Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: KF8O/ta3y7rME9el3mcOsosW89YKrNyf7tfIX3dqIKg=
Subject key identifier: 75:98:C0:A0:5D:74:1F:AA:FB:1D:40:CC:74:5D:2B:04:8E:7F:98:74
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 0198D54E1A2D42E8D8837D71E83FDDB99808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 9A
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: b/LJH4F0xGsSeDgy3uaZSFHfurEft0z/dWD8GvTfXDE=)
2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1a:2d:42:e8:d8:83:7d:71:e8:3f:dd:b9:98:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=7598c0a05d741faafb1d40cc745d2b048e7f9874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:99:1b:71:96:74:5d:28:6c:e7:88:6b:ea:
16:51:f7:b4:5e:46:56:09:33:b9:6a:16:9d:3a:72:
20:a7:31:2e:0c:e1:8a:04:65:2c:b2:e9:f8:78:a6:
e4:17:47:a5:6e:51:53:c6:9e:a4:c5:59:9d:83:79:
79:fb:11:c0:24:5f:71:8e:64:82:f6:2a:b4:63:89:
0f:2a:fa:1a:29:b5:3f:dd:4c:4e:16:9a:25:53:53:
44:ae:17:a1:9c:06:41:a8:da:82:72:08:e8:c7:84:
50:f0:43:0b:aa:50:92:45:ba:8e:7a:97:c4:bd:c0:
b7:4d:af:12:ef:b2:45:20:09:75:9c:ba:91:ea:59:
90:f7:a4:5e:1e:7c:33:ca:05:c2:a4:4d:c4:91:e6:
55:de:7c:ac:a8:88:f6:1b:75:dc:17:43:cf:fd:96:
41:8b:b9:17:2b:4c:77:a7:20:1e:04:8e:e6:c0:10:
ea:cf:34:f7:18:e3:b4:37:37:7f:40:49:41:6c:08:
33:32:56:8f:31:89:c9:6b:19:9d:87:12:55:e6:4e:
40:d9:d6:7f:36:da:5a:83:e8:2e:0f:e3:0d:99:15:
85:cc:3c:52:db:26:55:7c:5b:ec:b0:3e:52:e9:8c:
a5:86:7a:96:ff:7f:93:b7:4b:0b:b2:19:87:74:b5:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:C0:A0:5D:74:1F:AA:FB:1D:40:CC:74:5D:2B:04:8E:7F:98:74
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:38:0e:e8:d8:26:f2:ed:a8:b4:55:41:74:d8:5c:83:4a:
f4:ec:22:87:cb:8e:ac:83:a8:e7:77:a1:b4:6a:f2:f2:3b:83:
27:ed:af:56:e8:e6:ad:9b:71:94:83:80:3d:d0:af:b5:62:f9:
24:80:1d:42:39:d3:7d:5b:ad:26:f9:8e:35:11:75:de:70:10:
1c:6e:d6:d1:4d:13:ca:57:cb:36:5d:02:3c:dd:d0:8c:86:4f:
40:ad:a4:fe:f2:6a:3d:8b:70:04:65:05:88:85:7f:20:3b:0a:
53:a2:3e:4c:94:a8:fa:be:fa:0e:ee:de:23:09:33:4d:f8:96:
89:c0:81:b6:d5:43:46:81:aa:3d:70:9a:ad:cf:1e:54:2b:6e:
6e:b8:8c:7d:0c:7d:ea:5e:75:17:2b:48:62:f4:93:72:e7:4a:
93:18:9d:d1:a4:cb:1c:3c:b7:a6:a5:52:b0:c4:db:c8:d0:cd:
09:89:e4:ab:f0:44:f6:a0:44:3d:d0:07:c6:0e:8f:79:28:17:
e8:66:a1:1e:e8:bd:e9:61:ab:02:66:05:e7:1a:0e:01:35:4b:
26:73:05:d1:ee:91:a1:f0:d4:eb:e7:68:10:f6:90:87:83:0f:
82:64:c1:4f:dc:bc:4f:5f:6f:89:2d:bf:68:a7:c9:1b:4b:5d:
91:68:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:54 2025 by rpki-client