Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: sC/7cuYajLmuQQxc0RJr3QD5XUNtKW4oe94GR3mZ0UU=
Subject key identifier: 92:3C:08:97:55:2C:E9:D9:ED:53:7E:35:1F:84:4E:74:AB:76:94:40
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0197B7B3408F51477B1E95227971CF21E547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: E1q5P1ADhWCICsmJKNeC0CA21F8sHWjcrJomF5uRBHE=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:40:8f:51:47:7b:1e:95:22:79:71:cf:21:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=923c0897552ce9d9ed537e351f844e74ab769440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:f9:de:45:92:9f:c7:2d:61:81:cf:34:ac:
3b:38:f4:12:ad:a9:05:81:23:e4:dc:f4:be:d0:ab:
d1:49:29:82:40:57:9f:26:93:bb:fd:4a:49:df:9f:
83:c2:f7:38:e9:ad:38:62:cf:9a:36:bb:5d:9f:2f:
7e:ae:e5:74:82:15:2e:00:fb:b4:02:49:0d:a7:0c:
ed:9f:2f:20:34:33:f2:c4:c2:5b:db:36:33:de:bc:
72:5f:82:23:94:b7:ce:8c:87:e6:8a:5f:27:7d:a1:
0a:bd:21:07:98:ca:70:1f:7b:92:e5:12:80:11:66:
f9:7b:51:b8:db:37:33:9d:56:aa:c3:7f:5e:e0:a0:
b5:76:b0:05:10:c4:36:00:a0:b5:e2:f7:53:75:26:
f0:0b:b8:9d:fb:d7:8d:a1:e7:85:38:2e:c8:6a:72:
83:6f:d9:6b:27:b1:6f:a9:3a:f0:96:06:d3:73:8f:
c6:76:17:dd:af:55:8b:c7:06:65:84:c2:95:aa:0a:
62:be:b5:e4:5e:2a:1a:0f:52:78:c7:ce:0e:ad:59:
a6:85:78:33:2b:c1:5e:22:54:16:6e:c4:64:c6:45:
1e:12:3e:29:01:43:15:b5:64:0e:b0:b5:49:d2:af:
7a:fe:33:7f:52:51:87:e3:90:c5:70:f0:d3:33:a6:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:08:97:55:2C:E9:D9:ED:53:7E:35:1F:84:4E:74:AB:76:94:40
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:98:14:45:aa:08:88:e4:01:28:6c:74:9c:5a:4b:16:29:3c:
fa:bb:63:ea:98:5e:db:8a:a1:49:7c:2e:15:6f:cc:d1:fe:aa:
d7:24:4e:f4:b7:70:34:60:de:53:28:9a:8e:33:87:fd:ad:1d:
14:07:d6:60:77:da:44:9e:52:cc:3e:f2:89:3f:58:9f:d2:cc:
30:41:7d:3e:c7:e8:2e:17:df:78:84:b1:1e:86:27:af:e7:39:
d8:a6:13:f6:97:bc:4e:51:fe:8f:5f:90:23:44:e5:6d:5f:8f:
65:a5:09:bb:9b:f3:e1:59:34:09:5c:f6:d7:5c:b4:d1:8b:1c:
c5:45:a3:f6:e4:d3:43:10:6b:3b:35:2e:64:11:65:26:90:8b:
1d:d1:00:f6:da:bd:bd:a1:4a:ff:57:0c:4b:23:ed:3f:1a:f0:
b6:22:cf:5f:55:a0:9f:fb:09:1f:bd:5c:7c:54:ea:d5:41:47:
07:9a:64:cb:ea:18:72:f7:59:b0:75:1a:7d:d0:f1:0d:db:6b:
cf:07:dc:d0:ca:58:d7:15:41:d9:b8:95:95:c3:8c:ca:28:6c:
52:65:b3:e5:d9:d7:01:a4:32:d8:4e:56:1a:67:99:57:6e:2d:
91:de:89:27:fc:ab:68:50:96:ff:c2:25:d5:58:d5:b3:6e:d5:
27:ef:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client