Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: yTIaJSQlp7IQw99HfgyenASh1w9rGE10KflI+G61fMU=
Subject key identifier: 13:3A:BE:26:91:9B:D8:13:52:9B:FC:4A:89:00:1D:B3:3E:C6:97:2B
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 0199FE7DF86A2753DEF2E8A835B7CA3F96EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:32 +0000
Manifest this update: Sun 19 Oct 2025 22:01:32 +0000
Manifest next update: Mon 20 Oct 2025 22:01:32 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: wYL9UtyeLjmVhWzFqJAGYcZBmUiYv+ZGguMunC9/2dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f8:6a:27:53:de:f2:e8:a8:35:b7:ca:3f:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Oct 19 22:01:32 2025 GMT
Not After : Oct 20 22:01:32 2025 GMT
Subject: CN=133abe26919bd813529bfc4a89001db33ec6972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:ec:9d:2b:25:4d:d0:57:7a:02:67:f8:3c:
a8:0b:0d:b2:9f:6b:c7:5b:f5:b8:e3:06:cc:0b:ad:
37:50:14:d5:87:0e:f2:cb:33:56:d3:7a:7d:7f:86:
30:41:85:c4:c7:8f:65:5b:92:49:29:7a:2e:3c:27:
18:58:68:dd:dc:2d:da:db:52:26:73:69:4f:18:bd:
e5:5e:37:1a:06:db:7e:1e:95:86:0a:71:be:11:9b:
95:4d:4d:18:a5:ee:95:87:20:a6:f1:84:52:1b:79:
2f:48:5d:14:d7:b3:80:1a:67:95:f2:ce:a5:78:ce:
37:9b:17:8a:57:b0:37:bb:f3:8e:c8:0e:d4:07:1a:
38:8a:9a:e2:16:81:72:02:fc:ca:bd:c1:7d:75:a1:
44:04:d9:3a:ea:48:11:67:00:c8:4c:f8:49:1d:5b:
df:ec:a9:97:3c:62:12:72:05:16:9f:ca:f9:dd:96:
16:59:48:1a:c8:05:f8:4c:4f:5d:99:c3:fd:e6:f6:
46:78:87:66:91:34:d5:06:d7:af:41:3a:d1:32:f5:
5d:89:33:7b:76:6f:d9:e0:ce:18:af:d2:d8:5a:66:
9c:9a:5d:ca:f7:d7:a4:51:b1:90:ac:32:34:ed:09:
60:ea:55:85:5d:42:a0:88:bb:d5:23:c5:5e:34:24:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:BE:26:91:9B:D8:13:52:9B:FC:4A:89:00:1D:B3:3E:C6:97:2B
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:8a:2d:87:c4:fb:b6:be:1a:96:e1:87:d8:a8:7f:90:52:
f9:61:73:9a:ac:60:82:bd:90:f4:33:13:54:c0:bb:c3:9e:a5:
85:ff:2d:d3:8a:20:18:9b:48:e2:78:79:09:31:d1:ba:00:08:
22:0c:a2:78:30:cd:24:31:e3:dc:0f:68:dc:e3:5f:6c:40:32:
5c:ee:a1:62:3c:53:24:3e:7a:9b:9f:3c:28:2a:97:38:1b:9a:
b5:a0:f7:12:15:e3:db:4d:59:ec:c5:18:76:70:22:dd:ee:b9:
47:60:6a:2f:e7:72:e8:2c:cd:67:38:99:7b:52:42:e6:f7:f1:
ab:be:ed:9f:af:e7:d6:ca:27:f9:25:35:03:29:5c:dc:d6:46:
3b:21:9a:ce:ed:78:17:61:bd:b3:5f:ab:1c:30:cc:b6:88:5d:
6b:0b:4f:9a:fa:74:6b:b1:b4:01:6b:af:40:d8:b1:f6:71:73:
39:1a:5a:9a:ce:0d:50:ab:80:1f:e2:da:58:53:3d:93:54:b6:
97:89:43:59:4c:1f:1e:ae:82:d9:45:34:b6:f3:0d:25:71:9d:
52:84:46:db:af:1b:08:00:d2:62:0a:07:f8:80:f9:cb:1b:11:
8d:9a:06:de:65:d7:6b:78:f0:27:f4:35:b7:cc:59:6b:31:8b:
29:f6:0b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ffhqJ1Pe8uioNbfKP5buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNDM0NDcyMjY0NWRhMjVlY2UzYjE3YzdhODM3NjJlZDQy
ZGRhNTIwHhcNMjUxMDE5MjIwMTMyWhcNMjUxMDIwMjIwMTMyWjAzMTEwLwYDVQQD
EygxMzNhYmUyNjkxOWJkODEzNTI5YmZjNGE4OTAwMWRiMzNlYzY5NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAzsnSslTdBXegJn+DyoCw2yn2vH
W/W44wbMC603UBTVhw7yyzNW03p9f4YwQYXEx49lW5JJKXouPCcYWGjd3C3a21Im
c2lPGL3lXjcaBtt+HpWGCnG+EZuVTU0Ype6VhyCm8YRSG3kvSF0U17OAGmeV8s6l
eM43mxeKV7A3u/OOyA7UBxo4ipriFoFyAvzKvcF9daFEBNk66kgRZwDITPhJHVvf
7KmXPGIScgUWn8r53ZYWWUgayAX4TE9dmcP95vZGeIdmkTTVBtevQTrRMvVdiTN7
dm/Z4M4Yr9LYWmacml3K99ekUbGQrDI07Qlg6lWFXUKgiLvVI8VeNCRDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM6viaRm9gTUpv8SokAHbM+xpcrMB8GA1UdIwQY
MBaAFCxDRHImRdol7OOxfHqDdi7ULdpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUt
ODY2ZjFkMjMyN2FhLzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jMzVkY2QtMzEwMy00ZWEwLWE4YzUtODY2ZjFkMjMyN2Fh
LzEvTEVORWNpWkYyaVhzNDdGOGVvTjJMdFF0MmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMuKLYfE
+7a+Gpbhh9iof5BS+WFzmqxggr2Q9DMTVMC7w56lhf8t04ogGJtI4nh5CTHRugAI
IgyieDDNJDHj3A9o3ONfbEAyXO6hYjxTJD56m588KCqXOBuataD3EhXj201Z7MUY
dnAi3e65R2BqL+dy6CzNZziZe1JC5vfxq77tn6/n1son+SU1Aylc3NZGOyGazu14
F2G9s1+rHDDMtohdawtPmvp0a7G0AWuvQNix9nFzORpams4NUKuAH+LaWFM9k1S2
l4lDWUwfHq6C2UU0tvMNJXGdUoRG268bCADSYgoH+ID5yxsRjZoG3mXXa3jwJ/Q1
t8xZazGLKfYLMQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:34 2025 by rpki-client