Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: kcOtJA4jrFXIUa8ecZ17LkUCHxjvju8vhJGxY1lqA7s=
Subject key identifier: 39:D2:53:B1:3C:71:D1:80:20:8B:DD:10:34:39:C2:D0:9D:28:F1:21
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 0198D4723A0D1E7A9957838F749849BE8829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 01E7
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: lRZ4SBbw9COMuICIKj2nUADLxzPerP7uzNqoPpstm+0=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3a:0d:1e:7a:99:57:83:8f:74:98:49:be:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=39d253b13c71d180208bdd103439c2d09d28f121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:d5:92:47:6e:10:e4:74:82:1b:0a:22:0d:
60:15:13:a5:58:38:a7:72:0c:2a:76:a4:45:aa:ce:
0e:e9:ec:d4:ab:88:0c:06:0f:b1:59:10:a9:fc:01:
8d:12:6c:01:42:60:b4:c9:a6:85:ca:0e:2d:41:d4:
97:e2:e5:06:ae:33:af:f0:e6:d9:56:fd:4d:a1:0e:
4d:ff:d4:83:21:66:f7:28:f1:97:86:62:a3:44:73:
b1:77:41:96:59:c0:5e:4f:72:72:16:c5:90:36:b1:
c1:0f:71:df:2f:f5:4b:44:fe:e9:c8:53:2a:33:ed:
c7:9a:18:f6:ad:20:ba:ba:37:ef:ba:57:e0:f4:a1:
47:d2:bf:da:22:8b:87:9c:dd:91:3c:3b:1d:95:6d:
3d:bc:a6:a2:88:85:b1:94:23:56:b7:ae:55:c6:be:
a1:de:41:0f:2b:a1:d4:db:8a:13:03:98:08:a4:10:
26:7e:23:95:16:fe:8e:ca:14:ee:11:52:b6:69:00:
5c:0e:1f:a4:81:9e:83:b1:a4:bb:59:59:a1:e7:6f:
3b:41:dc:96:e9:77:5f:42:45:ef:3a:bd:60:ab:2c:
93:5a:ec:92:c0:75:fe:2f:3d:a3:fa:e5:46:d2:6a:
be:bc:6f:57:e0:f5:b8:8b:96:b6:f5:76:24:c6:30:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:53:B1:3C:71:D1:80:20:8B:DD:10:34:39:C2:D0:9D:28:F1:21
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:56:24:41:7b:87:be:01:17:fe:99:e8:ea:ce:3d:7c:aa:
a0:e3:1f:32:e4:41:92:a5:ae:2e:92:92:4c:45:1c:c6:b4:98:
1e:fa:a4:f6:25:5a:72:4a:18:e7:00:8e:45:17:70:18:79:7c:
77:a2:18:ba:ed:b4:ac:4b:09:02:3e:8a:32:79:2b:c6:c4:aa:
58:65:5e:71:80:a4:53:b3:3b:bc:17:80:1c:0a:05:fc:98:a4:
86:30:a4:71:cb:f4:ba:78:45:17:32:1b:e1:61:d2:09:80:05:
64:07:b4:a2:05:fd:26:e0:ea:c2:24:d1:5b:08:5c:98:16:33:
88:9f:71:ae:99:fb:99:d7:95:67:d2:69:cb:e9:4e:5d:d1:db:
e3:56:2f:34:ef:35:1a:ac:26:ca:3c:cf:26:e1:89:27:58:10:
4b:26:80:be:a1:48:a6:e0:11:7b:44:c8:b3:20:06:2e:72:11:
fd:c9:bd:5c:51:71:0c:ee:ab:5d:1b:b8:8f:13:72:46:d9:e6:
b7:40:4e:ce:23:14:ba:83:a1:46:be:32:b8:dd:c0:28:87:ef:
94:5f:a1:fc:45:92:6a:77:db:43:cd:15:85:a6:2e:13:18:4b:
e3:94:28:bc:3c:d0:da:86:75:36:b3:07:5a:98:08:ab:a4:9e:
e5:be:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:56 2025 by rpki-client