Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: MwtvzHDoXAhjU+L1/BMyw24KasZ8q87ZUV3S0Y60s2w=
Subject key identifier: 94:42:D0:21:EB:99:2A:41:2B:6F:E4:28:78:6D:F3:3F:EC:CC:8E:4E
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 0196BD496D312CE36C76833E0844314C6940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 080F
Signing time: Sun 11 May 2025 03:00:27 +0000
Manifest this update: Sun 11 May 2025 03:00:27 +0000
Manifest next update: Mon 12 May 2025 03:00:27 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: zKIT9PUvJCs3mDqby0/AxFyliidVPzmW9zTbEhqZ4Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:6d:31:2c:e3:6c:76:83:3e:08:44:31:4c:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: May 11 03:00:27 2025 GMT
Not After : May 12 03:00:27 2025 GMT
Subject: CN=9442d021eb992a412b6fe428786df33feccc8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:da:aa:66:42:cc:4f:77:65:82:d7:fc:92:
46:51:45:60:16:e1:cc:1a:c8:c2:17:ca:11:01:a0:
06:41:1b:f4:b6:d2:1c:fb:f0:00:e6:89:9c:2e:ab:
0e:fc:28:8d:cd:d5:a2:30:e7:89:71:58:60:11:cf:
8a:c3:57:f2:1d:81:c2:85:6a:b1:ad:fd:c6:8b:86:
c0:d1:b8:95:10:ba:5d:c9:fd:17:86:a4:c8:ab:31:
77:07:e9:e7:51:83:f1:9b:8d:e3:a4:cf:60:73:31:
f6:8e:c4:be:d3:b0:ad:0c:7b:f9:c5:d7:b9:d7:c9:
8d:d6:46:a5:2a:64:1e:1f:fb:22:58:70:5a:26:61:
3e:d0:50:69:b0:17:52:56:89:26:b7:ce:3f:63:0b:
53:ba:61:25:71:e5:4d:af:80:ee:40:a4:11:3b:d0:
ca:b3:3e:c5:b9:79:29:08:2f:63:ef:f6:6f:d7:6d:
a6:c2:b9:26:5f:36:40:6b:fd:ec:4e:77:dd:9e:a3:
cc:b4:25:8e:b1:28:ea:ff:6c:2b:81:c7:d4:8a:e8:
b9:45:5b:3f:c8:b7:20:f5:aa:f6:3b:81:eb:a9:fd:
a0:a3:da:e3:de:c1:bd:e4:c5:83:fc:3a:bc:10:76:
4b:f4:14:f1:0b:3b:ae:f4:2c:ce:69:86:14:53:69:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:D0:21:EB:99:2A:41:2B:6F:E4:28:78:6D:F3:3F:EC:CC:8E:4E
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:4e:51:c1:0d:eb:ac:3a:4e:02:b6:f6:10:9e:d9:d5:87:
d3:b1:f7:ca:17:dc:49:57:26:09:72:27:58:b7:7b:67:57:d2:
82:6f:f5:50:e5:67:2f:2d:1f:af:63:1c:af:09:f9:cc:ea:dd:
d7:23:98:d6:90:78:b4:b5:2e:c1:e4:41:04:8d:37:53:0e:ab:
c0:fb:53:5f:8a:0e:39:10:dc:6a:49:cb:06:ca:d0:6f:bd:d0:
53:a9:8e:1c:2b:00:99:10:3e:9a:65:80:d4:09:7c:ee:8d:02:
63:95:8e:7d:36:33:7a:21:eb:88:80:8e:87:2d:33:24:12:a6:
7e:4e:a0:9a:f4:f2:6c:4b:73:75:c0:e9:46:39:cc:28:55:63:
06:9c:2d:de:9f:66:2a:09:1e:86:b5:4b:14:fa:fe:71:79:f6:
21:ae:56:41:da:1e:a7:d9:4d:ff:a4:3a:07:aa:2d:37:05:5d:
b6:80:72:d5:66:d8:7a:23:8d:4f:01:75:b0:0c:c0:c9:62:23:
04:97:7f:b7:96:72:08:2b:e9:7d:49:b5:4c:a2:9c:c0:58:8a:
2e:52:be:7f:3d:3c:34:e2:ce:c8:70:b5:a9:1d:80:97:0a:8b:
2c:e1:ae:1d:b9:a4:39:e5:b5:7b:53:e8:f4:40:29:4a:99:29:
9f:ba:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:48:35 2025 by rpki-client