Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File: leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier: /dCNaymej08lrhf6RtGajOrYfU0W/vEEphLU0I3J0gw=
Subject key identifier: 88:21:3A:33:82:5F:1C:E5:6B:25:7B:41:94:21:9D:88:6D:81:24:1F
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer: /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial: 0198D5F11DAF89E63EE46F05BAE8EDA68F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number: 04A1
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: cTh+4WZUh1liStFmbke4uLbcEGqXWwB3uqpM03JenXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1d:af:89:e6:3e:e4:6f:05:ba:e8:ed:a6:8f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=88213a33825f1ce56b257b4194219d886d81241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:19:9a:aa:3c:11:1a:93:95:da:e7:72:e3:
d5:b7:9e:8e:34:cb:da:36:df:4d:2f:1c:c6:a9:48:
80:5c:aa:c5:fc:b6:7b:be:04:22:91:a4:38:cd:3d:
af:30:a8:73:81:2c:7d:ae:71:c6:45:19:c3:90:5f:
29:31:e5:ab:e4:43:6b:b7:01:90:26:fc:a6:1e:91:
ae:12:d3:db:0b:85:b4:41:de:3c:94:6a:49:85:ec:
15:23:51:63:76:60:7d:35:f4:90:e5:fd:48:f4:7d:
b0:ea:42:bd:a7:e5:2e:78:f1:0a:66:45:57:ab:72:
4c:5c:41:39:3f:9a:cd:6f:0c:f5:69:71:95:2a:58:
a9:5c:bc:36:8e:6e:e9:d1:f1:89:2d:3e:c2:18:0d:
d8:3d:0c:b1:00:84:ac:55:4c:78:e8:16:ed:19:44:
78:d6:a1:3b:d5:45:37:78:e3:50:15:5d:18:09:d0:
52:f3:59:8b:1d:bb:aa:39:21:38:f6:a6:61:58:46:
b6:95:96:bc:63:57:74:f3:97:bf:8a:ba:67:ef:4b:
cf:d9:35:2b:ab:5c:0a:23:06:40:55:d6:ce:cd:b8:
39:43:18:f4:ee:bd:03:d8:39:2d:ee:8b:2b:c1:55:
ca:a4:1c:ed:90:a5:c3:bb:5d:d7:1d:8d:66:fc:5a:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:21:3A:33:82:5F:1C:E5:6B:25:7B:41:94:21:9D:88:6D:81:24:1F
X509v3 Authority Key Identifier:
keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:d8:57:1b:f8:81:17:53:1e:9b:0f:01:9a:7e:8c:bc:87:
b0:01:76:ce:50:6d:52:93:34:02:1b:a1:3e:ea:07:7b:cb:da:
5e:76:33:4d:af:02:01:06:34:8f:1f:98:a1:72:7e:1c:e8:5a:
3f:7d:56:d1:f3:b1:a8:1e:43:5b:0c:90:ca:94:3b:78:b9:f2:
5a:2c:cf:93:05:de:b1:b7:85:ab:45:45:60:8d:68:25:6e:42:
29:65:28:ad:f1:02:c2:9a:23:56:f3:69:8f:41:ef:92:23:b6:
9e:3a:60:97:f9:1d:81:32:9e:86:53:e9:63:58:30:63:c1:52:
4d:61:5a:98:bd:41:07:e8:52:53:d3:8d:06:78:64:f6:92:c9:
2e:3f:ba:11:0c:e6:75:e9:86:5a:a5:5c:31:7f:66:d2:18:04:
4e:8d:eb:60:d3:c2:44:a4:a9:10:4a:a8:6e:35:d4:48:77:9d:
2e:3f:ab:91:23:25:ae:3d:d5:2c:51:f4:0f:f9:6a:2f:99:de:
2a:e4:a5:4c:f4:c3:fa:d9:14:48:9b:f7:4f:ba:b1:48:f6:f3:
e3:06:1c:5a:bf:d1:df:db:a7:a6:da:0a:65:6f:6a:c3:a3:d3:
85:55:3e:f9:05:ec:21:1e:d5:5e:46:08:22:85:1a:05:5f:a8:
27:e8:c3:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8R2vieY+5G8Fuujtpo9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTA1YjE5NGFlMWJlNTI5NjlhNWI0MTA0NTU3ZmYwNDJj
MTYwMmEwHhcNMjUwODIzMDgwMDA1WhcNMjUwODI0MDgwMDA1WjAzMTEwLwYDVQQD
Eyg4ODIxM2EzMzgyNWYxY2U1NmIyNTdiNDE5NDIxOWQ4ODZkODEyNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkgZmqo8ERqTldrncuPVt56ONMva
Nt9NLxzGqUiAXKrF/LZ7vgQikaQ4zT2vMKhzgSx9rnHGRRnDkF8pMeWr5ENrtwGQ
JvymHpGuEtPbC4W0Qd48lGpJhewVI1FjdmB9NfSQ5f1I9H2w6kK9p+UuePEKZkVX
q3JMXEE5P5rNbwz1aXGVKlipXLw2jm7p0fGJLT7CGA3YPQyxAISsVUx46BbtGUR4
1qE71UU3eONQFV0YCdBS81mLHbuqOSE49qZhWEa2lZa8Y1d085e/irpn70vP2TUr
q1wKIwZAVdbOzbg5Qxj07r0D2Dkt7osrwVXKpBztkKXDu13XHY1m/Fo+KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIghOjOCXxzlayV7QZQhnYhtgSQfMB8GA1UdIwQY
MBaAFJXgWxlK4b5SlppbQQRVf/BCwWAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQt
ZGQxODVjNzM1NWI4LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQtZGQxODVjNzM1NWI4
LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSvYVxv4
gRdTHpsPAZp+jLyHsAF2zlBtUpM0AhuhPuoHe8vaXnYzTa8CAQY0jx+YoXJ+HOha
P31W0fOxqB5DWwyQypQ7eLnyWizPkwXesbeFq0VFYI1oJW5CKWUorfECwpojVvNp
j0HvkiO2njpgl/kdgTKehlPpY1gwY8FSTWFamL1BB+hSU9ONBnhk9pLJLj+6EQzm
demGWqVcMX9m0hgETo3rYNPCRKSpEEqobjXUSHedLj+rkSMlrj3VLFH0D/lqL5ne
KuSlTPTD+tkUSJv3T7qxSPbz4wYcWr/R39unptoKZW9qw6PThVU++QXsIR7VXkYI
IoUaBV+oJ+jDtw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:57 2025 by rpki-client