Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: ao7ABWDLu+CkPksF6E5PU6NMp2vMgH3dmfcHxtsdPnk=
Subject key identifier: 89:33:DA:D7:0C:1E:BB:01:3D:92:76:BC:CB:29:C2:B8:66:54:73:65
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 0198D4E0860A841F8047879BF502354F1368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: VhAfmZ89Bqv6PO6Fgp4YMNz0oEj365It3ASB/aIx5KY=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:86:0a:84:1f:80:47:87:9b:f5:02:35:4f:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=8933dad70c1ebb013d9276bccb29c2b866547365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:ba:e1:cf:47:9b:11:e6:21:69:0c:87:e6:
05:f0:14:a5:84:55:42:62:ae:36:70:77:22:89:c0:
03:d9:f1:d6:a8:c0:f6:5f:eb:fd:4a:7f:4d:94:58:
7e:51:f2:73:bb:51:98:21:13:ac:18:6c:b3:5d:71:
39:b7:57:62:9a:f1:f3:e2:58:a7:cc:d5:44:14:5c:
50:54:0f:48:09:d8:39:06:2f:ca:f2:7b:86:a0:d3:
ac:ab:3b:a0:5b:06:b4:b6:47:cf:15:b5:2b:5c:41:
96:47:51:55:8a:08:92:0b:6a:41:98:70:23:92:2c:
c6:bf:7d:6a:bd:1f:b4:be:81:63:d3:5c:20:45:92:
c0:f7:74:9c:67:40:ef:08:e6:6d:a8:97:e5:bd:b5:
c1:6e:c2:a5:e5:4c:0a:ee:3f:f5:67:09:e3:e1:43:
2d:eb:dc:aa:f7:b3:4c:b0:fd:57:8a:c1:85:45:40:
25:73:67:1f:7e:30:ff:29:7a:4c:08:b4:95:4a:68:
f5:9f:90:11:fd:ff:16:0d:32:87:8d:58:53:9f:1d:
fb:50:a7:b6:8c:7d:51:2d:82:a2:04:47:e9:b1:e8:
8c:e7:fe:54:20:78:f9:d5:26:08:01:09:b4:0b:77:
f6:c4:48:de:a9:6b:9e:73:ac:2f:0e:9a:a6:b7:93:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:DA:D7:0C:1E:BB:01:3D:92:76:BC:CB:29:C2:B8:66:54:73:65
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:54:c8:c0:24:3e:f5:f1:a7:0f:a1:0c:e6:8d:15:65:a9:90:
f2:d2:38:fa:b7:5e:17:0b:24:74:86:d5:d4:0e:46:a6:69:2e:
3a:76:f8:81:99:20:8f:94:ca:02:27:ef:29:b9:c3:51:3c:5d:
36:82:44:79:d3:6c:65:d4:fe:40:78:70:93:ca:58:b5:4d:31:
50:e9:bc:3a:42:36:44:86:20:da:4e:f5:9c:e1:a1:5a:28:a0:
e6:74:d6:e3:b3:9b:51:0a:a1:80:1c:8a:e4:cd:95:d1:81:a2:
6e:25:89:ea:9b:ef:88:e2:52:d9:50:58:d2:90:e1:9d:ce:ab:
6b:40:6e:5f:89:2a:41:00:cd:b4:a8:3c:41:6a:9b:2d:30:72:
b8:63:b2:be:7f:d9:83:25:b1:6b:7d:eb:a6:79:77:1a:a8:3b:
5f:5b:c9:30:32:9d:0c:9c:69:98:dd:1a:f5:a7:61:11:23:3f:
54:26:d8:41:21:c6:bd:9f:98:21:97:2f:93:7a:45:e7:4d:1e:
25:1f:44:33:a7:b6:1e:59:89:3b:d3:c1:eb:38:f2:67:17:33:
8c:d8:26:19:29:d9:f9:06:21:06:00:bd:e4:32:9f:d4:6a:c9:
44:8b:06:85:36:3e:73:13:e4:dd:3e:12:a7:c4:28:4a:7a:d7:
38:0f:ca:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:49 2025 by rpki-client