Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: tSEXqKFCYXYgW1QOvh1R7nUac6dxobrh4g551WohaPM=
Subject key identifier: DC:CC:B1:BF:46:FE:C9:53:0E:CC:F6:76:05:D1:3F:01:F5:EF:91:D6
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 019A4F98E0E6B439D2E4CA49323BBC92BC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: 41ZWHjYcRkdaokGobDAB/pDZ+2+cKyCTmAdc8iZcIh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e0:e6:b4:39:d2:e4:ca:49:32:3b:bc:92:bc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=dcccb1bf46fec9530eccf67605d13f01f5ef91d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:ef:1e:61:70:ba:f9:7c:f6:c4:ad:d1:9f:
05:e5:c3:4c:e5:24:cb:73:10:f4:c9:95:c6:4e:37:
c9:76:6d:af:ce:74:12:16:50:34:8c:40:ba:01:0e:
04:07:a6:f5:2d:6e:d7:f5:11:91:92:16:7c:c7:2c:
4f:f8:74:ad:e0:45:be:24:50:c4:0c:5a:5e:a0:07:
c8:c4:e8:b5:4e:1b:aa:6c:87:13:85:18:d0:91:53:
ac:30:00:60:b6:41:a4:b1:df:f2:f4:6f:ec:08:ba:
2e:26:39:5c:6f:57:78:a8:ea:59:d6:3a:b7:05:41:
fd:81:20:e3:f5:e8:e9:e8:63:26:dc:8b:34:18:90:
55:95:08:8f:e1:23:62:68:b8:ce:32:3d:dd:71:32:
00:96:a6:3f:c7:14:b6:66:c0:d6:eb:28:5c:b1:56:
05:35:7e:fc:2e:1f:f7:c1:ec:85:c2:4d:5d:dc:0a:
f3:72:85:5c:7d:33:73:04:79:fd:be:0f:7e:fb:74:
b2:61:3f:be:35:26:c3:49:42:d6:e3:5a:a2:76:c2:
b6:2f:53:07:c7:8c:84:30:d8:55:8d:88:e4:45:2e:
ff:fa:73:a3:ee:a3:8a:41:1f:e1:10:cf:c8:c7:c2:
69:4c:27:2c:87:6f:e1:da:fe:c2:bd:4e:cc:26:fd:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:B1:BF:46:FE:C9:53:0E:CC:F6:76:05:D1:3F:01:F5:EF:91:D6
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:6d:65:5d:57:fa:91:00:d8:bd:ae:2f:dc:d0:66:25:a4:
5b:9d:b4:62:7c:7f:9c:b6:ff:85:43:e9:fe:30:1f:61:6b:b0:
01:01:77:47:5f:af:72:9d:81:ec:77:57:53:97:46:0e:ad:93:
90:12:6e:52:3e:ac:f0:c9:31:f6:cd:2a:20:9c:b0:86:57:e7:
15:6a:43:66:03:61:73:b9:71:f0:35:e9:92:fd:38:ae:ad:ef:
ef:37:30:7c:9b:55:91:7a:ff:c2:7a:81:f2:06:29:da:04:c1:
a7:08:49:c3:d4:78:fa:f2:85:2e:bc:fc:1a:78:73:6b:5a:66:
e9:d9:cb:12:ea:47:db:16:ea:4c:2d:ce:fd:3c:14:7f:44:e3:
ce:ba:99:81:fc:e3:ee:71:41:85:59:95:2c:c6:81:b5:ff:2a:
b5:15:8c:56:5c:d0:9b:9e:0b:3a:3a:d2:3e:ce:3f:1d:66:f4:
fb:5a:7f:47:5a:52:46:e1:6d:28:f7:62:ba:71:27:04:3e:dc:
7e:c1:0b:0e:24:04:22:3c:86:3d:8a:f4:f7:c4:48:64:06:d6:
26:88:3e:c3:58:27:a4:f4:ea:93:df:11:9f:68:e4:e6:e4:c1:
f1:5c:7a:ce:41:de:1b:69:4c:9b:26:1f:a8:37:d7:62:db:00:
71:5e:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:29 2025 by rpki-client