Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: aQC4CEXTsRE+xElSjRp/8bR6UYiKO/uyG9guApP1flk=
Subject key identifier: 38:FA:DF:34:03:5F:D2:D2:6B:5E:F9:72:E1:7A:52:7E:78:2D:4D:E2
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 0198D4DFD97EE47892104AACF1D9FE5234A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 040B
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: /ngkgsMQ8Wst3MwYJGbYUK575l9CxhH8h7AGfRbm1RI=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d9:7e:e4:78:92:10:4a:ac:f1:d9:fe:52:34:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=38fadf34035fd2d26b5ef972e17a527e782d4de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:41:ca:7a:d5:f7:09:d0:11:e4:4e:80:90:
c6:31:05:7e:a8:07:63:38:63:71:79:e4:ff:3a:10:
e6:c8:a9:2b:20:62:14:4b:d4:90:f4:be:ce:b8:a9:
fa:83:a7:4f:2d:66:0c:c8:23:b9:07:ff:80:cc:ea:
b9:97:96:47:39:ca:88:e3:49:b1:9f:4d:4a:8e:85:
3b:f1:85:42:06:b7:5a:60:15:46:81:28:4f:8d:c1:
15:07:09:01:4e:d5:dc:bf:76:2f:b0:b8:36:c6:4c:
c3:d9:76:9b:ee:ba:cc:9a:a9:21:24:f0:80:77:a0:
00:6e:f6:52:69:6c:a1:ef:62:51:86:9c:fe:7c:41:
c1:75:19:68:b6:1a:d2:29:69:6b:00:4d:14:db:ef:
ea:17:02:43:3b:5a:7c:1a:69:41:0b:5b:29:df:c5:
ea:91:82:11:d3:87:e2:a2:7d:fe:03:73:9a:0d:a0:
24:b7:89:f4:7a:15:e4:38:96:3d:eb:48:ea:6d:92:
01:35:39:75:16:37:0e:6c:0e:4f:a5:f6:d5:f1:8d:
b5:1f:24:ce:8f:66:6d:d4:73:2a:98:2a:84:3e:82:
7a:b5:69:5e:d6:d2:cd:a2:b2:0e:9d:7f:88:e4:88:
11:30:2d:fd:ec:90:49:88:7d:8b:c2:73:54:d7:78:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:DF:34:03:5F:D2:D2:6B:5E:F9:72:E1:7A:52:7E:78:2D:4D:E2
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6b:67:27:ed:a0:ab:30:61:3e:0b:0d:15:ad:9d:7a:c2:9d:
44:77:2b:57:aa:1c:68:31:46:3a:ce:8c:30:72:4d:e0:d8:18:
d1:07:6f:cc:18:33:c4:73:6e:1e:97:27:f1:f9:7a:48:13:2e:
e9:89:b6:15:79:f8:a0:a7:df:85:9f:e6:d2:f4:25:6b:92:58:
cd:82:99:93:03:af:78:c0:e3:b3:b6:95:8e:26:e4:94:37:5c:
3f:a0:5a:fb:68:51:e3:e7:4a:84:44:70:3e:da:cb:67:41:2e:
42:f1:8e:7e:14:5f:51:b7:c4:7b:6c:97:5a:cb:2c:22:4f:f9:
92:c5:68:e3:14:45:cb:05:61:f6:b1:a8:49:ee:36:b1:58:d6:
75:73:2b:23:bf:5d:9b:da:71:04:3b:5b:5c:bf:70:92:69:54:
ec:72:12:01:e5:94:78:82:c9:51:92:c2:8b:02:12:90:32:da:
bf:a3:ff:4a:82:40:be:ab:93:39:17:32:3d:f0:37:da:f7:38:
aa:57:53:ca:bc:b5:d4:58:4f:4b:d0:8b:83:13:27:ba:4b:97:
a4:1e:93:c0:a7:f7:c8:a5:99:a9:e2:2d:3a:6c:27:1e:4c:25:
be:76:38:58:02:52:13:84:4d:53:37:88:ee:e3:ca:5a:a3:ca:
02:5e:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:15 2025 by rpki-client