Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: uzR+l5vUpIyVzZrSSLrGpBeuOMk9NrxTZeVI3Rmuklw=
Subject key identifier: 16:09:35:ED:A2:23:64:39:B3:51:91:57:77:7D:FF:09:EB:BE:7D:1A
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 0198D54DC4A53E8AABF3F781112C10F8113A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 111D
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 70bfTvrybULRdEsyvlR0s1mY+3eDB7ZwHeqK5Cn8PPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c4:a5:3e:8a:ab:f3:f7:81:11:2c:10:f8:11:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=160935eda2236439b3519157777dff09ebbe7d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:c0:b4:fb:81:3e:ce:3b:20:d9:a2:d8:ca:
04:76:1e:7f:f4:ce:0d:0d:11:c3:14:65:ca:79:12:
c4:f7:cf:8d:f8:9e:30:f4:bd:30:1f:8a:6a:d3:5e:
b0:75:0c:e0:34:47:b0:6f:56:49:85:bd:24:cd:1e:
d9:0f:56:a2:fc:f5:c8:2d:17:6d:fc:61:bd:25:8b:
9d:02:4f:23:52:22:0d:ef:ea:78:74:4f:a3:e5:3f:
a4:b4:61:5a:05:10:ff:ca:3b:30:cd:66:71:ee:9c:
53:62:71:66:1b:16:75:5c:f6:d1:c9:15:1a:9c:e6:
6c:9b:4e:c8:a0:31:57:a3:b0:1b:67:54:5e:e2:44:
cc:a3:f9:28:4d:ca:2d:24:d5:23:09:7b:03:e9:b2:
fc:13:aa:3d:f1:bc:09:0a:bc:70:8d:22:73:81:41:
4f:c4:60:a4:63:ba:63:e1:1d:5a:4c:15:3b:02:bb:
77:27:ea:3c:dc:69:6a:e4:83:52:55:bb:ec:a0:e3:
70:78:26:50:37:f3:83:86:20:47:ab:f9:c0:fb:f2:
bf:cc:8b:b9:57:6b:1c:0a:eb:7b:1f:7c:1f:0c:c1:
66:ce:90:e3:dc:59:19:ce:9a:96:3e:ce:78:b3:82:
50:5d:30:41:40:f3:02:7f:af:49:d7:11:a7:f6:e7:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:35:ED:A2:23:64:39:B3:51:91:57:77:7D:FF:09:EB:BE:7D:1A
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:d9:a3:4b:fc:79:dd:da:60:a0:c6:4d:cf:5e:14:68:97:
6a:25:87:f6:c2:9f:31:ca:88:a0:14:af:87:ea:53:79:6d:c1:
ac:e5:99:17:38:ff:8f:4a:f4:d2:dc:49:40:bb:ab:66:cc:cd:
4c:0b:06:3c:2c:5c:3d:40:f6:7f:44:b5:6e:04:d4:d2:03:a9:
6e:48:1c:8a:e2:58:42:b6:08:6c:3a:ab:a1:61:83:4b:c0:67:
d7:b4:08:7e:20:02:12:70:4e:1e:d4:20:64:23:81:3e:7e:b2:
34:83:f2:fc:ea:04:70:63:1b:42:6a:13:d6:4c:d1:da:d1:90:
fa:91:4f:48:81:5e:9d:72:73:80:e9:e4:74:8f:50:87:54:0e:
82:8a:45:00:59:a1:91:38:b7:95:1e:ad:02:12:a2:32:cc:77:
8b:92:6d:9d:01:d5:01:e4:59:c6:bc:25:77:5f:ae:72:fa:83:
20:62:f5:89:09:dc:63:83:56:9f:af:a3:15:2c:09:eb:65:d3:
88:77:31:32:7e:c3:c2:f4:bb:b5:c4:35:78:7b:f5:95:8d:67:
9f:dd:06:5f:5d:28:0b:f7:30:be:29:e2:b2:14:d4:1c:ac:84:
eb:86:ca:f9:cc:2e:86:f0:15:65:25:26:3e:ac:86:13:e5:1a:
87:00:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:33 2025 by rpki-client