Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: GIv9+tV/RJwW7/aLRSsTRxUp8wNHnRjSQLSQIEG0Vs8=
Subject key identifier: 2B:7D:C5:3B:D4:DF:72:99:B5:23:D0:C3:27:6A:B4:D5:F5:93:D6:33
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0198D47418B0B809ED92402EFBF0BFD7AF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1621
Signing time: Sat 23 Aug 2025 01:03:54 +0000
Manifest this update: Sat 23 Aug 2025 01:03:54 +0000
Manifest next update: Sun 24 Aug 2025 01:03:54 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: ShPHrgrJtzKw6S3eVJb7NPPELr3JPjQOLPudnmAVTfI=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:18:b0:b8:09:ed:92:40:2e:fb:f0:bf:d7:af:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Aug 23 01:03:54 2025 GMT
Not After : Aug 24 01:03:54 2025 GMT
Subject: CN=2b7dc53bd4df7299b523d0c3276ab4d5f593d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:a8:da:f3:19:23:ea:c0:36:3f:57:11:c0:
95:75:5e:2f:d6:74:d6:e4:6a:e3:fb:ca:b3:77:87:
dd:e9:d9:fe:0c:b6:09:70:df:dc:c1:d8:14:64:2b:
7f:bf:d4:d2:5b:be:70:1b:c5:f0:54:68:cb:94:8f:
85:50:89:4b:37:bd:fe:cf:13:e7:2d:a0:76:36:0e:
3a:3f:c6:1f:b9:cb:a8:14:0c:37:7d:cb:05:ae:2e:
57:90:89:16:8c:af:52:93:79:99:6c:f6:18:90:a9:
3b:7d:85:56:f1:70:bf:af:db:d3:85:e5:07:1d:64:
ad:29:37:b7:c2:5c:ed:34:e0:f9:c8:99:c3:9d:1a:
eb:e0:51:c8:75:11:3f:b5:20:8d:9c:e2:c4:20:08:
29:8a:22:fd:17:a9:27:92:d2:04:f5:0d:46:d8:5f:
49:54:56:67:d2:a8:18:db:74:e0:69:a1:24:ec:b3:
c1:64:89:6a:92:b2:ec:70:f1:4e:8a:92:f0:14:af:
68:9c:26:bb:0e:08:c0:37:97:4c:e7:07:11:60:96:
ac:81:03:93:e8:2f:85:cd:fc:54:f6:27:e4:97:55:
42:8e:1b:33:14:da:e8:32:b3:b3:48:84:11:a4:b7:
41:61:d9:c4:d6:7c:06:6e:1f:f2:3b:48:ce:1e:7d:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:C5:3B:D4:DF:72:99:B5:23:D0:C3:27:6A:B4:D5:F5:93:D6:33
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:07:fe:79:2d:9c:c3:f0:34:aa:f7:b3:51:75:78:31:35:7b:
59:23:b6:c8:0c:c7:25:29:b0:22:f4:1e:55:fc:f6:b3:cc:8f:
ad:57:59:cc:be:84:dc:72:34:98:ff:24:3f:30:58:9d:27:ee:
6a:94:37:7a:5a:17:21:24:19:35:ad:4c:08:c3:73:00:8e:36:
bd:0b:02:6f:07:f4:ae:3c:95:70:b4:c2:7c:9f:4b:bf:15:35:
46:b1:35:dd:e7:85:cf:4e:14:cc:fc:6f:2e:9b:9e:d1:ac:98:
da:7a:13:a0:e1:7f:c8:d5:cd:8b:c9:26:2a:d6:62:d8:dc:b1:
ba:01:c8:cd:a6:28:c2:ef:1b:28:14:5c:8d:2a:71:05:c0:b5:
25:47:d4:bc:e3:62:9f:3a:f6:9e:ee:0a:e0:d6:e9:c1:60:8f:
72:16:d5:04:94:8b:0f:b6:25:37:dd:d8:7a:2d:80:8e:6b:fe:
f4:c3:94:bb:00:6f:fb:5f:fb:85:3f:c0:56:38:db:89:d1:13:
15:e2:a4:59:83:75:08:a0:43:78:c0:96:4a:c0:ed:5e:1a:67:
9f:94:22:f8:9b:71:51:ec:ca:b1:dd:3f:b5:d3:18:77:2e:65:
05:fb:54:c3:8d:ba:4b:d5:cf:01:5d:b1:4a:15:c0:b8:1a:c3:
63:43:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:48 2025 by rpki-client