
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: S2JPSZ349egMkzXZRY+ajfZkMAEPJxOsOP/rDfbXegs=
Subject key identifier: 33:9C:F0:24:4F:61:68:0B:3F:4E:51:A4:C5:3E:85:C5:C7:60:11:1E
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 01964E2308B7CC0F246CE9129EFE8E105173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 13:00:40 +0000
Manifest this update: Sat 19 Apr 2025 13:00:40 +0000
Manifest next update: Sun 20 Apr 2025 13:00:40 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: SHELItyHFbmPUXC7OlSPlhWULKuNIHiGy8mxu6fJ9QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:08:b7:cc:0f:24:6c:e9:12:9e:fe:8e:10:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Apr 19 13:00:40 2025 GMT
Not After : Apr 20 13:00:40 2025 GMT
Subject: CN=339cf0244f61680b3f4e51a4c53e85c5c760111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:33:63:af:e8:5a:26:fc:6e:23:8a:85:01:
3c:b1:85:19:5a:ef:72:8d:66:42:64:10:8a:a7:45:
57:79:c5:8d:0c:23:d1:f2:d9:5d:db:40:cc:1c:08:
9c:e5:50:8c:b1:e2:e6:af:d5:89:f9:6b:d3:22:f5:
ae:47:fa:ee:b2:82:1e:71:a1:9d:3d:d5:a7:49:b3:
46:1b:9a:a0:fe:1d:41:16:33:18:ed:0c:8c:91:ae:
74:72:30:9d:97:e6:4e:99:8b:38:59:8d:94:71:46:
dc:e4:6c:ba:26:19:58:1f:2f:ca:47:66:e4:33:cc:
bc:54:62:06:01:69:f0:0a:64:03:7c:99:2a:57:67:
f5:bc:c5:94:95:86:80:ff:57:9b:81:7e:35:f2:02:
7e:36:ff:77:44:54:c1:53:10:c9:ab:78:40:b7:7a:
6c:de:15:c1:ea:2e:f3:db:2c:88:c5:18:c6:5a:93:
3c:e5:c2:ec:7a:43:59:74:9f:fb:e8:68:87:8a:d0:
5b:43:95:4d:a5:7f:85:da:ed:ce:cf:4a:14:c8:da:
50:16:4d:f8:80:ea:64:c8:fc:37:17:9c:78:a3:49:
9d:cf:e7:62:47:52:2c:f5:9f:8d:88:1d:bd:d9:82:
78:63:b6:f0:e6:f4:cd:0a:3f:3a:e2:6e:78:8e:54:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:F0:24:4F:61:68:0B:3F:4E:51:A4:C5:3E:85:C5:C7:60:11:1E
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:16:f8:bd:55:5f:d6:28:8a:d7:05:18:70:a4:c5:67:06:80:
3d:81:f8:fe:c9:35:db:2d:e6:b2:7c:41:8f:6b:63:9a:fd:0a:
70:c9:fa:f0:a1:d6:ee:b5:f9:c9:4f:90:ba:44:cb:77:e3:5c:
a0:ea:e7:cb:b1:6e:b2:3d:1f:5d:5e:c2:d5:4b:79:ae:45:25:
b9:bb:ce:8e:5d:3e:8b:3d:92:7a:bd:41:3f:ad:d1:0c:5f:2a:
42:8f:d2:d2:49:5a:c3:76:a1:0a:19:4a:c5:76:8b:81:de:b1:
f4:0d:7e:41:f1:b2:66:81:77:0e:b5:4f:b8:4a:a8:49:06:aa:
9b:34:9a:cb:c7:2e:7b:a6:16:bd:38:de:92:56:4d:c6:5b:59:
41:6b:7c:20:e3:2a:4f:c6:67:64:01:bc:4e:33:dd:cd:64:d2:
82:26:d4:fd:d8:cf:c1:b1:a1:31:87:d3:3f:d2:21:a4:8f:40:
22:c1:fa:8b:f9:d0:f8:5a:e6:c2:72:48:84:54:86:58:0d:5f:
b8:88:8f:f4:9c:7c:3c:30:b1:6c:e4:82:95:19:a9:3b:49:7f:
ab:57:7f:a5:4f:49:8f:f2:81:bd:f5:98:f2:1f:76:58:7e:16:
ed:70:be:2d:33:51:dd:15:d2:e9:11:fd:f6:a1:73:82:ee:42:
db:1d:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:48:40 2025 by rpki-client