Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: /p/KROBguEBG0s4XzvbQFXhEzikjO+23HZJpwwYLu94=
Subject key identifier: CC:FF:55:C3:1F:A9:64:FA:30:2C:04:F3:30:B0:5B:5E:84:36:A7:F0
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 0197B6A0B434582BB9C4381C387649C7E640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 0153
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: ZcZUDMbuo9R/hIAaRbfSAXgKlwDnX916MGxkfaHn+xM=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:34:58:2b:b9:c4:38:1c:38:76:49:c7:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=ccff55c31fa964fa302c04f330b05b5e8436a7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:6a:cc:ac:99:53:bd:44:64:a0:c6:59:17:
61:80:d0:90:18:64:cd:1a:48:a6:0c:a9:61:eb:9b:
a3:2a:14:26:c3:35:2c:e5:96:c9:b0:ca:31:77:cb:
de:2e:49:5b:87:2d:60:60:2d:9e:70:c9:27:d0:5f:
6a:e1:d7:a0:e3:ba:da:e5:01:cb:1d:5c:ac:78:3c:
65:bb:36:f1:e9:c4:f7:1f:bc:13:2f:5c:a2:fa:3a:
75:4f:f0:7e:cb:6f:0a:1c:49:c1:e7:84:60:b4:46:
f8:5b:d0:c1:87:df:05:27:64:80:92:2d:0d:cf:c3:
dd:0e:83:56:6c:2a:2f:ee:66:4a:cf:e7:af:30:ad:
e6:f0:05:ae:9a:66:7e:76:e3:c8:6b:7b:81:d7:2b:
ca:2b:f3:d7:ed:a7:97:f8:47:32:ff:9b:63:87:8e:
4e:b7:0c:e6:14:45:f9:1d:17:94:c3:ce:91:f9:e7:
6e:4c:80:b3:6e:5e:f9:f4:29:01:23:cc:5e:97:d2:
ae:d0:9c:d7:41:9a:48:24:b5:6c:d8:e3:f3:7c:bf:
29:d6:55:6f:27:63:d0:64:10:df:66:24:d4:6b:d7:
3d:0b:0f:b5:ee:10:8a:43:15:e6:63:e2:a7:28:39:
8b:a2:c4:1d:36:5f:e7:3f:16:5d:1e:42:2d:be:e8:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:55:C3:1F:A9:64:FA:30:2C:04:F3:30:B0:5B:5E:84:36:A7:F0
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:51:53:35:71:d1:a7:92:92:36:b7:d5:7f:07:1d:ec:28:ec:
85:ba:fa:c1:d7:3a:fd:61:71:9d:0c:84:c0:39:c2:00:58:52:
1a:14:b3:64:2b:be:8a:a5:0b:51:3a:73:29:5e:ba:54:02:f3:
17:65:b6:84:36:9e:3b:d9:3c:c7:a1:98:89:07:50:a5:8f:4f:
79:43:f6:4c:1f:96:55:88:1f:fd:19:65:67:b8:06:5c:a0:79:
83:46:a9:d9:ad:98:aa:b9:a6:a4:3a:07:43:16:08:95:90:19:
c1:e6:40:ea:c9:2c:7c:46:9c:6b:bd:46:71:bf:dc:fe:25:9e:
6c:4a:c5:2a:fa:9a:d9:84:e7:5a:44:c7:7a:35:a3:ea:9b:38:
b1:29:ec:eb:65:43:4e:b3:f2:58:b8:58:40:af:bc:1a:47:db:
e6:42:97:82:82:2e:86:b8:b0:7b:71:5d:8d:38:ab:dc:cb:38:
68:f9:a1:b9:ed:2c:fc:97:97:dd:17:fb:48:29:6e:e2:5a:fa:
6b:86:29:e3:54:0f:ab:7a:e4:db:af:80:91:02:8a:22:b5:a0:
04:5d:07:c6:65:8e:d8:e8:45:be:ab:2c:77:70:bb:2a:43:90:
ff:07:2a:0c:fa:fc:3a:e0:84:f7:b1:da:6f:40:d2:c3:b2:60:
33:59:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:48 2025 by rpki-client