Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: i6gJaUHkAR/PcaVKLAomTHFevzb/fIslEqAfRhqmvag=
Subject key identifier: 54:34:95:5F:B9:BC:1F:AA:7A:5E:94:95:F2:EE:F7:B9:D1:A9:78:F0
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 0199FCC607D4DCB2E37AF575CF62A8ED4E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: q0UXRmQ/NOwH3cV9GOWoRqsqcAVkn+AmazcbjWZlFmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:07:d4:dc:b2:e3:7a:f5:75:cf:62:a8:ed:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=5434955fb9bc1faa7a5e9495f2eef7b9d1a978f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:b6:56:39:a1:aa:81:da:a4:ee:a4:66:9d:
29:90:b7:0a:ac:37:31:a0:26:da:ba:70:53:d6:70:
85:8a:ba:bf:24:f9:3f:8f:3c:70:9d:42:b7:c6:ce:
93:d0:b6:8c:e8:e4:56:45:d1:89:ee:00:e3:7b:08:
53:26:9f:a7:a0:41:2b:7a:11:61:34:b9:93:9e:89:
29:cb:26:f2:1b:4c:10:36:a2:0c:81:09:76:7a:a3:
c8:a2:4f:c7:da:5a:2e:4e:01:f3:6e:79:6a:45:51:
a9:5d:10:5e:3b:ad:e3:ce:8c:6e:e3:9b:ee:99:31:
89:df:18:e3:e2:e5:c2:57:9d:bb:b7:86:77:fa:88:
03:4d:14:e0:1f:91:62:f9:8b:f8:3d:17:c8:f0:02:
5a:9c:5d:1f:39:cd:55:81:52:5c:3d:38:9b:c1:d6:
fb:3d:b3:a3:ae:e6:ca:6b:d9:18:36:6b:dc:1c:dd:
33:4a:85:04:b1:1b:8f:fb:54:19:97:b9:bb:1a:bf:
39:5c:19:a2:31:b8:d7:72:53:25:3f:5b:13:02:58:
b3:92:62:b0:36:e8:4d:74:2a:e5:b0:a6:76:15:cd:
d4:2a:18:d8:81:52:8b:91:31:f0:bc:50:64:25:e4:
90:65:86:fe:12:37:4f:b1:e6:77:11:99:89:1e:0a:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:95:5F:B9:BC:1F:AA:7A:5E:94:95:F2:EE:F7:B9:D1:A9:78:F0
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:83:23:86:bc:eb:1c:3f:09:a1:e3:c7:91:4f:79:a5:3d:
e8:ed:3c:d8:3b:c1:f6:36:49:16:fe:98:9a:70:62:ea:4c:58:
3d:5c:62:df:69:9b:8f:dc:ed:b6:e2:b4:95:3d:36:67:3e:1d:
90:8b:b8:c9:b5:63:9e:a9:03:69:95:2f:0d:48:55:a4:71:31:
38:d2:de:4a:31:c6:f4:eb:a4:1e:54:6c:1c:51:bb:51:0a:f0:
e8:1d:77:87:21:f9:41:25:b5:6e:37:30:7d:48:a1:8b:3d:4f:
3e:07:cc:0e:55:76:23:67:02:4f:e8:14:8b:a6:2d:9b:19:16:
a9:35:a8:8b:4b:b7:92:98:be:e6:7f:fb:e8:6e:83:0d:f0:c0:
28:3c:29:50:ab:6d:03:79:89:18:08:ab:ea:83:3b:62:e0:16:
8b:ff:61:70:89:de:34:de:d0:4b:90:00:48:12:63:ed:b8:31:
e4:df:e0:16:12:2a:7e:08:c4:92:67:76:5f:ba:72:8a:d7:eb:
1f:dd:98:ac:81:fe:97:e3:87:e5:37:ff:a9:98:29:4a:a9:0d:
13:88:40:d9:06:c7:1d:1b:8b:c5:c9:ce:f2:23:52:21:21:45:
18:97:28:7f:14:0e:1e:b2:35:34:0d:b1:4c:10:81:8c:8f:60:
94:9a:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:55 2025 by rpki-client