Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: q3dOMIPSWWSW1T6fuPhWrju6L7MZCnRCrcxpe9v8t9E=
Subject key identifier: DD:9C:4D:33:EE:86:FF:98:0E:76:2B:92:A8:7D:F0:45:65:DB:12:A4
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 0197B70EFF20C7FA96E25891F87B4CE8F965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 0377
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: B5Q2VR1tEh5y/fokve2LR5fjS5LgPAgXX7ncvYaykL4=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ff:20:c7:fa:96:e2:58:91:f8:7b:4c:e8:f9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=dd9c4d33ee86ff980e762b92a87df04565db12a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:c8:32:20:73:e1:8a:cd:20:05:1c:48:ac:
c1:eb:c0:cc:c9:63:02:82:3a:ea:fe:12:75:57:57:
d9:62:7c:78:e7:ff:89:7b:ac:a9:a6:1b:37:0d:ff:
9b:44:41:d0:1e:a3:a9:cb:08:10:ce:2a:23:bb:42:
85:29:b9:e5:92:3c:1d:60:1d:54:5c:8b:2c:59:35:
6e:8f:59:f9:7b:a6:6b:da:34:06:73:9f:a5:9e:6b:
75:b1:cf:59:9c:7e:60:97:7f:2a:10:1a:29:ed:2a:
c2:d5:aa:6d:e9:50:cf:45:18:8a:29:6a:95:1f:1d:
8f:4d:f6:92:21:e8:1a:af:0c:a9:a2:dd:d8:33:52:
39:2b:dd:0f:af:d2:ad:f4:90:f7:b4:4f:e8:68:02:
87:63:d9:dd:3d:de:ba:95:26:eb:55:ab:f2:1d:0e:
cc:62:73:82:ad:2b:b4:73:95:30:ec:90:41:9d:bc:
d4:57:ec:ff:56:4d:c3:a4:ef:62:bb:2a:34:14:d2:
db:b5:da:72:4c:9a:bd:5c:77:5d:67:e9:38:a9:d0:
1e:90:8c:4b:d3:d7:fa:d5:fa:96:01:ac:b3:9c:ca:
63:21:b4:03:4f:3f:45:90:5d:ee:34:db:cb:2a:af:
1d:03:29:a5:e8:6d:61:ae:91:fe:33:9d:61:7c:00:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:4D:33:EE:86:FF:98:0E:76:2B:92:A8:7D:F0:45:65:DB:12:A4
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:6c:17:4a:dd:75:b8:d0:47:81:4a:64:cb:50:5d:d4:7c:
3a:a2:94:d9:96:dd:14:f0:15:b5:b5:6a:2d:3f:18:55:9d:29:
e2:16:90:f1:5d:0f:2f:e1:18:9f:02:d2:a1:bf:a5:f0:8f:ec:
72:02:2e:99:50:90:64:67:0a:8a:60:9d:30:d4:82:ab:51:aa:
a7:df:a1:60:8e:06:bd:8b:f6:ad:3f:13:e9:91:d8:c7:16:9e:
5f:47:3c:16:22:e1:f5:0c:43:bd:0c:b3:70:d7:12:1a:27:55:
39:90:46:50:68:b1:ac:6c:ca:a9:23:8e:d3:a6:27:63:6f:5c:
4f:41:7e:ed:fc:b8:cb:50:67:18:31:ae:88:5e:18:88:66:ae:
43:c1:fe:27:cb:5d:82:c0:3e:22:37:4b:f6:e5:d2:98:17:f7:
6b:56:3c:fe:f6:3f:de:e8:fb:64:4f:ce:45:0e:aa:45:ae:49:
ba:14:10:dd:3a:14:e0:7e:95:2d:e4:66:25:80:a4:f2:b4:9b:
4d:ca:f1:df:27:75:35:bc:32:0b:92:50:a6:e1:45:5a:3b:15:
6b:7c:4e:2f:18:40:c7:e1:5b:24:1a:b5:e8:cf:a0:96:57:2a:
6d:08:20:b3:54:56:76:47:b3:a6:d6:a0:72:38:0d:ea:91:bb:
0a:f2:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:04 2025 by rpki-client