Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: BfTu5Tt1t46o84ThjjYA9emVpCpqHNpsL10QGUujNMg=
Subject key identifier: 16:B9:96:09:D6:07:DD:85:AE:F3:90:8D:BC:CA:CD:0A:8A:3A:79:94
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 0199FBEBCEAEC670AEE941EA1647D08D1147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 0280
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: +IcVMfX3G1aPtwtDy90i8gv+u5JhxA5lCws7rpGSdhA=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ce:ae:c6:70:ae:e9:41:ea:16:47:d0:8d:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=16b99609d607dd85aef3908dbccacd0a8a3a7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:58:9c:d3:8b:3a:aa:1e:9f:e8:49:10:74:
f3:5f:1c:e3:0c:67:30:47:ed:39:50:e2:39:9c:a7:
c1:b6:ff:00:ca:92:ba:09:42:e0:32:44:86:4d:8e:
8f:8b:23:e2:f9:7b:81:22:d5:77:7b:15:55:4b:97:
ea:36:a4:2c:cd:7b:85:e2:af:01:0b:63:b1:bb:96:
c6:14:45:57:9d:ae:04:e0:9c:96:ab:b9:c8:86:69:
65:8c:11:a1:a7:b9:c7:37:2e:29:32:ab:85:03:dd:
39:a6:4c:2a:8e:23:40:0a:dd:26:76:f1:cf:73:09:
c7:66:1d:5a:1d:9a:cc:2e:3e:a9:d4:d5:12:c6:6d:
59:c7:ba:4e:da:b9:a2:10:8f:40:dc:0f:40:fe:0d:
6b:9f:31:07:ab:8c:82:d5:6a:3b:f5:1d:35:0c:56:
b3:c2:d7:f2:69:41:5d:9a:1e:52:29:4d:fd:90:3d:
e8:bc:34:14:8b:fb:c6:fc:52:37:82:43:72:75:c0:
c0:1e:da:b9:7d:20:12:a6:e2:27:d4:e5:8c:a1:65:
fb:4f:8c:fa:c0:1f:f4:22:ed:6f:c4:19:6c:6e:05:
b1:8d:40:89:2c:f6:4e:d8:1a:8c:34:c2:5b:8b:f2:
97:d8:00:5c:19:0c:59:94:0c:f0:7c:c1:0f:8d:b2:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:96:09:D6:07:DD:85:AE:F3:90:8D:BC:CA:CD:0A:8A:3A:79:94
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:db:60:36:fb:6f:00:cc:86:c0:56:ac:b3:49:8f:37:28:
3a:98:27:d1:f6:a1:6d:45:1d:8c:d0:95:ea:0d:d7:27:2e:fb:
15:14:f7:0d:d6:31:89:03:9d:e2:ee:3c:05:13:e9:56:a3:ca:
26:11:2a:66:72:a0:27:71:fd:84:81:6e:f3:ac:20:73:29:40:
ea:89:d0:4e:77:90:8f:76:85:4d:e4:2a:3a:24:84:9f:ef:20:
c0:ed:ed:86:89:34:4d:7f:d1:5a:3f:99:b4:81:ac:19:10:6e:
69:eb:c7:16:83:e2:7b:80:3b:6b:2a:fe:09:a5:f4:1a:7c:c3:
ef:dd:a4:cf:7a:aa:d2:91:18:2e:60:40:c4:c0:53:b1:f5:5e:
fc:0e:89:8a:e8:4a:6a:49:c4:fe:bc:9b:26:42:c3:17:e1:5e:
79:d9:c9:56:2b:a4:fe:4a:ae:e5:ce:55:0b:77:f2:f9:69:05:
82:76:37:5c:aa:ec:bc:80:92:a9:2b:1f:5f:95:f6:46:0f:09:
e8:62:88:d5:cb:44:f3:c9:a8:1a:b7:08:0e:79:02:ef:e6:91:
a1:b8:1b:b3:49:80:cc:7d:8d:04:fa:20:ef:f8:c6:ad:22:97:
8f:ff:1a:9c:1a:a2:f4:7b:c2:54:a4:8c:11:ed:55:da:4a:d6:
75:4f:99:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7686uxnCu6UHqFkfQjRFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjEwYmQyYzdjYmVmMjBmMjI0YTQ3YjMyYTE1NzMxODg4
OGVjODUwHhcNMjUxMDE5MTAwMjM5WhcNMjUxMDIwMTAwMjM5WjAzMTEwLwYDVQQD
EygxNmI5OTYwOWQ2MDdkZDg1YWVmMzkwOGRiY2NhY2QwYThhM2E3OTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnFYnNOLOqoen+hJEHTzXxzjDGcw
R+05UOI5nKfBtv8AypK6CULgMkSGTY6PiyPi+XuBItV3exVVS5fqNqQszXuF4q8B
C2Oxu5bGFEVXna4E4JyWq7nIhmlljBGhp7nHNy4pMquFA905pkwqjiNACt0mdvHP
cwnHZh1aHZrMLj6p1NUSxm1Zx7pO2rmiEI9A3A9A/g1rnzEHq4yC1Wo79R01DFaz
wtfyaUFdmh5SKU39kD3ovDQUi/vG/FI3gkNydcDAHtq5fSASpuIn1OWMoWX7T4z6
wB/0Iu1vxBlsbgWxjUCJLPZO2BqMNMJbi/KX2ABcGQxZlAzwfMEPjbLm1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa5lgnWB92FrvOQjbzKzQqKOnmUMB8GA1UdIwQY
MBaAFC4hC9LHy+8g8iSkezKhVzGIiOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAt
YmY5MGQwMTUxYjUzLzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAtYmY5MGQwMTUxYjUz
LzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkHbYDb7
bwDMhsBWrLNJjzcoOpgn0fahbUUdjNCV6g3XJy77FRT3DdYxiQOd4u48BRPpVqPK
JhEqZnKgJ3H9hIFu86wgcylA6onQTneQj3aFTeQqOiSEn+8gwO3thok0TX/RWj+Z
tIGsGRBuaevHFoPie4A7ayr+CaX0GnzD792kz3qq0pEYLmBAxMBTsfVe/A6JiuhK
aknE/rybJkLDF+FeednJViuk/kqu5c5VC3fy+WkFgnY3XKrsvICSqSsfX5X2Rg8J
6GKI1ctE88moGrcIDnkC7+aRobgbs0mAzH2NBPog7/jGrSKXj/8anBqi9HvCVKSM
Ee1V2krWdU+ZoQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:06 2025 by rpki-client