Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: AR7lxpRMnZ/u55ocqEut7VCpOBOdJpfkJnPH8MUHm4A=
Subject key identifier: 32:A3:52:97:D0:85:2C:55:BC:63:64:A6:83:6F:7E:22:54:89:3C:AF
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0198D7737C3388843C077BA1257A6DD52C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:02:06 +0000
Manifest this update: Sat 23 Aug 2025 15:02:06 +0000
Manifest next update: Sun 24 Aug 2025 15:02:06 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: 56ZEsbbsDIcBrzhV7B67sJQkNMcpypvbgENgU6KE9rg=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:7c:33:88:84:3c:07:7b:a1:25:7a:6d:d5:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Aug 23 15:02:06 2025 GMT
Not After : Aug 24 15:02:06 2025 GMT
Subject: CN=32a35297d0852c55bc6364a6836f7e2254893caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:6b:55:7a:96:f4:4e:04:62:c5:d0:f7:57:
3c:91:54:69:30:34:49:52:3a:3f:63:94:5b:7c:da:
25:78:e1:ff:8a:0d:3b:a9:31:a0:04:eb:f4:83:3d:
28:5b:c3:d2:51:1d:44:c0:64:b9:90:f2:08:97:97:
7f:aa:bb:bd:b9:00:43:8a:db:43:7b:97:ae:96:ff:
c7:c4:11:d0:97:4e:d9:84:f5:4c:18:84:4a:4b:e8:
f4:75:a2:1c:86:08:9d:35:b1:4a:12:33:1b:d4:84:
e8:f4:8d:62:08:3f:f5:f7:2d:76:ef:9f:1c:53:e0:
f8:2d:b3:70:9d:8d:46:d7:62:17:c9:c6:56:14:ae:
7d:fe:99:ed:73:80:a1:fe:38:b8:61:d7:c1:43:b4:
a6:95:90:bd:82:05:30:8e:d3:0f:f8:5c:e3:3d:67:
e4:35:fd:31:ff:78:b0:d4:20:ea:bf:68:52:7c:06:
a0:3b:5c:02:53:18:f3:d6:0f:5f:81:e7:0a:e4:b6:
5c:a4:8c:37:b3:ea:82:a8:65:91:7a:45:db:7b:dc:
25:34:9a:d5:5f:59:19:74:91:4c:e3:9a:ce:37:fb:
a0:15:c4:6e:96:8f:48:32:b0:d1:9e:4b:52:13:6f:
ce:35:03:d1:6a:3d:f8:a3:ed:c0:af:d7:6a:85:08:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:52:97:D0:85:2C:55:BC:63:64:A6:83:6F:7E:22:54:89:3C:AF
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5e:9c:5d:9b:60:1e:e1:fc:6a:c8:16:c4:53:82:54:5e:ba:
25:75:b1:a4:bd:e7:60:84:f8:46:87:5a:cb:6d:17:3d:86:54:
9a:b4:6b:18:a5:5f:28:b8:20:28:16:16:dc:79:1b:6b:de:08:
49:5c:01:55:3d:f1:48:c0:64:37:44:67:30:02:4b:32:bc:b4:
df:07:15:7f:32:9a:ae:a8:e4:88:7a:72:18:5c:8f:83:ce:2c:
84:f2:5e:a3:44:f5:81:0c:79:02:a5:26:84:e0:4e:73:ed:09:
1e:45:dc:91:f2:a3:c1:82:24:57:c2:0f:43:a8:df:50:9a:d5:
78:70:bd:3a:a2:0e:6f:3d:b0:11:a8:66:62:3d:4c:cd:0e:71:
fe:d5:cb:90:09:ba:7a:32:23:6e:de:1c:15:c1:1b:7a:73:8e:
a3:0c:c3:01:1e:a9:f8:da:c4:61:28:38:e0:5a:4c:bf:58:bb:
8c:b0:b0:3f:12:db:5c:d0:80:03:c5:e2:a4:60:91:fd:cd:31:
76:7c:fc:d2:3c:38:4a:2b:ea:f8:2f:26:83:2a:5b:8f:b6:2c:
fc:6a:2f:a8:d5:b0:42:2b:38:b9:56:13:c7:c8:5b:28:ef:89:
b4:16:cf:a0:5e:cd:dd:09:a5:d9:b4:6f:38:e1:37:c5:2d:ec:
46:56:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:28 2025 by rpki-client