Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 2GEBG73v/DenuVKJttc7yg/X/dgP4QXmH/YaPAEJ7ko=
Subject key identifier: 45:84:C9:9A:7B:79:3B:EC:FF:39:80:DF:6F:3F:B1:30:1D:B1:D5:36
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0199FAD8500C72B048448ABA48456CA040C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 08E2
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: xTx1WWLMRynovWLQCy6EEve+L6mnMOXtE2LY0p5qZYI=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:50:0c:72:b0:48:44:8a:ba:48:45:6c:a0:40:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=4584c99a7b793becff3980df6f3fb1301db1d536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:05:6b:f5:4a:4b:5e:db:04:29:f4:35:e3:
bc:3b:5a:82:e8:90:22:b3:69:54:20:bf:7d:8c:4a:
77:60:6b:37:fb:af:13:03:ef:d3:be:7b:7f:b1:52:
97:e9:8a:b2:aa:db:32:7f:6b:1d:8a:f0:7c:30:c0:
70:21:a8:09:43:c3:8d:e8:06:fe:e3:26:a3:5b:d6:
3f:00:2e:d0:12:77:87:f8:71:58:1f:27:7c:f6:53:
d8:bd:cb:46:3b:47:5b:5d:57:de:8d:73:45:1d:a2:
76:89:42:98:d0:f4:bc:87:54:a8:3b:d1:ec:d2:5e:
98:99:4d:7d:8b:56:33:dc:f2:d1:0c:ba:74:6e:df:
1d:d0:c8:35:57:d1:ec:ce:28:0f:00:ba:e4:ce:b1:
b7:25:8b:d2:ca:fe:7d:11:79:37:5f:1e:0f:7d:df:
7b:58:eb:60:37:0d:0a:1f:7d:a2:ad:73:35:b6:44:
e7:48:e2:40:2e:28:f3:af:f0:74:82:80:c6:03:5a:
25:11:b0:fa:bb:19:ad:73:02:c9:c4:ab:5a:99:c7:
1f:e8:ca:79:91:5f:f8:83:c9:47:ea:43:a6:4f:44:
10:84:10:a5:74:7e:1d:ef:ce:1a:b0:51:c7:07:f8:
98:ac:a2:c3:76:43:2f:72:39:e2:2f:ac:fc:09:06:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:C9:9A:7B:79:3B:EC:FF:39:80:DF:6F:3F:B1:30:1D:B1:D5:36
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:97:f4:c7:c8:ad:72:42:94:5a:32:75:c4:d6:13:11:3d:33:
e6:0b:97:76:01:8e:fc:68:2a:63:2a:d3:5d:c7:8e:af:8a:ff:
55:d0:0e:14:3a:40:a7:4d:b5:cb:7a:c7:e1:7c:4e:c9:b3:ae:
6d:cc:0d:de:60:16:6d:26:4f:28:60:4f:cf:02:81:4d:d2:90:
a0:92:57:77:6a:07:6c:41:cc:44:0f:89:25:94:d5:a7:7c:dc:
21:a1:c8:5e:c6:c0:12:f9:20:33:f1:38:10:b1:a7:85:64:ea:
0d:e1:65:a0:14:35:6c:c7:f3:a1:12:11:84:c9:fd:ab:7a:29:
bb:10:4b:ad:35:ad:df:e7:79:b8:44:84:7a:97:23:70:1d:42:
62:82:45:91:a1:fe:bc:d1:6f:49:00:30:3e:30:a5:51:97:17:
e4:f0:54:f2:9e:ff:cf:d5:ad:37:f4:4f:d0:81:2c:d2:40:9c:
5d:9f:39:56:88:a5:b8:ae:df:2c:21:ff:3f:09:54:b8:7f:47:
85:32:21:16:6c:17:27:b7:86:ec:32:c3:4e:4d:2b:5d:ee:97:
12:54:a5:25:eb:2f:25:33:5c:9c:c9:c3:c9:fb:9e:34:8d:c8:
ea:8a:a4:d2:4a:71:3b:7d:2a:17:f5:d0:c8:be:72:7b:2f:5c:
37:13:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:20 2025 by rpki-client