Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: MyN6utmc95+um9bKqIp69XIvKG8s4RlorBm0+JF5Fc8=
Subject key identifier: 96:12:9D:99:D2:13:8A:BB:18:3C:F1:34:5D:AE:09:F0:33:27:9A:18
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0199FCFD93E0BFAF1C3D8B7453D00F44660E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: Sgqo6yiYbH1NTfwbTarCGHdgHryyMSd6ZtXa6oWwVNI=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:93:e0:bf:af:1c:3d:8b:74:53:d0:0f:44:66:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=96129d99d2138abb183cf1345dae09f033279a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:c5:63:58:46:33:43:e0:98:16:0a:a6:d9:
0b:f0:57:05:ea:ad:7a:47:72:5d:87:d3:b1:e2:42:
57:92:08:d7:4a:3c:92:2c:2c:42:1f:92:d1:8f:58:
a4:19:de:a6:94:37:4c:22:c4:fb:4c:4d:64:4f:c7:
63:aa:ec:0b:e6:54:fb:b8:01:9f:71:71:40:72:95:
85:eb:30:69:04:d1:0e:3f:01:dc:1c:70:71:a1:99:
e9:4a:f7:ff:a8:26:c0:2a:44:54:95:21:dd:e3:fa:
da:d8:2c:b8:23:df:4c:e7:1e:d8:0f:9e:99:79:04:
ac:bc:44:ce:31:9a:e2:9a:98:39:65:e8:19:50:2e:
b4:08:c7:3b:10:f3:90:97:9e:4e:96:4c:2e:31:54:
b1:ec:79:66:95:68:ed:a8:ff:07:ec:98:87:f5:91:
37:2e:b9:65:ff:8d:ad:90:4f:b3:85:7a:ff:4c:d6:
28:bc:b8:47:3c:3c:05:92:66:b2:cb:c1:31:b8:5e:
c5:31:6d:a0:4f:7b:bf:5e:21:8e:76:70:9b:bf:b7:
52:1e:f0:85:b8:fe:53:54:79:40:ca:b7:84:b1:08:
76:9d:40:e3:93:ce:dd:e2:4d:86:fd:32:0d:d1:9a:
fc:5c:96:74:24:11:3c:26:33:e0:1c:8f:33:a8:a5:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:9D:99:D2:13:8A:BB:18:3C:F1:34:5D:AE:09:F0:33:27:9A:18
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:3c:f0:0c:de:2e:18:dd:9e:5e:91:53:ce:ab:40:2a:23:
d3:1f:91:58:56:14:1b:00:33:17:ec:ab:9f:6f:57:88:0b:c1:
ba:1d:de:51:a7:7c:38:a7:1b:69:a1:f6:79:7a:c4:0c:da:69:
d6:37:13:12:e4:44:52:67:29:e8:24:d6:02:99:bb:58:d9:18:
08:94:9c:22:ce:e0:bb:10:55:77:2e:93:6c:39:ed:8a:22:53:
7c:12:55:3f:9a:ed:0e:f8:80:4f:25:c8:35:8a:0e:a9:e4:4d:
df:59:41:fc:78:c0:f8:7b:37:ff:81:62:17:88:1d:1c:c2:ae:
41:d5:58:a0:64:0f:ef:e9:6c:d9:76:94:5c:b7:35:b1:5c:4f:
a5:cd:b4:98:0e:9d:cf:3d:55:39:55:7d:84:27:1f:21:43:7d:
96:89:31:34:3f:46:68:18:ea:69:85:d9:a5:bb:79:10:95:2e:
c5:4d:20:7d:53:19:9d:6c:24:4f:7a:83:0a:14:49:da:99:0e:
86:a0:a4:17:b8:a3:09:3e:60:ae:7e:a8:ab:fe:48:97:3f:c3:
91:b4:31:fe:4f:3d:a2:8a:6d:ef:ee:3a:a1:fd:6b:f8:c2:0e:
2a:c2:a0:07:91:33:a3:74:5d:e7:bf:21:0e:2d:68:2b:9d:2f:
f6:73:50:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ZPgv68cPYt0U9APRGYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1
ZjU2NTgwHhcNMjUxMDE5MTUwMTQwWhcNMjUxMDIwMTUwMTQwWjAzMTEwLwYDVQQD
Eyg5NjEyOWQ5OWQyMTM4YWJiMTgzY2YxMzQ1ZGFlMDlmMDMzMjc5YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0PFY1hGM0PgmBYKptkL8FcF6q16
R3Jdh9Ox4kJXkgjXSjySLCxCH5LRj1ikGd6mlDdMIsT7TE1kT8djquwL5lT7uAGf
cXFAcpWF6zBpBNEOPwHcHHBxoZnpSvf/qCbAKkRUlSHd4/ra2Cy4I99M5x7YD56Z
eQSsvETOMZrimpg5ZegZUC60CMc7EPOQl55OlkwuMVSx7HlmlWjtqP8H7JiH9ZE3
Lrll/42tkE+zhXr/TNYovLhHPDwFkmayy8ExuF7FMW2gT3u/XiGOdnCbv7dSHvCF
uP5TVHlAyreEsQh2nUDjk87d4k2G/TIN0Zr8XJZ0JBE8JjPgHI8zqKXsbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYSnZnSE4q7GDzxNF2uCfAzJ5oYMB8GA1UdIwQY
MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt
OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl
LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTY88Aze
Lhjdnl6RU86rQCoj0x+RWFYUGwAzF+yrn29XiAvBuh3eUad8OKcbaaH2eXrEDNpp
1jcTEuREUmcp6CTWApm7WNkYCJScIs7guxBVdy6TbDntiiJTfBJVP5rtDviATyXI
NYoOqeRN31lB/HjA+Hs3/4FiF4gdHMKuQdVYoGQP7+ls2XaUXLc1sVxPpc20mA6d
zz1VOVV9hCcfIUN9lokxND9GaBjqaYXZpbt5EJUuxU0gfVMZnWwkT3qDChRJ2pkO
hqCkF7ijCT5grn6oq/5Ilz/DkbQx/k89oopt7+46of1r+MIOKsKgB5Ezo3Rd578h
Di1oK50v9nNQDw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:51 2025 by rpki-client