Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: T7fj8TjotK2T/vnf3ma5497WWPC/cwmifznJ/q01CV4=
Subject key identifier: BC:46:6F:D7:9D:16:63:48:E0:FF:3E:E2:59:2E:F5:7E:02:3A:85:C0
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 01987E2E8725D230BC9D4BBF7D3B7FE5B925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 07:00:35 +0000
Manifest this update: Wed 06 Aug 2025 07:00:35 +0000
Manifest next update: Thu 07 Aug 2025 07:00:35 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: sTPE6u4fBZhAoAB4ByEgXRy8AGOCmrRpRpTmTf4FG1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:87:25:d2:30:bc:9d:4b:bf:7d:3b:7f:e5:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Aug 6 07:00:35 2025 GMT
Not After : Aug 7 07:00:35 2025 GMT
Subject: CN=bc466fd79d166348e0ff3ee2592ef57e023a85c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:2c:7b:5b:79:10:30:63:ba:db:92:43:86:
1e:9d:3d:11:83:0a:f9:b4:42:23:0c:de:e6:87:ce:
7d:c1:9b:3f:41:c4:29:b7:f5:50:5e:42:7d:66:bc:
8a:06:5f:e4:4b:13:41:9a:0f:b2:85:76:17:9a:aa:
92:9b:92:93:6c:54:fe:01:54:c0:98:07:92:44:4e:
71:e3:14:e6:e7:2e:23:8d:b4:ab:c0:50:de:93:62:
48:7f:8c:3b:82:a2:35:08:37:3f:59:f9:f6:b0:07:
b1:27:2e:ba:f8:80:69:df:64:ae:44:b6:69:8d:32:
41:d8:98:8c:65:6b:27:94:1f:fa:65:98:5c:04:f7:
3b:65:5e:d5:c6:6f:19:a0:9b:3d:76:12:81:70:fe:
45:52:3e:5c:3d:8a:19:e3:c2:32:21:9f:f2:35:12:
44:da:51:a5:ac:4d:63:53:ec:90:cd:54:9c:f1:ba:
8e:58:eb:d7:b5:ca:74:ba:83:81:e2:81:19:98:89:
39:f8:6a:e4:8e:88:a5:44:cb:39:5f:59:d9:5a:1f:
f6:49:e4:c9:c6:77:3a:95:d5:c1:36:6b:5d:00:be:
f7:28:2d:66:4b:00:31:4f:b6:63:9f:bc:aa:17:9e:
2f:3f:59:aa:df:82:b6:c8:30:39:12:96:ab:0c:0e:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:6F:D7:9D:16:63:48:E0:FF:3E:E2:59:2E:F5:7E:02:3A:85:C0
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:63:58:6c:1c:ff:ea:54:c5:30:49:f5:7b:ac:8b:33:48:76:
ea:a9:62:55:ad:e5:b1:1e:fc:fd:35:7a:54:58:5f:f3:87:f6:
5c:71:37:43:a2:7e:fd:3d:3d:9b:f2:73:c4:e0:4e:30:52:94:
46:12:a3:5b:ce:7d:2d:70:1d:f2:17:75:a7:cf:56:13:34:13:
a5:31:95:c4:b1:4a:1d:fa:00:65:52:e6:86:32:5f:78:cf:73:
25:b7:5f:c0:11:f2:fd:e7:41:d2:16:5b:88:54:5c:8c:26:d2:
11:fe:31:52:d2:86:7e:20:2e:8b:ba:d0:0a:54:20:3d:2a:93:
45:80:da:97:6c:e1:e9:71:95:7f:e0:4a:28:c2:14:a3:84:a7:
2c:67:99:d5:a6:60:8c:f3:0f:99:82:2f:0f:29:49:52:84:fa:
d8:6b:99:ee:95:97:c8:d0:d9:53:f6:53:c1:53:4d:15:b7:cb:
ef:ce:c3:e2:fc:97:b9:ed:18:de:98:5d:9b:5b:61:51:cc:bc:
29:c3:17:3b:de:06:fc:d5:ec:f1:e5:da:e6:ee:9f:70:2e:42:
12:2d:3a:04:c1:b3:e8:ff:d0:79:b5:70:d9:65:02:a1:40:4f:
24:54:fd:55:e3:2c:d0:0d:05:74:2d:55:51:12:7d:ca:6a:72:
98:65:58:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Locl0jC8nUu/fTt/5bklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDM0NDcyMjY0NWRhMjVlY2UzYjE3YzdhODM3NjJlZDQy
ZGRhNTIwHhcNMjUwODA2MDcwMDM1WhcNMjUwODA3MDcwMDM1WjAzMTEwLwYDVQQD
EyhiYzQ2NmZkNzlkMTY2MzQ4ZTBmZjNlZTI1OTJlZjU3ZTAyM2E4NWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Ese1t5EDBjutuSQ4YenT0Rgwr5
tEIjDN7mh859wZs/QcQpt/VQXkJ9ZryKBl/kSxNBmg+yhXYXmqqSm5KTbFT+AVTA
mAeSRE5x4xTm5y4jjbSrwFDek2JIf4w7gqI1CDc/Wfn2sAexJy66+IBp32SuRLZp
jTJB2JiMZWsnlB/6ZZhcBPc7ZV7Vxm8ZoJs9dhKBcP5FUj5cPYoZ48IyIZ/yNRJE
2lGlrE1jU+yQzVSc8bqOWOvXtcp0uoOB4oEZmIk5+GrkjoilRMs5X1nZWh/2SeTJ
xnc6ldXBNmtdAL73KC1mSwAxT7Zjn7yqF54vP1mq34K2yDA5EparDA6kzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxGb9edFmNI4P8+4lku9X4COoXAMB8GA1UdIwQY
MBaAFCxDRHImRdol7OOxfHqDdi7ULdpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUt
ODY2ZjFkMjMyN2FhLzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUtODY2ZjFkMjMyN2Fh
LzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGNYbBz/
6lTFMEn1e6yLM0h26qliVa3lsR78/TV6VFhf84f2XHE3Q6J+/T09m/JzxOBOMFKU
RhKjW859LXAd8hd1p89WEzQTpTGVxLFKHfoAZVLmhjJfeM9zJbdfwBHy/edB0hZb
iFRcjCbSEf4xUtKGfiAui7rQClQgPSqTRYDal2zh6XGVf+BKKMIUo4SnLGeZ1aZg
jPMPmYIvDylJUoT62GuZ7pWXyNDZU/ZTwVNNFbfL787D4vyXue0Y3phdm1thUcy8
KcMXO94G/NXs8eXa5u6fcC5CEi06BMGz6P/QebVw2WUCoUBPJFT9VeMs0A0FdC1V
URJ9ympymGVYqw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:25 2025 by rpki-client