Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: MAiKzxDfkTGoeL/6YBV+RuMdh1XXeYJ+biVN8fT4H3M=
Subject key identifier: A4:7C:7D:F8:A7:88:12:B5:AB:57:A4:32:D8:A9:9E:92:42:CA:17:74
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019A571C07D0F8E2A58F3EF9504B7168C5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0E07
Signing time: Thu 06 Nov 2025 03:00:46 +0000
Manifest this update: Thu 06 Nov 2025 03:00:46 +0000
Manifest next update: Fri 07 Nov 2025 03:00:46 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: OlJA9CJZUei/ezQ939AULZU/CS9o7UdhzXvJZXQv44c=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:07:d0:f8:e2:a5:8f:3e:f9:50:4b:71:68:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Nov 6 03:00:46 2025 GMT
Not After : Nov 7 03:00:46 2025 GMT
Subject: CN=a47c7df8a78812b5ab57a432d8a99e9242ca1774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:53:0e:3f:92:38:ab:01:e0:30:39:c8:69:
8e:ff:48:e3:7e:78:b0:30:2f:0b:91:23:af:af:c4:
b6:91:21:77:2a:62:3e:ec:ad:c5:40:36:29:03:73:
3b:bc:1b:c4:92:b9:d6:a8:c6:2a:a8:5a:0f:39:d2:
65:32:47:e7:a5:81:1b:6d:bc:16:ef:5c:bc:e7:82:
9b:07:c3:3f:c0:d8:63:f1:f6:b4:3a:f5:24:38:12:
a3:84:a5:2c:11:b2:d4:dd:1f:39:b9:db:a8:c5:18:
02:59:35:b3:89:91:63:fe:05:0f:7f:ca:a1:be:a0:
13:71:74:3b:c5:cf:8a:b5:70:18:e7:6c:1e:76:70:
a4:30:cc:3c:85:d3:31:84:60:0c:c2:28:f5:5c:c2:
7b:a8:cd:39:87:6a:87:be:11:11:84:f5:e9:14:8e:
8f:39:e7:ce:85:bf:f2:b3:3e:2a:dc:a1:e8:ea:3f:
c4:a5:a8:36:c0:50:e9:87:06:c6:81:31:72:d7:16:
32:a7:65:03:88:11:ae:d1:93:0a:d4:08:fc:56:12:
ba:eb:4d:eb:c3:e4:ea:08:fb:6a:d4:0c:3f:06:0c:
73:d5:52:ac:6f:9b:65:bf:70:7f:63:e7:2a:f8:13:
db:77:c5:75:81:2a:27:ea:56:86:f2:6b:42:9e:f3:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7C:7D:F8:A7:88:12:B5:AB:57:A4:32:D8:A9:9E:92:42:CA:17:74
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ff:f3:ef:e3:32:2d:c0:ee:9d:ce:28:87:cb:68:53:a9:94:
ad:2e:ba:d8:a4:3c:15:cb:33:72:bf:6f:2a:ea:54:56:e0:c4:
8f:2e:a6:45:e9:29:c6:f1:d6:63:11:6d:0f:65:b1:35:01:d7:
56:e6:6b:7d:ec:50:f3:7b:0b:d6:d9:b3:fa:95:59:f9:9b:d5:
6a:92:6a:02:48:fe:26:0c:c6:7c:b1:a8:0b:26:57:27:93:02:
d8:5f:a2:fb:ec:ec:9e:34:40:33:62:e7:4d:c8:95:fb:a0:46:
6c:03:27:b6:8a:fe:69:7b:d5:fa:b0:a7:9f:c9:f0:f8:ed:f9:
92:04:e7:60:79:8d:47:3f:b3:52:ef:e1:7e:ec:a5:8f:e5:2a:
03:8e:7c:90:05:6b:b5:88:13:57:df:91:1c:7f:4b:4d:cc:b0:
0d:34:f8:17:f4:f7:57:47:49:cd:8f:b4:61:63:80:73:c2:4f:
d8:5b:a3:52:69:80:bc:e4:84:fb:8f:c8:ca:f8:7d:dd:43:08:
ff:9d:86:d5:b8:2a:4c:50:e9:d0:a3:e4:3f:16:e8:c6:c8:a1:
98:b0:81:2a:30:98:00:3f:23:66:1d:4e:50:1e:0e:55:d3:67:
7c:f1:29:10:d7:60:47:f9:e7:74:79:49:8f:b2:04:c3:45:a2:
84:dc:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:51 2025 by rpki-client