Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: OKIWCWPIpZ/0ud5bim3TmZ37ygd3GJLBplD45ztvpDk=
Subject key identifier: E0:F5:9E:21:D7:F8:99:AC:FF:B8:4A:E9:81:D8:87:EC:3F:FB:EB:B1
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 0196C570C647ECAB79579B525603EE1521DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0E23
Signing time: Mon 12 May 2025 17:00:24 +0000
Manifest this update: Mon 12 May 2025 17:00:24 +0000
Manifest next update: Tue 13 May 2025 17:00:24 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: bznosv2E6sSPx4sXZDcDAj8xnUDGqsDAJovAw7yveDg=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:c6:47:ec:ab:79:57:9b:52:56:03:ee:15:21:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: May 12 17:00:24 2025 GMT
Not After : May 13 17:00:24 2025 GMT
Subject: CN=e0f59e21d7f899acffb84ae981d887ec3ffbebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:02:7d:47:0a:f0:06:23:b1:fa:02:64:ea:
3a:ff:e0:7e:0a:4e:1e:20:df:29:f9:2d:de:52:ce:
ed:a8:58:1e:7a:81:e0:cc:82:c6:28:a0:08:74:4d:
69:e4:6b:7e:19:20:50:fd:42:46:1a:74:4e:f3:db:
86:3a:74:0e:d3:5d:ea:a1:75:54:7d:cb:15:a5:3f:
f0:a4:bd:60:47:68:c3:66:97:d0:f1:18:69:bb:64:
d1:f1:38:bc:18:9d:b1:a7:33:9d:b8:4a:b9:f9:c8:
57:18:ce:79:c5:2b:32:5a:77:58:af:69:8c:b9:19:
fe:75:4b:55:ae:c0:fa:28:91:7c:45:19:8e:b6:ae:
76:63:29:32:d6:87:da:4c:12:48:0b:14:0a:9f:52:
27:6a:14:49:ed:ef:1a:d6:59:8b:8f:e1:74:34:66:
71:a2:a6:9a:6c:58:6c:4a:fd:7d:01:13:29:5f:73:
be:16:ad:32:fe:1e:80:c4:b7:b9:b6:38:c4:21:6b:
e9:40:e6:4e:dd:99:cd:61:37:2d:23:c0:56:e8:70:
4d:7e:be:79:c3:da:36:33:d1:2d:2a:dc:89:52:df:
80:03:b1:42:da:13:40:3e:bc:47:2b:94:d4:a0:ff:
4d:58:cf:46:86:d6:31:4c:54:34:79:39:8e:b2:23:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:9E:21:D7:F8:99:AC:FF:B8:4A:E9:81:D8:87:EC:3F:FB:EB:B1
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:b4:c9:73:98:78:9c:d0:39:a0:11:b0:cc:1e:a5:95:91:
e9:4b:9f:9c:77:e9:39:3b:0b:eb:9a:10:75:6c:52:e7:b6:f5:
8f:bb:ed:1b:34:5d:f2:cf:17:42:cd:51:ac:0f:e2:e3:c4:73:
24:bf:46:f9:ea:1b:31:f7:a2:81:fd:38:45:28:64:38:0b:fb:
52:f4:19:59:b5:3a:ec:76:e6:1f:36:82:5d:ff:86:77:de:ca:
26:ef:ad:ec:17:68:ee:db:df:80:f6:69:e6:f9:0e:78:ec:dc:
80:45:cf:f0:10:3e:a6:bf:10:a9:51:a6:2f:05:b6:d9:83:36:
3f:13:5f:9f:75:44:6e:c1:c2:ec:2d:da:04:21:ee:62:b0:30:
ef:d5:b9:03:a9:e6:23:5f:fb:20:40:7e:00:05:11:1d:db:37:
9f:20:4e:ba:d6:85:ac:ff:9c:67:7d:a9:96:e4:5a:8a:0c:5c:
c0:66:74:d8:b8:b8:65:d6:c7:09:b3:9f:7a:ab:7e:a9:5f:4d:
0f:65:5a:08:36:a3:31:92:af:f7:69:45:7a:89:64:36:1c:31:
32:8d:14:45:a2:ad:64:74:49:82:12:b5:a7:7e:68:52:6c:16:
8e:95:63:48:a9:ff:93:d0:91:c1:17:41:7d:e3:f0:a4:84:e5:
30:71:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:44:15 2025 by rpki-client