Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 4sm/YKZJvNqon1S6O4DMKGDUSxY1Z2ryo8Mv4rBzzvU=
Subject key identifier: F8:3C:52:F3:7D:F7:68:46:21:B4:D7:2F:73:01:56:6F:CA:EA:D6:BA
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0197B96B0D1146E4E4985DAE8A657906E5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 07B7
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: QE5MoVPYCofs7Uf4YU/Llk7uICX9L6UP1amD17zKbXw=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0d:11:46:e4:e4:98:5d:ae:8a:65:79:06:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=f83c52f37df7684621b4d72f7301566fcaead6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:38:eb:c7:ae:81:26:cc:7b:68:b9:0e:e3:
73:40:d7:ce:76:39:1a:68:c7:8d:14:2e:55:9b:03:
a1:42:19:8c:44:35:4f:e7:5a:75:46:3f:b8:df:47:
30:82:d2:8a:30:22:0d:8d:5f:c5:3b:a6:87:84:2a:
51:d4:6a:55:a3:f6:2c:3f:2f:39:70:a5:83:84:d3:
08:6b:f0:c7:6a:2d:2d:bc:b3:17:ed:a5:bc:69:92:
99:bf:20:74:36:7c:46:5d:2e:47:98:be:00:e3:dc:
d9:fc:7b:59:81:ea:45:77:d0:86:46:d8:cb:cf:44:
07:71:7c:63:d4:af:e5:29:8a:4d:f3:6e:89:06:63:
89:4c:e2:ca:31:cb:51:f5:75:3d:74:38:f0:b3:2b:
e2:17:f6:ac:69:e9:33:be:50:54:16:4d:eb:01:00:
ea:66:17:8a:8d:b1:bf:7b:12:32:f5:fc:af:ea:18:
d1:34:17:08:49:a9:57:63:23:45:41:ce:ad:6a:b1:
90:f7:c6:47:f6:6c:94:35:2b:51:af:39:0d:a5:6b:
8e:a3:a8:f4:cf:ae:39:52:ce:cc:94:5e:e6:a3:c9:
d9:b5:4a:75:f1:a2:93:f2:d0:35:21:69:f0:00:7e:
43:99:06:b2:4c:6d:1e:a5:89:74:17:ce:df:d6:bc:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:52:F3:7D:F7:68:46:21:B4:D7:2F:73:01:56:6F:CA:EA:D6:BA
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b9:9d:c1:4c:cd:36:7b:1c:0f:9a:03:33:11:f6:ac:aa:2c:
e3:3a:c3:0d:c4:ba:b2:e9:91:ac:ca:f8:26:94:f8:68:71:11:
1b:6e:7c:f1:c4:6e:89:99:54:fa:93:8e:89:7f:05:9f:79:e7:
84:47:6d:5b:ab:dc:bb:61:5c:1f:af:6c:df:c4:90:d2:d6:a9:
31:65:25:f5:71:41:75:99:cb:ef:3a:15:91:91:f9:07:e3:b1:
63:b4:ec:a7:17:4e:ae:95:3a:93:72:f7:b1:6f:49:63:bd:70:
f4:7b:8c:4e:fa:1f:6c:e6:61:d7:b5:11:d3:eb:ae:ce:b5:b6:
5d:87:1a:a7:16:4c:ae:07:c4:74:a6:b8:56:71:01:a3:0c:18:
b6:1c:e7:38:d4:f6:05:46:af:03:f4:65:f7:f0:76:64:99:10:
63:cc:18:8d:fd:29:18:75:9d:21:e7:15:de:2f:19:dc:03:84:
c7:0e:d2:a7:0b:2e:2c:71:4f:cb:04:0c:0f:c1:62:10:16:07:
e4:27:e2:e6:0c:45:a1:e2:d7:b9:95:a3:51:99:0c:30:52:33:
7f:c6:2e:b2:41:2e:8b:b1:7a:5c:54:7a:6f:0f:65:52:5c:92:
e7:33:c1:e0:0e:d6:81:0f:bf:bf:57:33:5b:81:f4:7f:73:f3:
be:39:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:12 2025 by rpki-client