Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
File: leoFUUagE2cFy2ptrk1CScUUxpM.mft (raw, json)
Hash identifier: cpAStO4k3I8DUEl/2dzN7a61vX0QIPig/514hddECnQ=
Subject key identifier: 22:16:22:C1:D5:5B:41:F8:D6:A0:F2:0C:E3:B5:C0:53:0F:85:22:51
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 01969E634377A8D55ECC660F2E2B99DBC56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
Manifest number: 1A
Signing time: Mon 05 May 2025 03:00:27 +0000
Manifest this update: Mon 05 May 2025 03:00:27 +0000
Manifest next update: Tue 06 May 2025 03:00:27 +0000
Files and hashes: 1: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (hash: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=)
2: leoFUUagE2cFy2ptrk1CScUUxpM.crl (hash: 51dHptpOAZrJB1L2WRjlCi7whid3iBUkdHMUwvtQSTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:43:77:a8:d5:5e:cc:66:0f:2e:2b:99:db:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: May 5 03:00:27 2025 GMT
Not After : May 6 03:00:27 2025 GMT
Subject: CN=221622c1d55b41f8d6a0f20ce3b5c0530f852251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:4d:ec:92:69:f1:82:1b:2d:1b:1d:d9:77:
a4:61:50:3a:76:cf:36:7e:3a:a1:a1:7f:2c:7b:d0:
4b:65:71:2d:1e:fe:d8:11:ab:26:7d:58:ff:a8:1f:
76:c4:07:80:23:92:fb:95:8d:65:e5:7a:04:f6:c6:
e9:db:0c:1d:67:2c:b0:01:8b:10:e6:3e:02:d1:c1:
e3:83:3c:a7:eb:51:a4:69:e8:f8:9b:7a:cc:7e:73:
1b:d7:c9:74:ab:8a:25:29:b4:76:ce:11:13:0e:ae:
13:0e:79:b7:6a:1b:5e:c9:8c:d7:ab:20:a2:c1:a7:
ac:cb:27:46:4a:e7:dc:3c:f5:7b:6b:ad:3d:ff:b6:
08:7b:82:d9:c6:3d:0c:a4:c5:1a:d8:13:bd:7a:d6:
60:b1:70:9b:4c:6f:fc:c7:f1:4b:aa:e3:bc:87:2d:
33:72:0b:d0:ba:89:1b:ec:cc:ad:c5:44:6a:4c:41:
0b:34:e9:b5:c8:c7:d5:c3:f0:ae:0b:92:02:68:b6:
e1:60:63:15:7b:f4:d1:29:12:0b:1c:a5:61:5c:a7:
da:fc:f0:a3:a9:eb:41:7c:79:1f:b4:d6:b0:1a:88:
30:99:49:c2:1e:0d:16:a1:e2:e5:f5:cd:56:15:f4:
6d:44:f7:0e:fb:26:1f:d8:a6:8a:d9:9e:01:18:3c:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:22:C1:D5:5B:41:F8:D6:A0:F2:0C:E3:B5:C0:53:0F:85:22:51
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:40:42:a6:7c:04:52:52:b6:48:be:c6:e6:a7:c5:99:09:a7:
c6:04:72:52:bb:fb:44:e0:0f:2c:5b:ce:2c:6f:d0:d8:14:2f:
04:2d:bf:6f:20:65:d4:3c:21:34:dd:89:1e:69:ef:3d:aa:a2:
d0:3d:09:dd:ee:ef:9e:67:97:a8:0a:4a:16:09:2a:17:4b:c9:
8d:a3:ad:50:d0:8b:8b:f1:66:9d:70:4b:8f:06:4b:21:b2:e9:
42:93:c8:10:e7:04:70:47:d1:36:50:ee:25:d6:4d:e5:c3:ba:
3a:9a:9d:5e:e7:ac:17:1d:93:0a:96:a5:65:9e:40:75:66:9c:
ce:f9:58:b0:e9:28:c6:0e:ae:d5:58:99:83:7b:61:62:3c:67:
de:13:6a:8f:84:70:a6:e0:47:26:28:f4:da:4a:f8:9c:bc:5f:
20:0b:aa:aa:23:14:36:e5:14:dc:ed:2c:74:44:4b:4e:40:8b:
25:da:29:11:83:c7:e0:e3:c1:6d:1e:12:1d:02:30:fd:50:b5:
d6:08:69:51:82:75:ca:2d:6e:84:2a:38:ed:e3:5f:f4:80:79:
7a:45:5f:c4:4c:7c:60:94:6a:49:7b:a7:5c:84:cc:ae:6b:37:
8d:0d:4c:34:3c:d2:3d:49:49:74:31:6c:49:39:39:5b:78:88:
77:31:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:26:09 2025 by rpki-client