Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: 9+e3Pi1ri8ZmwCMvjDRn0v/S0tKI87zoPNtYd9yqaek=
Subject key identifier: 41:20:5D:3C:B4:31:92:B4:94:FE:C4:7E:D7:D1:97:84:1D:BB:4D:05
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019881D4DCB0077642DB5FE20A9FEC03AD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0D14
Signing time: Thu 07 Aug 2025 00:01:07 +0000
Manifest this update: Thu 07 Aug 2025 00:01:07 +0000
Manifest next update: Fri 08 Aug 2025 00:01:07 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: RC8RAkF/pYGsx4/YmIa5M/HHwW691BZtnxNBK/BThoo=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:dc:b0:07:76:42:db:5f:e2:0a:9f:ec:03:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Aug 7 00:01:07 2025 GMT
Not After : Aug 8 00:01:07 2025 GMT
Subject: CN=41205d3cb43192b494fec47ed7d197841dbb4d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:2d:89:89:f0:3d:a0:b8:1b:bf:b0:16:04:
04:9d:66:5c:85:ff:20:ca:7a:59:a1:30:ae:a9:a7:
06:b7:91:58:37:1a:b6:ff:6b:5f:1d:88:d5:31:8d:
cb:96:6d:ea:41:8b:aa:95:ad:5f:0b:67:e3:c8:46:
92:51:e4:4b:b9:06:3c:6d:17:93:64:84:88:af:62:
1d:b8:7e:61:7d:08:c8:ef:bf:fd:7b:c1:df:14:ad:
0b:48:2a:11:af:c4:8d:1f:a0:1c:f1:d1:0d:2b:f4:
de:90:4b:19:a6:91:33:05:2c:3c:3f:4a:7b:b9:d7:
13:93:65:ce:f0:2c:06:4d:67:ec:81:80:4d:a2:ae:
48:45:f2:15:96:a0:0f:15:7d:40:20:43:28:92:bd:
db:7d:6e:fb:3d:a9:ab:1d:e8:f6:40:91:f8:33:cc:
79:87:13:88:e2:14:69:f6:54:fb:fc:65:d4:a3:83:
73:62:ce:99:73:96:8b:53:5d:cf:35:ec:6f:fd:5e:
92:ad:01:c4:98:e6:96:e7:69:de:1f:21:40:bf:7a:
ce:3e:e9:b8:6b:11:e8:44:c8:d5:6a:d8:96:3b:6f:
50:0e:aa:8d:74:22:7a:38:77:d8:7a:25:10:76:09:
59:a3:3e:cb:b2:eb:f8:a3:ff:af:16:2e:5e:28:5d:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:5D:3C:B4:31:92:B4:94:FE:C4:7E:D7:D1:97:84:1D:BB:4D:05
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fa:04:49:33:f6:f7:1b:1a:9a:a4:27:9b:7b:b9:c1:87:cf:
7b:7c:7c:29:00:8b:27:22:0e:70:72:43:70:d8:89:86:81:0e:
cc:c8:fd:74:cb:f8:e5:9a:2c:82:b3:3f:d5:3e:f2:f2:c9:e6:
fd:6c:ae:1e:fc:14:d0:5b:42:63:ac:24:88:2d:80:4f:3b:48:
f5:18:30:4d:52:46:fa:0c:43:43:26:6c:80:38:2b:91:1c:72:
d0:50:69:6f:43:63:57:9c:a7:53:1f:a0:3a:bd:53:66:66:b3:
55:c5:69:66:a9:2d:0e:74:ec:d0:43:ac:e7:42:22:47:ea:25:
e2:c2:a0:ef:9c:ec:e6:a2:4f:f0:4b:4b:14:d2:e7:d0:c4:56:
87:dd:b8:c8:c9:fc:af:cb:75:a2:65:7d:9a:28:4f:aa:b7:2a:
dd:99:1c:69:18:af:f6:12:d5:22:1f:94:77:3e:42:7d:62:83:
99:79:6a:93:8a:68:56:c7:e1:8d:17:0b:cf:ba:23:29:bd:ae:
fb:56:26:c0:36:f9:2f:5e:14:fe:89:33:37:4b:17:59:16:dc:
2b:18:c5:24:97:69:6b:57:f6:4d:24:b1:51:24:e5:1a:ef:59:
20:82:26:55:75:f5:be:5e:34:c6:09:11:c4:19:26:6c:9b:c4:
09:c3:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:24 2025 by rpki-client