Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: PsVZM9APRMQZPnMJKLUaPl9eSVUVV6uXD4VFwansB10=
Subject key identifier: 21:DA:3D:F4:05:0D:7A:1E:89:9D:36:06:C3:68:71:40:64:4D:FA:08
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 0198D7A8BABA4882A8DE174415B4A65131A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 16:00:15 +0000
Manifest this update: Sat 23 Aug 2025 16:00:15 +0000
Manifest next update: Sun 24 Aug 2025 16:00:15 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: /y8yrE5XVbp5zlPb2X1+JvHxR8uz4X+qVepzOkIzQ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ba:ba:48:82:a8:de:17:44:15:b4:a6:51:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Aug 23 16:00:15 2025 GMT
Not After : Aug 24 16:00:15 2025 GMT
Subject: CN=21da3df4050d7a1e899d3606c3687140644dfa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:37:c7:1c:e1:d9:fa:96:c5:cc:96:a3:6a:
1f:30:fd:b1:ef:c4:90:0c:f3:69:fe:c6:67:90:b1:
53:2e:dc:2b:a6:2e:57:7a:75:9c:a6:35:c7:9f:e5:
04:7f:ce:54:97:8d:f3:86:33:68:c3:e8:6b:4f:3b:
9f:d4:24:55:c6:a0:fb:77:dd:65:d1:e9:3b:3f:3b:
75:b7:97:7a:5f:aa:da:49:9d:8c:9b:f0:c1:0c:9d:
aa:ce:90:c4:5e:a9:ac:80:81:3c:17:c6:fd:55:b6:
bb:58:73:fc:27:8f:01:35:09:97:4b:b9:1d:3a:df:
f7:38:ad:2c:42:a0:1f:ac:02:54:9f:1d:a7:5a:b5:
97:8c:85:62:18:9f:4d:6e:68:27:8e:c9:cb:af:ff:
70:1e:34:f6:df:6e:fe:2c:21:33:f2:e2:21:86:9a:
a7:d0:b9:24:11:ea:41:02:0d:d3:40:14:35:70:54:
21:61:ad:9f:e0:75:ac:22:d3:1f:ba:0d:69:93:fd:
e4:e7:eb:a5:2b:fe:97:dc:0c:36:99:fb:2a:7f:31:
da:4e:71:7e:ce:67:60:b7:99:24:1b:ba:15:c3:ef:
ff:30:2f:76:bf:57:55:bc:19:56:a3:38:7a:da:9e:
66:9f:e6:f9:fb:7c:51:61:77:cc:f2:34:e8:cc:34:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DA:3D:F4:05:0D:7A:1E:89:9D:36:06:C3:68:71:40:64:4D:FA:08
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a7:71:d7:e8:25:0c:78:b5:cb:d8:4d:37:38:14:85:c9:cc:
73:f9:b8:df:7d:87:62:48:c9:2b:ef:32:41:ec:cc:58:17:5e:
72:a4:0b:ae:b8:f3:53:26:fe:7f:3e:53:cf:8f:86:aa:c6:61:
4d:45:86:93:4c:90:2b:83:56:ad:1c:ee:7e:3f:8b:27:8e:65:
78:62:42:88:d2:d4:78:66:94:0e:5b:9a:04:62:d1:96:96:9f:
07:ca:22:d5:7d:8c:98:0b:16:a7:d5:b6:02:31:a3:51:66:af:
29:a1:87:5d:18:f3:51:b1:9b:85:a3:a2:f5:a3:6f:b8:4c:98:
c3:84:d5:9e:d8:9d:8b:2c:11:5c:05:3c:ae:26:d9:be:2c:70:
35:87:e9:56:f8:ac:40:e4:f4:6f:6b:6d:2a:46:27:0f:14:7d:
63:76:d7:e3:8b:ec:62:4d:4f:bc:0f:a2:6b:61:43:40:b6:f7:
90:fa:c2:b5:33:a5:02:d6:d5:9f:cd:6b:d3:66:71:ef:86:c2:
e1:f9:a2:1f:78:89:d3:32:4a:c7:0d:13:dc:ca:16:cf:b1:aa:
1b:a4:9a:17:1d:84:4c:85:11:4a:33:39:57:1a:57:ca:80:77:
8c:59:86:bb:52:c9:f3:8e:4e:ba:01:29:fc:02:0c:7a:61:0e:
b2:c7:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:17:44 2025 by rpki-client