Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: RVp5WVoyVPhV8uYHhOTVNTlKAI99EgklZMGi4uw8naY=
Subject key identifier: E3:08:76:1B:C3:23:71:F8:A6:71:C9:5D:FA:0D:FA:47:78:0F:4B:D9
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 0199FC58FC6BC71DD77F6A733DF6BAE5611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: QA00XlO2TkUSe7n0co8nmrr+/3HX4GnvmBCoXjlzi8U=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fc:6b:c7:1d:d7:7f:6a:73:3d:f6:ba:e5:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=e308761bc32371f8a671c95dfa0dfa47780f4bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:c3:e9:7a:d4:52:46:ba:7b:42:18:f0:a5:
19:4c:38:69:8b:9c:52:0a:bc:fa:95:f8:79:aa:b0:
f6:7b:05:3c:7a:7c:15:f4:90:13:c3:f1:74:f2:31:
be:bd:d5:37:00:ec:1c:1e:b0:d3:9a:b2:bb:1b:e7:
e8:b1:c1:6f:c6:52:db:f5:db:5b:8c:e4:cf:c5:89:
4d:0e:96:28:f2:8e:70:e3:81:27:a5:c4:79:d2:df:
26:75:22:81:e1:45:45:92:39:5a:90:8d:d4:16:b0:
4a:41:2d:69:78:ba:11:a7:0e:2d:fa:1e:02:89:1d:
be:1a:34:0d:e3:b9:ea:c3:5c:38:88:ed:d5:87:e7:
35:fe:2e:e5:ac:4c:c4:d0:64:9e:17:18:64:19:c0:
9f:62:78:34:69:00:41:3d:a8:31:c7:e6:7b:a8:ae:
d9:5a:88:f9:4f:2e:3f:a2:21:48:25:ba:8e:48:9e:
72:9a:12:1d:71:35:0c:1d:99:e5:73:5f:d6:03:11:
f4:5b:e2:83:94:28:24:27:f1:bf:e5:90:cc:ea:39:
83:f9:24:8a:17:ac:69:db:10:b3:ab:22:d6:c2:ec:
13:1b:b4:c1:50:04:0c:bd:4b:42:86:c7:4a:df:f3:
c6:8e:28:47:11:3c:16:35:1a:0a:14:38:38:56:77:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:76:1B:C3:23:71:F8:A6:71:C9:5D:FA:0D:FA:47:78:0F:4B:D9
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:48:96:27:ce:d2:93:d0:5f:d2:5d:c8:53:03:52:9c:8d:10:
85:fa:29:dd:88:57:46:36:9a:02:f5:e6:f0:fc:8d:08:93:a1:
9d:0a:a3:b6:cd:5e:a9:9f:08:bd:5f:af:e7:2b:4c:05:a0:69:
6b:6e:88:e7:68:56:61:74:5f:6a:dc:7c:7a:95:48:da:4d:5a:
00:e5:fd:53:0b:7a:fe:71:48:92:3b:2b:5f:29:c0:9d:c3:2f:
7f:01:32:43:9b:f6:e1:39:fe:3a:e4:2d:4d:fb:28:04:17:9c:
85:b2:05:42:69:b3:ba:d0:d2:3c:68:9d:2f:72:90:90:2c:a5:
7f:65:4f:39:1a:f4:11:e9:83:cf:8d:2e:3f:d1:3b:79:a4:1c:
ab:5e:63:25:cc:d2:53:86:52:22:08:08:79:45:e4:29:10:eb:
0c:0b:8f:f7:f8:ea:cd:ae:13:e1:64:08:ab:02:56:19:f6:b4:
56:d0:1d:32:1b:dc:51:9e:b4:17:88:df:00:fb:f3:d2:e3:ef:
ca:1f:49:fe:85:59:23:a4:5f:9f:f6:93:e6:e4:2f:82:ee:ba:
b2:12:e1:dc:9a:05:98:4b:77:81:a6:17:75:84:ad:e3:a3:0a:
0d:04:9d:d1:20:ea:b0:a7:35:72:97:b4:ee:fa:ca:99:9b:51:
9e:73:23:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPxrxx3Xf2pzPfa65WEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2
NGUyMDIwHhcNMjUxMDE5MTIwMTU0WhcNMjUxMDIwMTIwMTU0WjAzMTEwLwYDVQQD
EyhlMzA4NzYxYmMzMjM3MWY4YTY3MWM5NWRmYTBkZmE0Nzc4MGY0YmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0nD6XrUUka6e0IY8KUZTDhpi5xS
Crz6lfh5qrD2ewU8enwV9JATw/F08jG+vdU3AOwcHrDTmrK7G+foscFvxlLb9dtb
jOTPxYlNDpYo8o5w44EnpcR50t8mdSKB4UVFkjlakI3UFrBKQS1peLoRpw4t+h4C
iR2+GjQN47nqw1w4iO3Vh+c1/i7lrEzE0GSeFxhkGcCfYng0aQBBPagxx+Z7qK7Z
Woj5Ty4/oiFIJbqOSJ5ymhIdcTUMHZnlc1/WAxH0W+KDlCgkJ/G/5ZDM6jmD+SSK
F6xp2xCzqyLWwuwTG7TBUAQMvUtChsdK3/PGjihHETwWNRoKFDg4VncR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMIdhvDI3H4pnHJXfoN+kd4D0vZMB8GA1UdIwQY
MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt
ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi
LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEiWJ87S
k9Bf0l3IUwNSnI0Qhfop3YhXRjaaAvXm8PyNCJOhnQqjts1eqZ8IvV+v5ytMBaBp
a26I52hWYXRfatx8epVI2k1aAOX9Uwt6/nFIkjsrXynAncMvfwEyQ5v24Tn+OuQt
TfsoBBechbIFQmmzutDSPGidL3KQkCylf2VPORr0EemDz40uP9E7eaQcq15jJczS
U4ZSIggIeUXkKRDrDAuP9/jqza4T4WQIqwJWGfa0VtAdMhvcUZ60F4jfAPvz0uPv
yh9J/oVZI6Rfn/aT5uQvgu66shLh3JoFmEt3gaYXdYSt46MKDQSd0SDqsKc1cpe0
7vrKmZtRnnMjOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:13 2025 by rpki-client