Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
File: Le43b1HIyKVVUo1MFesfTKOZxJE.mft (raw, json)
Hash identifier: UxVAKZciwdzJxFv1DpZtXt5g/GFZRspj26Ur3YhIaAg=
Subject key identifier: E7:79:0A:64:6C:D5:95:66:F9:9B:71:80:5B:A1:60:AB:2F:14:E5:D4
Authority key identifier: 2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
Certificate issuer: /CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Certificate serial: 0199FDD95BC95CBE13B43BFA19415D3C89B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: Le43b1HIyKVVUo1MFesfTKOZxJE.crl (hash: ahadjWIpAVRb64g+UytNEC4UVOXUgmRiaM1QN/coxlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5b:c9:5c:be:13:b4:3b:fa:19:41:5d:3c:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=e7790a646cd59566f99b71805ba160ab2f14e5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:c5:c4:bf:e3:82:23:b9:9f:15:7b:29:69:
78:5c:be:57:cf:bd:b6:2b:49:45:91:7b:0e:80:cd:
59:c1:de:f0:21:48:0b:b4:35:55:8c:e1:47:ba:62:
aa:0d:af:e5:f2:d7:ec:a2:50:39:e0:a8:22:00:7b:
65:67:42:ca:08:9e:03:29:9a:cd:39:f2:76:98:cb:
f6:8c:df:c3:11:f2:0b:38:bd:5a:c8:98:0c:7a:f0:
1a:63:66:4b:c5:3b:08:28:be:b1:6c:12:9c:9c:25:
15:8a:9f:a1:2c:be:ad:36:4a:6b:1c:b1:7d:64:bf:
c2:df:98:25:a2:c1:1d:8e:67:04:7d:53:c9:e1:97:
7d:94:df:47:f7:d7:41:96:6a:2e:21:d5:e8:63:d2:
f5:8b:c8:01:61:d5:7e:cd:fb:b6:36:58:a7:78:d2:
e9:b8:4b:e7:da:dc:3a:4e:07:4e:92:2e:a8:85:74:
76:b2:d7:ad:e9:2c:56:34:42:bc:09:25:d8:d9:f1:
1d:cf:ea:92:2e:2b:32:b1:46:83:ac:1a:d4:96:3c:
91:c4:8b:d7:68:7e:05:3b:b0:d2:df:49:b5:7c:39:
c9:19:90:2f:92:ec:15:a9:6f:01:08:bc:c6:b1:f8:
8a:66:fc:f9:8e:33:70:c5:69:7a:52:03:d0:48:f8:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:0A:64:6C:D5:95:66:F9:9B:71:80:5B:A1:60:AB:2F:14:E5:D4
X509v3 Authority Key Identifier:
keyid:2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7e:05:a6:e9:17:75:e0:c2:b2:22:82:5a:f8:b0:84:90:9e:
fc:97:f3:aa:cb:66:bb:d2:c9:c8:1e:d7:1b:a6:1a:77:66:7a:
28:f7:ff:e0:ba:02:4f:17:d2:47:39:e1:00:d0:f8:2b:2a:06:
08:5a:e1:10:35:55:36:28:5c:49:55:58:f6:5a:4f:55:5b:70:
b0:55:40:f9:cd:17:71:92:59:8a:ba:e4:41:f8:fb:0a:d4:0e:
ff:88:10:81:3f:1c:54:29:33:11:f4:dc:6b:0d:99:b2:4a:76:
21:b3:0c:71:03:f6:bc:ee:35:ba:47:c4:84:7c:59:b7:01:b8:
24:a8:e5:ad:b5:0c:b0:ee:66:02:7e:97:0a:ef:9d:2f:91:35:
e0:08:da:dd:00:0a:bb:8f:e3:34:a1:09:8a:35:8a:a0:16:35:
65:2e:c1:f0:41:22:96:7f:71:df:3e:03:97:20:2c:90:83:fc:
2d:63:af:01:7c:22:21:48:8b:37:df:ba:03:0f:86:9c:d6:f2:
62:63:6f:8e:5c:da:50:75:68:6b:75:5f:6e:66:09:aa:e9:b6:
59:88:ec:ed:17:a3:1e:df:0f:02:7d:68:7b:2d:41:ef:fa:0a:
9d:c0:8c:4c:33:f6:e5:2f:d0:2f:6d:84:e9:85:76:31:dd:19:
bf:bf:94:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:49 2025 by rpki-client