Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: h2gUYQ7NpbyacOdvZw7cFlVW0WtaHK2nOAnIBcD9HcY=
Subject key identifier: 64:E8:6C:E2:84:0F:67:A8:36:11:9C:40:FF:40:03:70:72:F2:1E:85
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 01984BC1814AABFD2EDAEDCB7413F638E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0CF8
Signing time: Sun 27 Jul 2025 12:00:29 +0000
Manifest this update: Sun 27 Jul 2025 12:00:29 +0000
Manifest next update: Mon 28 Jul 2025 12:00:29 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: tTpjzHnY6GDZFhBPVxcnE0nNaKV5Nc2gLtAj/SvjgBE=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:81:4a:ab:fd:2e:da:ed:cb:74:13:f6:38:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Jul 27 12:00:29 2025 GMT
Not After : Jul 28 12:00:29 2025 GMT
Subject: CN=64e86ce2840f67a836119c40ff40037072f21e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:7b:a0:3c:0f:78:76:d8:11:e2:8a:e4:3e:
9e:1e:86:17:77:51:c0:f8:dd:5c:b7:90:1b:f3:2b:
d4:45:21:32:71:0e:a6:ea:df:b2:60:04:2e:19:0c:
02:50:73:83:13:35:f0:c0:15:60:6a:f3:13:7c:40:
b5:84:64:bb:1c:8c:72:41:f8:4d:56:49:f9:90:fd:
b5:05:07:16:77:4a:3b:02:75:26:ad:92:06:14:82:
81:93:36:d4:2f:84:9e:52:2f:90:41:93:07:0d:3e:
8d:4e:cb:ff:3d:79:b6:37:38:a6:f6:1d:c0:d8:32:
4f:1e:d7:03:ac:93:85:26:90:31:b9:05:65:a7:96:
aa:d3:f9:98:8a:10:82:a6:d4:2d:15:98:5c:1e:47:
ae:7f:36:31:5d:fb:e9:37:48:97:c3:64:6d:38:43:
dc:13:e0:29:c9:af:a3:59:43:71:7c:3c:82:45:eb:
35:a1:8d:77:03:6c:5c:ff:a0:6e:a4:ef:37:2b:26:
24:47:93:c5:ca:67:7b:42:01:f8:23:2c:3e:2a:0e:
85:3c:0d:ca:73:fd:c9:6c:48:e9:04:03:88:34:f1:
ea:5a:87:3d:bb:ef:66:0e:ab:79:70:a0:bd:c1:9b:
16:c7:ee:85:a9:cd:f1:ea:9a:0f:de:7b:09:c4:0c:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:6C:E2:84:0F:67:A8:36:11:9C:40:FF:40:03:70:72:F2:1E:85
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:71:cf:55:13:e5:ee:fe:9a:48:60:7a:ef:9a:52:bf:04:48:
a0:20:9f:e1:49:a8:e0:c2:2f:cb:ec:73:77:4b:5b:ad:08:bd:
16:8d:a7:da:57:68:ca:45:c0:20:0b:00:7d:e9:b0:06:af:f8:
d3:41:ae:6f:34:31:35:11:be:4b:98:87:0b:5c:a0:1e:ef:e6:
c5:5c:8e:10:58:fb:50:be:86:cc:49:f2:fb:06:a4:57:bf:2e:
1b:e2:bf:b3:18:77:61:97:3f:ae:c4:ed:2f:f4:b2:22:37:12:
17:3b:c0:8f:6a:6a:f3:97:03:5b:c0:f0:b3:f0:2c:f3:a6:d7:
04:7c:4a:f5:f3:02:15:c6:7f:2d:d3:7a:e9:c9:eb:9c:98:50:
57:85:d0:39:a3:35:1e:f6:0b:1d:dc:41:db:ba:2b:5a:6e:f0:
0b:af:be:b7:e3:fd:eb:9b:92:2d:38:1a:d3:8c:78:fb:3d:ee:
f1:3d:56:58:bf:6f:25:80:a6:c5:15:a5:42:2b:73:f6:61:90:
55:eb:41:54:a9:f0:99:aa:1d:4a:44:91:9c:93:b1:56:8e:59:
a2:4a:ff:45:04:29:17:20:ad:a0:55:40:d1:27:88:01:ab:01:
b5:c1:c7:9c:48:5e:ea:ed:10:e4:95:ce:7a:2d:03:f0:6a:ef:
9d:f6:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:08:34 2025 by rpki-client