Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: HDv6LUeLjOkZjJZOhbG2hLaGqPyozYBka2NIssn2+D4=
Subject key identifier: 94:21:DA:CC:8F:2E:CE:AA:71:F1:A2:B3:07:A6:02:DF:F7:55:5B:1E
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019A13845C12CD1A0F50A627973462CCD6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0DE4
Signing time: Fri 24 Oct 2025 00:00:32 +0000
Manifest this update: Fri 24 Oct 2025 00:00:32 +0000
Manifest next update: Sat 25 Oct 2025 00:00:32 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: 3WqF/+swfcm+WW4M79D0/Kmr5zsoOmwSIjr+067KjKc=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:5c:12:cd:1a:0f:50:a6:27:97:34:62:cc:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Oct 24 00:00:32 2025 GMT
Not After : Oct 25 00:00:32 2025 GMT
Subject: CN=9421dacc8f2eceaa71f1a2b307a602dff7555b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:e7:f7:00:a2:3c:f7:b2:cc:15:e1:f7:9d:
40:6f:d5:d1:69:20:3a:9a:54:61:ab:7f:d5:5b:0b:
bc:14:b7:8c:62:f4:16:5d:02:3c:0d:26:4a:cf:96:
d2:81:11:da:08:20:11:64:ff:c3:58:bf:3d:e0:85:
d5:3b:62:c2:c6:11:c8:ca:3c:da:ee:0d:8c:4b:f2:
0a:80:81:29:8d:04:bd:34:8f:0a:51:a2:c9:15:cc:
3b:05:6b:56:e7:50:f8:14:33:06:d1:a5:f4:bf:a9:
27:da:6a:eb:56:39:32:89:e8:30:ae:33:f6:41:c2:
18:c6:10:88:a7:83:e3:ed:0e:3c:a8:d8:39:31:9e:
59:08:9d:80:dc:e4:7f:ab:80:de:93:36:e7:fc:6c:
c8:28:48:d8:72:aa:1d:8f:27:78:55:82:09:d6:d5:
2e:c7:a1:69:7c:78:8c:b4:41:7a:3d:36:a3:29:38:
ed:5f:51:bf:71:0e:ce:61:63:6e:66:79:cd:ec:a1:
17:18:72:f4:0a:e1:a8:7b:22:19:6e:50:da:b5:92:
cb:24:01:c2:f0:da:9a:17:55:57:78:7e:90:51:4d:
6d:87:3d:73:1c:b6:06:7c:2f:22:bb:e1:3d:41:16:
ea:00:13:92:42:d8:60:25:c8:d5:a0:e9:77:e5:cb:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:DA:CC:8F:2E:CE:AA:71:F1:A2:B3:07:A6:02:DF:F7:55:5B:1E
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5d:f0:bb:81:22:be:df:70:7c:ab:a5:d4:8e:f8:8f:a2:e1:
60:35:6e:25:e8:d8:18:db:08:d1:fb:46:64:ed:46:e3:22:e6:
93:6e:68:08:6f:ab:e3:b6:14:1f:34:b4:70:a2:ff:e2:46:c1:
4f:db:ed:8a:14:da:f8:4f:e5:13:a4:e4:d7:41:9a:3a:b1:01:
8d:ce:64:4c:c7:c4:16:d6:2d:82:cc:e6:9c:65:9f:39:01:1c:
f7:fa:1e:67:41:25:1d:bb:08:9c:0c:eb:22:d0:3d:ec:77:af:
7a:af:06:cd:e8:9d:3b:38:1f:8c:ef:3b:9c:ce:92:a9:83:43:
23:e0:d9:04:df:88:47:9b:13:f6:b2:cd:fd:69:58:f8:52:02:
93:4a:89:a1:95:8c:7e:ac:e4:c4:f5:20:1c:97:86:18:0b:16:
42:47:99:20:04:8c:0b:2e:e8:33:47:e7:be:73:54:a4:a4:16:
e8:2a:ef:96:96:06:00:ef:e3:e6:30:82:64:8d:83:79:41:eb:
cb:9b:3a:8f:26:67:7a:04:de:31:0d:f4:cb:e8:b9:ab:9c:2d:
3c:71:73:2d:b1:f1:ab:c6:10:07:5b:65:25:64:0b:7a:74:dc:
54:8f:74:00:64:7a:7c:66:31:2f:6c:40:93:3e:28:55:6b:10:
96:78:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:22:13 2025 by rpki-client