key identifier: 82:AD:A5:8F:B7:2D:D9:20:22:A9:93:2F:AE:ED:D4:9C:50:C4:78:A4
Authority key identifier: 2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
Certificate issuer: /CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Certificate serial: 0196B7B5B96789C9E696D4A81E3F5F27E7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
Manifest number: 152D
Signing time: Sat 10 May 2025 01:01:02 +0000
Manifest this update: Sat 10 May 2025 01:01:02 +0000
Manifest next update: Sun 11 May 2025 01:01:02 +0000
Files and hashes: 1: Le43b1HIyKVVUo1MFesfTKOZxJE.crl (hash: mRZNtAlKRh6ylCswihTCJD06TSH/0ulO9Gd1BjReqok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:b9:67:89:c9:e6:96:d4:a8:1e:3f:5f:27:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Validity
Not Before: May 10 01:01:02 2025 GMT
Not After : May 11 01:01:02 2025 GMT
Subject: CN=82ada58fb72dd92022a9932faeedd49c50c478a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:a3:e8:15:da:ba:e9:2d:23:78:6f:f2:63:
22:31:63:a2:23:6b:81:9d:06:04:88:98:b8:ba:19:
73:c7:c8:38:20:cf:ed:fb:e9:17:ae:2c:c6:ce:fe:
80:2a:24:78:19:10:76:1d:84:0e:88:4f:7b:f0:f6:
8e:c0:32:1e:d2:cc:46:81:a1:a5:db:45:df:ef:80:
7b:d5:54:c0:d3:3b:27:5c:c6:66:43:3f:55:5f:55:
4d:a6:50:9f:a5:23:4e:0f:5e:87:30:4c:a9:54:8b:
b4:52:bf:2b:57:60:d6:85:31:88:29:55:df:eb:67:
6d:4c:20:b7:a9:83:ea:13:83:39:b5:65:e3:32:e1:
88:94:98:19:98:c7:9e:5e:c9:f9:08:ae:34:58:e3:
46:4b:c0:37:0c:d0:de:03:9e:2b:96:be:c6:a2:cc:
eb:18:02:c3:45:5c:20:b0:f0:8c:5b:9f:f3:3b:83:
c0:f7:43:e3:d7:bd:96:b2:04:8b:c0:29:c9:8c:aa:
16:9f:a8:57:3a:6c:83:d3:ec:8b:b3:8e:82:2b:6e:
14:87:76:98:0e:96:8f:2a:c5:70:7e:21:81:59:4c:
d1:b5:e3:98:f4:91:08:33:93:03:2b:96:cb:dc:6f:
59:6a:f2:2b:57:f3:31:d6:c4:3b:80:0d:f9:2e:c6:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AD:A5:8F:B7:2D:D9:20:22:A9:93:2F:AE:ED:D4:9C:50:C4:78:A4
X509v3 Authority Key Identifier:
keyid:2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:93:17:da:fb:6f:8f:25:26:02:fb:a5:90:7e:61:ca:09:3b:
52:42:d5:52:6a:e6:25:07:eb:a3:f6:8c:0a:f8:b8:27:71:c1:
87:3a:49:43:db:42:e3:70:0c:19:cb:5b:eb:ce:ed:2d:65:fc:
0e:1e:83:fb:ba:bc:cd:86:44:7d:76:31:02:16:c3:c0:55:d9:
5d:14:ce:4c:01:b4:4f:49:a5:c5:d6:fd:f2:f7:bd:2a:ca:6f:
00:bc:32:7a:0d:e6:a4:84:4b:78:18:3b:9e:39:83:12:d5:99:
4a:30:33:08:98:e1:c8:54:29:9f:5d:25:9c:03:43:80:11:6e:
e6:9f:33:80:7a:c3:5f:9d:3a:ef:08:c6:e3:f3:e2:cf:e3:5a:
f0:72:64:d3:5e:ee:3a:ae:46:05:fb:df:93:ba:43:13:e6:bb:
60:db:4c:8c:07:c9:23:55:36:59:b9:9d:b0:a6:59:ae:30:8b:
eb:d6:7b:24:08:29:a5:42:0d:b6:b6:ab:9f:b4:33:a4:28:9d:
9d:9a:ab:f9:1d:0e:a1:b1:8a:8b:d3:98:04:0b:55:0a:b3:05:
91:c7:0d:d9:08:df:f3:b1:13:4c:33:a3:32:4b:e0:28:5c:c9:
0f:15:b8:e9:7e:03:8a:3b:62:2a:d7:00:78:0c:36:19:ff:35:
ee:23:3c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tblnicnmltSoHj9fJ+f5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWUzNzZmNTFjOGM4YTU1NTUyOGQ0YzE1ZWIxZjRjYTM5
OWM0OTEwHhcNMjUwNTEwMDEwMTAyWhcNMjUwNTExMDEwMTAyWjAzMTEwLwYDVQQD
Eyg4MmFkYTU4ZmI3MmRkOTIwMjJhOTkzMmZhZWVkZDQ5YzUwYzQ3OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Wj6BXauuktI3hv8mMiMWOiI2uB
nQYEiJi4uhlzx8g4IM/t++kXrizGzv6AKiR4GRB2HYQOiE978PaOwDIe0sxGgaGl
20Xf74B71VTA0zsnXMZmQz9VX1VNplCfpSNOD16HMEypVIu0Ur8rV2DWhTGIKVXf
62dtTCC3qYPqE4M5tWXjMuGIlJgZmMeeXsn5CK40WONGS8A3DNDeA54rlr7Goszr
GALDRVwgsPCMW5/zO4PA90Pj172WsgSLwCnJjKoWn6hXOmyD0+yLs46CK24Uh3aY
DpaPKsVwfiGBWUzRteOY9JEIM5MDK5bL3G9ZavIrV/Mx1sQ7gA35Lsb0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKtpY+3LdkgIqmTL67t1JxQxHikMB8GA1UdIwQY
MBaAFC3uN29RyMilVVKNTBXrH0yjmcSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmUwOTctMjhmNC00OWU4LWFkMjUt
ZmY1Y2JkYWM1ODQ1LzEvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmUwOTctMjhmNC00OWU4LWFkMjUtZmY1Y2JkYWM1ODQ1
LzEvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZMX2vtv
jyUmAvulkH5hygk7UkLVUmrmJQfro/aMCvi4J3HBhzpJQ9tC43AMGctb687tLWX8
Dh6D+7q8zYZEfXYxAhbDwFXZXRTOTAG0T0mlxdb98ve9KspvALwyeg3mpIRLeBg7
njmDEtWZSjAzCJjhyFQpn10lnANDgBFu5p8zgHrDX5067wjG4/Piz+Na8HJk017u
Oq5GBfvfk7pDE+a7YNtMjAfJI1U2WbmdsKZZrjCL69Z7JAgppUINtrarn7QzpCid
nZqr+R0OobGKi9OYBAtVCrMFkccN2Qjf87ETTDOjMkvgKFzJDxW46X4DijtiKtcA
eAw2Gf817iM8TA==
-----END CERTIFICATE-----
Generated at Sat May 10 09:53:56 2025 by rpki-client