Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: Rv+Rk2i/p1Stb0aLNt91ApivVnNbP/fSE8al5ANxQFQ=
Subject key identifier: F9:B9:33:0A:83:A0:0D:06:7B:F2:70:C4:03:BF:25:1C:40:B7:F0:22
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0198D54E98604A333CAAA39D2F4986471A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 084A
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: ex9YzmlGgKN1UH6qgyN5Ok7DG9ArNuepc/I+hkh0s14=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:98:60:4a:33:3c:aa:a3:9d:2f:49:86:47:1a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=f9b9330a83a00d067bf270c403bf251c40b7f022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:44:14:95:f2:31:67:4b:6f:fb:b8:a7:83:
b4:d0:6d:e7:c3:ab:93:b3:d4:14:3f:9d:29:1f:61:
eb:84:a9:6f:18:97:8a:99:7e:9d:fb:93:22:13:cc:
98:dc:f0:f8:c0:9c:13:c9:20:1e:94:d1:4d:ae:32:
d9:f0:10:a0:31:85:85:ca:8b:54:c8:64:a7:c1:ff:
64:ac:8c:82:f1:9b:e6:87:9e:1e:3d:c5:cb:1b:04:
67:4e:04:fc:c8:19:e6:ef:a8:f6:2f:53:aa:78:5f:
33:44:9d:d7:dc:20:f2:24:a3:d8:2c:40:18:c8:af:
67:70:4e:65:d8:76:42:41:2f:7f:da:36:aa:bf:a8:
bd:e4:64:bb:3b:be:0f:39:04:58:7f:3f:42:4c:bc:
36:ac:b8:28:e1:94:5b:82:8d:03:d8:94:38:0e:56:
e1:4d:8d:9e:ff:85:45:69:5c:2d:a1:09:54:d5:81:
29:d2:55:16:cb:c7:6c:66:32:56:31:67:22:1a:88:
c7:5d:3d:e4:c1:d1:11:28:0f:8d:d0:93:c1:04:0d:
e7:0b:77:60:eb:95:f2:37:39:bc:f3:8b:60:cc:27:
29:1b:01:97:63:47:39:04:77:b5:0c:e9:c8:6e:06:
a9:51:c9:3b:47:ae:eb:c8:55:6e:63:3b:0b:67:9c:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B9:33:0A:83:A0:0D:06:7B:F2:70:C4:03:BF:25:1C:40:B7:F0:22
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b2:b5:82:09:3e:6f:c2:f2:d3:46:51:d2:22:19:6c:f7:e8:
e7:c2:0d:62:cd:a2:02:b9:13:c9:90:d6:33:fb:0a:96:6e:8e:
20:05:9b:a3:33:94:6f:68:7e:4b:56:d0:0e:77:e3:a5:d6:23:
ec:71:75:96:e3:d8:d2:d7:4d:e1:23:0d:d0:5d:85:6c:a0:67:
2a:af:f4:05:98:19:94:5d:94:b6:4b:25:f0:ec:c9:dc:9a:52:
3e:dd:d8:13:42:eb:b4:19:9f:5c:8f:64:fd:74:23:3a:02:da:
8c:31:7a:5c:05:0c:68:1d:ae:ef:e9:72:26:eb:2f:b5:e0:1a:
82:57:bc:e4:7c:59:64:0a:37:93:b3:07:9e:ce:5e:bf:2f:2f:
1a:28:29:d2:be:7c:f4:d0:67:0e:c9:54:d3:7d:ac:5e:d9:ac:
12:32:d9:cc:4d:0a:33:b4:41:b1:50:cf:14:10:e7:8b:c6:cd:
f3:5c:89:12:a0:9a:34:5f:ac:27:c9:e9:88:00:62:47:74:18:
8c:36:b5:a7:e9:ca:75:d9:29:96:36:ad:a6:ec:28:84:03:b4:
88:c5:85:d4:72:36:6a:25:4b:41:c4:b9:08:9b:bb:c1:7f:e4:
82:21:42:d2:a8:27:cf:e5:04:cc:b7:52:39:32:62:b7:0a:b4:
c2:98:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:59 2025 by rpki-client