Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: EtlZL2eEKReJ/aRcBEtxJ8SmVxMVwOCoojb6WBqceJc=
Subject key identifier: 80:7D:AB:A5:DF:44:AA:04:E1:35:04:60:BA:3A:F0:F4:23:D3:8F:87
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 0198D54EBF0614976A70CE77AF0301838A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: 5K0rvC/+oBcBCXbVcFQ00jpTCKwpP8+alHl+S9cgxng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bf:06:14:97:6a:70:ce:77:af:03:01:83:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=807daba5df44aa04e1350460ba3af0f423d38f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:57:77:a9:d8:e7:a4:0a:d4:79:49:b7:77:
9c:6a:f5:d8:64:0e:81:c9:c1:73:6a:69:82:fb:11:
7c:90:d7:25:c7:96:b0:9f:66:3e:a1:77:64:18:a4:
eb:ea:29:2c:a8:ed:f2:9e:1f:4f:2d:7c:fb:bb:4e:
c6:51:ba:9a:57:da:af:44:f4:08:58:05:41:4f:9d:
08:dc:67:5f:cf:a9:c7:67:36:61:e0:76:98:c7:fa:
35:fa:ae:77:da:e4:eb:04:3b:12:57:92:06:8d:24:
26:6c:4f:d5:df:3a:40:41:4a:f1:73:1f:96:07:e9:
4e:91:9a:d6:39:1e:f5:2d:04:2c:9a:8a:df:18:01:
6f:aa:59:0a:03:3e:36:55:8a:bd:37:73:70:59:68:
8e:99:ec:cf:5c:58:62:34:06:eb:dd:50:86:b2:8d:
c8:7a:bf:e5:48:8a:40:7a:88:d3:fa:68:6c:c5:e0:
23:d7:14:bb:e2:aa:d2:d5:71:3a:82:8f:70:73:be:
5a:a2:4e:3e:30:3f:d4:50:00:1b:71:42:31:dd:42:
3b:33:87:db:81:1d:7d:c9:bd:e3:9b:99:63:3e:18:
41:9a:78:41:71:7c:7b:88:3d:22:fb:f5:5b:6a:06:
d5:8a:c7:2c:76:cc:96:fe:eb:53:03:52:1e:df:14:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7D:AB:A5:DF:44:AA:04:E1:35:04:60:BA:3A:F0:F4:23:D3:8F:87
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bd:73:26:b6:89:eb:8e:ae:4b:a5:94:be:41:83:8b:6b:10:
e0:69:d8:72:05:84:95:3a:bb:c6:79:ec:72:2b:8e:10:1a:50:
60:02:da:be:0a:f2:d3:2a:77:48:2b:27:ba:a8:fd:bb:3c:ed:
ab:46:eb:f8:54:8a:49:5a:81:2f:a8:55:ed:e8:64:8c:fc:a7:
46:c3:6a:5f:da:75:9b:c7:ca:28:a0:d6:8c:40:8e:5b:6f:db:
c7:f1:02:ee:cd:e5:40:22:96:fa:77:7e:b0:10:e7:e9:3f:90:
e5:65:25:73:21:eb:58:09:6d:56:9d:7c:dc:00:79:47:52:52:
42:88:cf:84:81:b3:64:b5:24:e1:16:81:17:4f:35:d3:6c:fe:
8e:81:fb:cd:43:c6:e1:c3:d9:13:48:f8:30:80:6c:88:9d:0d:
a1:12:88:9b:98:ad:9d:b5:9f:a0:06:bd:72:8f:7d:7c:c2:82:
3d:ce:ed:1a:a2:40:b8:4b:73:46:0e:3e:d0:ba:86:23:2c:81:
15:c8:fb:52:3e:7c:11:c0:a2:3d:38:df:00:45:5d:9c:db:b3:
16:2c:cf:ad:82:e1:ba:91:44:06:fb:68:bd:95:42:4b:db:65:
e9:37:9a:9b:f8:ea:be:eb:b0:2d:88:2a:c2:fe:8d:80:eb:5a:
3a:28:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:44 2025 by rpki-client