Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: F8oXBZpL7no12prRBnFjBFqxKJY8MI1x0TRnN6DYhgk=
Subject key identifier: 37:40:5B:18:C9:11:61:5E:74:08:0C:C2:00:0C:2E:8A:BE:47:CD:03
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 0197B77CD63D11792F518B0B9D0592EFF20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: jGO7B0YLfqax7oYVh8Qq1CvATY5/FOOCnmokczYj4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d6:3d:11:79:2f:51:8b:0b:9d:05:92:ef:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=37405b18c911615e74080cc2000c2e8abe47cd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:31:8b:a0:d5:73:9d:22:51:f5:c0:b4:e8:
b0:a0:f3:0a:06:28:09:30:b0:0b:63:8e:41:68:29:
60:8d:44:71:7f:7d:8a:70:8f:9b:48:0e:e8:67:1e:
73:21:34:c2:20:63:20:79:89:37:21:e2:19:0f:07:
46:77:85:b6:2b:e3:d7:b3:cc:82:17:2a:a8:ef:12:
b2:92:55:36:e9:e3:33:3c:42:d5:a2:ae:29:d7:bf:
8d:9c:1e:b4:5f:a6:03:d6:86:af:c7:e5:03:c2:2e:
9c:9c:7f:d4:8f:5d:40:23:75:bd:c8:49:3e:13:a2:
d1:32:98:e9:ac:28:bf:42:50:ce:12:05:4c:07:57:
61:f4:bb:3d:b9:2c:86:9d:f8:53:bd:e0:aa:25:7e:
d4:a2:29:9c:b1:fc:e5:79:07:50:03:ce:7a:eb:98:
41:24:36:5e:78:e1:61:67:fa:52:1c:f3:88:d2:db:
47:16:9e:c6:36:e9:6e:4a:26:3a:eb:cb:d4:22:d9:
b8:76:ea:76:20:13:ce:02:10:04:a4:45:ae:24:fe:
a4:2a:be:6f:3a:65:2a:eb:ee:f3:9c:0b:66:02:da:
4b:b2:cd:d7:76:59:dc:f1:a8:76:0d:12:14:2b:04:
49:80:1e:13:2b:f7:c7:21:14:9a:e9:2e:bb:b5:4a:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:5B:18:C9:11:61:5E:74:08:0C:C2:00:0C:2E:8A:BE:47:CD:03
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:ae:47:93:3d:2a:a6:05:78:54:d1:71:e1:80:ab:2e:a3:
f7:1f:bc:06:03:81:ad:37:65:af:40:1c:8d:37:2b:d8:7a:95:
70:4e:9e:3a:af:94:3d:78:a9:71:6c:b0:34:7a:21:f1:45:7b:
3f:f9:76:29:21:7f:4a:64:ae:2d:47:a0:bd:94:e0:ee:d2:04:
d6:a4:70:79:ca:df:fb:80:66:fa:91:20:d1:1f:bc:83:52:b6:
bf:da:e0:58:34:d2:b8:f3:ab:41:b2:e9:28:40:b5:a3:a1:da:
d1:af:a7:4f:4f:41:66:a7:a2:cf:8a:be:d9:6b:aa:31:f8:07:
79:16:49:3c:20:8e:58:09:16:f0:d1:3b:6a:9d:54:5d:06:cd:
78:47:db:f5:ef:18:6f:65:b1:f7:8a:a6:f4:a7:05:c7:70:bd:
18:d7:69:7b:1b:c5:56:db:e5:f3:f3:c5:2c:49:0a:7a:5f:fe:
15:93:4e:8e:8b:07:f1:86:70:46:9c:7d:4a:25:9b:e8:96:90:
32:d7:da:69:95:5b:fb:7a:29:b4:46:71:e4:6f:b0:cf:7c:ea:
c6:ed:f0:56:f0:42:80:1c:31:ae:7b:d2:8f:0b:f9:1b:50:25:
23:47:b1:a7:91:0e:f1:6c:fb:b1:a1:38:48:50:8b:14:80:14:
e7:da:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:16 2025 by rpki-client