Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: XVw+D+Yu28tjVwxOrFIIJAEFTNwzwPo7McrRPqr0898=
Subject key identifier: 09:B3:33:F1:59:2D:CE:5A:C5:B7:1F:91:D4:B3:35:9F:74:54:F5:6B
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 0199FC8F8C90C4F42A0FC094FDCCAC7C5A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 11B6
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 254SVXcMYSACePMijeUAFRBEzOmAIxA9ptpFPAJZPxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8c:90:c4:f4:2a:0f:c0:94:fd:cc:ac:7c:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=09b333f1592dce5ac5b71f91d4b3359f7454f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:7e:d9:99:b6:f0:17:8b:21:c7:3b:68:7b:
b7:57:98:79:31:ca:7d:99:f1:43:36:00:0e:b7:60:
93:7b:e4:37:61:f1:66:15:fc:72:99:61:d1:d1:89:
67:68:10:b6:dc:9e:8a:3c:a2:d2:7d:49:f2:25:f6:
02:3d:4a:fa:00:38:ef:65:e9:ff:b4:e3:94:cb:70:
73:d3:7b:6e:d0:47:74:a7:8f:a0:75:a1:d1:b2:9c:
92:7b:81:c3:b4:0a:d4:9b:55:d0:7a:02:19:cc:f1:
22:5c:61:d2:0d:22:c5:c9:6c:71:29:f7:62:a9:74:
a0:1b:41:f9:62:8a:4a:b4:06:16:6f:df:83:85:78:
2d:38:b4:dd:b9:2e:9f:bc:9e:33:9d:c7:ac:49:76:
c8:c3:20:07:69:ff:6a:56:59:7c:20:23:71:80:dd:
95:95:3c:5e:01:3b:17:bb:c9:ad:f5:8c:c6:9b:6e:
bf:98:63:ae:54:b2:47:3d:46:c0:20:21:54:f7:19:
d5:65:80:50:eb:57:f4:56:bb:81:06:3b:a9:5e:fc:
90:c3:52:c3:d4:36:b9:d8:28:a0:8a:b6:85:9c:80:
e5:d5:90:aa:12:13:bd:27:60:8c:cd:64:b2:d2:a3:
6a:95:72:d0:25:05:b1:be:bc:53:08:e8:26:b2:48:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:33:F1:59:2D:CE:5A:C5:B7:1F:91:D4:B3:35:9F:74:54:F5:6B
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:90:5e:86:e1:59:eb:a6:65:e7:6a:a1:80:0d:95:0c:2a:35:
10:5e:73:ab:af:a3:f3:67:e9:4b:b6:21:6b:9b:96:37:3c:d6:
c5:0e:25:f6:f7:46:c2:e4:8b:cf:ed:28:0c:08:ba:86:80:a4:
2f:51:c6:55:9c:ba:b9:9a:53:65:cf:ce:ad:96:86:3b:35:cd:
a7:08:57:81:88:d1:98:94:6b:16:69:70:f7:51:3c:47:01:d6:
05:0d:00:da:43:53:17:89:89:3e:a5:f1:e1:35:97:b7:54:87:
59:45:98:77:2d:96:20:93:20:b6:03:23:74:7a:54:54:62:b4:
0b:a5:d7:0f:b7:85:71:ba:41:47:d3:24:4a:d2:88:b1:42:69:
7a:15:a7:db:26:8b:1c:5b:18:2e:96:0d:bc:f5:e0:27:f2:75:
10:02:98:c2:3e:77:f0:1f:e7:22:77:29:77:9e:de:45:a7:61:
23:7e:ae:86:07:1c:a4:f6:bf:82:c1:18:59:6e:78:0d:ee:a0:
93:1c:2e:11:20:c7:ae:ec:bf:65:81:8b:7f:17:9c:2f:eb:54:
60:99:b2:2e:28:b3:ae:d6:09:ff:5a:ab:ba:0c:7a:8d:de:74:
9b:80:33:ed:85:6f:94:2f:f8:4f:b1:f6:72:87:86:6d:36:67:
83:56:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:02 2025 by rpki-client