Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: MT/8lg2Noana8RV2iKbUO/wFerxL5sd8omZPSgSi9oU=
Subject key identifier: 1C:D0:ED:0D:8A:23:DA:1D:55:9D:74:48:7C:7C:2C:50:45:5F:BB:27
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 019A706E7500BC614EC14F169BCA8D3CFD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:01:18 +0000
Manifest this update: Tue 11 Nov 2025 01:01:18 +0000
Manifest next update: Wed 12 Nov 2025 01:01:18 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: j1dLWgM1Hnknc+CWvtLHXiZNkUpUaiPk/CHPL9D+pn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:75:00:bc:61:4e:c1:4f:16:9b:ca:8d:3c:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Nov 11 01:01:18 2025 GMT
Not After : Nov 12 01:01:18 2025 GMT
Subject: CN=1cd0ed0d8a23da1d559d74487c7c2c50455fbb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:1d:45:28:8e:a9:7f:0f:54:24:b4:c4:2c:
55:43:a3:9b:69:2a:b0:e3:89:00:c7:6f:5c:1e:88:
74:fd:ff:c1:dd:53:38:52:c8:38:23:c2:3e:7f:ca:
c6:c0:67:25:5a:0a:e8:58:fe:11:13:19:b4:8d:09:
fe:f1:76:c7:55:16:52:14:70:b1:e3:4d:b2:58:ee:
a9:d1:94:0f:59:42:fb:01:77:7f:11:24:c6:49:1b:
26:fb:27:cc:a6:1c:2a:51:bc:5b:9b:42:45:d1:12:
63:0c:e7:54:36:17:fa:06:e2:bb:d1:bb:b7:e6:3a:
44:df:ff:a7:79:71:82:d3:15:2b:d4:79:61:28:df:
01:f0:fb:c9:6e:92:ba:00:4a:42:a4:01:98:e8:7b:
47:36:ce:99:54:c5:57:1c:35:76:08:31:51:24:3c:
54:84:d7:13:87:e7:b1:09:12:17:30:60:a1:59:93:
90:e6:2c:85:dd:35:e9:ba:cd:5f:5b:79:25:1f:94:
dd:3a:23:5e:9e:bd:5b:ed:d0:ae:41:98:f2:3e:1a:
85:be:6b:7b:4f:55:8b:c2:29:d1:e1:82:b4:07:2e:
71:97:37:7a:19:08:62:9a:cb:b5:a4:77:84:fe:6e:
cb:06:6f:7c:12:db:0a:62:9d:c1:04:33:47:85:1d:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:ED:0D:8A:23:DA:1D:55:9D:74:48:7C:7C:2C:50:45:5F:BB:27
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:d5:6e:54:49:3e:c7:cd:f6:e7:21:da:f0:0e:29:fa:c6:
1c:ec:02:12:fa:27:8c:63:36:55:95:98:59:68:87:6c:22:36:
6f:8c:a4:88:b8:cf:d5:17:39:13:38:32:5d:5f:8c:f9:d4:e8:
3a:d3:55:79:24:26:13:86:48:d9:24:78:6f:af:4b:66:49:e5:
2b:f9:f3:5b:fb:d0:a2:bd:da:a8:19:d5:bf:94:6a:8b:fd:53:
5c:74:69:c2:4f:8d:01:2d:27:20:ea:7b:dd:ad:1d:dc:8f:f3:
bd:ee:87:dc:b0:e0:b8:3c:a1:47:61:99:bd:11:db:d4:f6:01:
4e:24:46:9f:77:d3:6f:64:7f:01:38:d1:5b:fe:da:4d:d8:7a:
2b:56:f2:9c:5f:10:1d:64:bf:3a:3f:b7:6b:db:10:8a:a6:63:
64:e6:d5:67:75:0f:11:e9:64:0f:3d:ec:9e:4c:fa:a7:c5:27:
40:76:a8:bb:6a:50:b8:fb:68:de:37:87:5d:ef:32:e5:f2:72:
36:11:91:17:b2:b0:e0:19:e3:6c:0e:82:fe:c0:6c:a9:00:bb:
f8:3b:8a:01:66:97:1d:57:d1:99:33:92:50:fb:fe:07:47:d8:
13:f2:6e:e6:a2:e0:af:12:c4:57:60:a1:ed:55:f5:16:91:87:
75:e7:1a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbnUAvGFOwU8Wm8qNPP1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDM0NDcyMjY0NWRhMjVlY2UzYjE3YzdhODM3NjJlZDQy
ZGRhNTIwHhcNMjUxMTExMDEwMTE4WhcNMjUxMTEyMDEwMTE4WjAzMTEwLwYDVQQD
EygxY2QwZWQwZDhhMjNkYTFkNTU5ZDc0NDg3YzdjMmM1MDQ1NWZiYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkEdRSiOqX8PVCS0xCxVQ6ObaSqw
44kAx29cHoh0/f/B3VM4Usg4I8I+f8rGwGclWgroWP4RExm0jQn+8XbHVRZSFHCx
402yWO6p0ZQPWUL7AXd/ESTGSRsm+yfMphwqUbxbm0JF0RJjDOdUNhf6BuK70bu3
5jpE3/+neXGC0xUr1HlhKN8B8PvJbpK6AEpCpAGY6HtHNs6ZVMVXHDV2CDFRJDxU
hNcTh+exCRIXMGChWZOQ5iyF3TXpus1fW3klH5TdOiNenr1b7dCuQZjyPhqFvmt7
T1WLwinR4YK0By5xlzd6GQhimsu1pHeE/m7LBm98EtsKYp3BBDNHhR3u4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzQ7Q2KI9odVZ10SHx8LFBFX7snMB8GA1UdIwQY
MBaAFCxDRHImRdol7OOxfHqDdi7ULdpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUt
ODY2ZjFkMjMyN2FhLzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUtODY2ZjFkMjMyN2Fh
LzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigbVblRJ
PsfN9uch2vAOKfrGHOwCEvonjGM2VZWYWWiHbCI2b4ykiLjP1Rc5EzgyXV+M+dTo
OtNVeSQmE4ZI2SR4b69LZknlK/nzW/vQor3aqBnVv5Rqi/1TXHRpwk+NAS0nIOp7
3a0d3I/zve6H3LDguDyhR2GZvRHb1PYBTiRGn3fTb2R/ATjRW/7aTdh6K1bynF8Q
HWS/Oj+3a9sQiqZjZObVZ3UPEelkDz3snkz6p8UnQHaou2pQuPto3jeHXe8y5fJy
NhGRF7Kw4BnjbA6C/sBsqQC7+DuKAWaXHVfRmTOSUPv+B0fYE/Ju5qLgrxLEV2Ch
7VX1FpGHdecaZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client