Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier: 1ASe9lGm6rekI+Oh4pWZtjtnLpOL4iLYoXnQNoiECMk=
Subject key identifier: 94:1A:A5:B9:0C:22:17:48:4B:56:94:73:94:57:A2:A0:3C:4F:FC:5E
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 0198D4E03B1FA4D1809322C588422EF4C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: ZTpvk4BQpsl7WBJVY1heDS1ln/TAz5DVUA229XJQwL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3b:1f:a4:d1:80:93:22:c5:88:42:2e:f4:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=941aa5b90c2217484b5694739457a2a03c4ffc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:f8:55:b1:ff:75:e3:a1:27:c8:8c:c9:8f:
26:ef:11:08:f1:10:77:da:ac:83:2b:84:de:19:b2:
c1:30:e6:33:58:10:56:fb:db:6e:33:67:c6:39:9d:
60:00:3e:e5:b8:01:f7:73:05:fa:39:4f:13:15:8f:
54:b5:3e:f5:61:3d:45:28:38:fa:1b:76:ec:60:b9:
21:f2:11:a5:f6:99:99:4c:9e:cb:ce:76:98:aa:94:
7f:3b:35:ca:bc:32:bb:8a:1a:84:14:4c:25:49:9d:
44:1c:cc:55:70:38:33:dc:fd:87:2f:f5:71:b9:bd:
59:54:9f:38:ba:bb:d2:f3:6b:52:2e:7e:5a:00:17:
0d:9a:9a:25:19:cb:e2:a5:85:4e:6c:e0:b7:26:60:
cb:a5:d7:53:3e:6b:f4:08:b7:2f:5e:1f:c8:93:08:
52:33:c5:59:46:7d:64:db:2f:12:e7:76:3d:37:d0:
df:b1:6e:90:ec:cf:a1:ad:d6:a8:5d:3c:44:76:fa:
f5:10:ec:40:24:37:8d:c9:c4:d4:8d:13:1d:d2:4d:
9d:bc:d9:22:55:af:95:e7:fe:ce:22:f1:e4:bc:93:
28:e9:e7:0a:c8:e9:01:af:cc:58:38:97:32:76:ff:
4c:91:9e:68:a1:56:4d:61:71:64:f6:b6:72:c9:4c:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:A5:B9:0C:22:17:48:4B:56:94:73:94:57:A2:A0:3C:4F:FC:5E
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:dd:96:e0:5c:5f:5f:09:0e:58:a6:b9:9a:ff:9a:6a:0d:
1b:4b:21:39:1b:f8:3b:4c:64:69:6d:65:57:08:fb:9f:a1:4b:
c5:83:95:9f:d9:31:99:5f:5f:ee:4a:bd:aa:85:52:c4:ea:e1:
f9:7d:6f:65:00:7d:7c:c4:ac:00:8e:87:51:7d:59:da:e7:4e:
6b:03:ef:48:16:2e:22:61:5f:a3:3b:7d:ec:3a:b3:8e:e6:9c:
04:7c:62:91:74:42:07:01:5c:ab:d1:fe:ee:46:a0:43:ce:11:
e5:1d:36:c4:57:50:a1:89:f4:eb:2a:8e:ce:9a:2c:c0:7b:e1:
0d:71:68:f9:fd:6e:28:aa:1b:a6:49:42:13:3c:74:80:bd:0f:
e9:f5:a7:6c:bd:4f:68:0d:77:37:81:41:85:47:f0:5a:db:bf:
09:a7:a5:64:46:4e:7e:ec:96:57:a9:8a:55:73:99:c3:d1:93:
90:92:c8:c4:af:52:e8:64:9f:d3:27:ae:0b:dc:82:ed:b9:65:
10:0f:d1:f2:cc:53:f8:1a:7a:7c:77:6f:77:70:b2:32:bb:e9:
61:07:95:22:98:11:56:14:ef:a7:81:72:42:c3:e1:cd:3d:8e:
8f:1f:61:a2:03:74:d8:84:c4:84:89:fe:f2:1f:a5:0d:cf:b8:
56:98:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:13 2025 by rpki-client