Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: UTRyrJdwbrVzGZun1aKWIBHiKomUBxH3kvFQKQr1Btk=
Subject key identifier: 80:AA:93:1A:67:90:7F:5F:2A:DB:95:D6:B0:AA:8C:C2:E3:01:34:63
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 0197B77C55114CB5D1C20734BEF6EB21D7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 1089
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: lu7OBwBJhQ+nxGAhdq218zhYPRCYnWrLNytAzMnLyeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:55:11:4c:b5:d1:c2:07:34:be:f6:eb:21:d7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=80aa931a67907f5f2adb95d6b0aa8cc2e3013463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:f2:a1:a7:a5:65:c8:65:e5:b7:8b:67:de:
13:4a:4e:4c:6a:33:c4:8c:c8:11:e5:e0:89:b4:a6:
9f:1d:dd:3b:84:4a:cb:b3:db:46:d2:60:71:58:be:
cf:0a:fa:dc:cc:9d:a6:ac:b6:58:45:8b:dd:2b:5b:
df:f1:be:24:f4:b0:c8:23:8f:d1:4e:47:3a:1f:fc:
81:af:40:43:99:27:c0:6b:64:90:e5:c3:d8:91:b6:
03:13:92:a4:ce:10:93:d3:36:84:64:3f:3f:32:3a:
99:25:2f:cb:a8:91:70:6e:2d:65:78:a6:a1:6a:f0:
5c:9d:63:d4:2a:df:cd:f0:cf:33:db:30:91:5c:a7:
bb:40:eb:d4:00:73:61:eb:59:5a:6b:e6:a2:eb:83:
84:24:ea:68:1e:7c:4d:fa:2d:42:2c:54:5f:3e:14:
a6:42:38:42:66:1e:bb:2c:76:e4:74:71:f4:fe:c8:
34:93:4b:f9:08:56:ea:49:e2:bf:47:a3:62:82:c4:
c6:61:c0:ed:5e:da:6a:97:6d:b6:e1:fb:cc:b4:c3:
b2:5c:9d:ec:3f:12:d3:6e:f1:6a:17:e8:98:86:93:
2c:5a:97:f4:fb:08:90:4c:74:b2:63:00:94:22:08:
00:7f:36:0e:c0:db:95:e7:88:26:37:3b:e3:c9:d7:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:93:1A:67:90:7F:5F:2A:DB:95:D6:B0:AA:8C:C2:E3:01:34:63
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:d9:c1:d1:ee:60:a5:68:e8:34:aa:88:17:a3:ff:e4:19:
55:25:f0:25:6d:c7:62:8f:61:45:be:77:0c:55:ae:28:6c:96:
06:2e:98:59:51:c2:49:5c:30:43:86:dd:29:83:42:b3:7b:b1:
42:a2:65:de:fa:0a:10:90:47:5c:fd:12:cf:c0:2c:98:c8:f9:
04:4f:3c:09:b4:fd:7b:43:cd:ad:d7:e1:3b:1a:cd:e7:0c:25:
1a:4a:58:03:0a:75:f8:22:fd:c5:ba:51:50:02:5f:f5:39:4c:
62:04:c1:f1:a0:47:3d:b0:0e:c5:65:b8:59:7b:42:f2:61:4b:
80:44:90:38:81:18:f5:a3:79:72:28:56:6f:79:d1:bf:88:ea:
c4:af:d8:ca:75:9e:42:e2:3c:ab:8a:b7:3b:55:a9:9c:ca:99:
45:62:fe:40:f3:ec:18:a9:b2:94:02:2d:ef:16:d2:79:b2:50:
2f:50:09:cd:e0:dc:6c:cb:1b:73:66:39:0a:1b:e1:dc:f5:d2:
65:c9:49:78:f9:4a:84:09:55:20:c1:24:fa:81:be:2f:b5:d4:
b5:0f:fb:31:d5:42:8b:44:a1:91:aa:27:1d:3f:ec:9d:fc:b5:
d2:60:f8:a7:0d:e6:8a:57:12:5d:94:10:ee:82:21:db:74:93:
35:a2:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:08 2025 by rpki-client