Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: c7fM/TI1JoTTOgthSFNQoAhcTh3nt3UAe7EV5jHTgo4=
Subject key identifier: 04:A9:9E:79:D8:F3:35:CE:9D:5A:D4:79:B5:A7:CA:1A:87:81:F5:26
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019873E31F667E48841BD969940C9C1F86E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 15EF
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: MUsf7vtwTBSNNKAaig/HL7r45uOuDoeeM5wnxd6Dgbo=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1f:66:7e:48:84:1b:d9:69:94:0c:9c:1f:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=04a99e79d8f335ce9d5ad479b5a7ca1a8781f526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:15:c7:37:9d:b5:32:9e:48:a5:4f:a1:46:
1b:ac:63:07:5c:bc:e0:4e:64:c7:df:1e:06:a5:33:
09:f7:a6:2a:b9:3b:d6:23:eb:b4:b4:64:23:81:d7:
14:d1:4c:9e:02:f9:c5:5c:a0:00:08:e1:56:d0:60:
b5:f5:c6:1e:ab:c5:8e:0a:cf:a2:72:77:cd:d2:0b:
4f:c4:e2:86:42:02:1b:63:71:26:b6:c1:02:bf:47:
ba:ef:89:23:ab:78:0d:d3:c2:28:bc:b6:d0:06:6f:
11:b8:9d:fc:98:c8:50:dc:84:4e:38:7e:6a:19:12:
eb:ab:be:16:36:db:09:39:2b:84:26:d5:f1:ef:10:
2e:94:de:f1:27:3d:68:9f:14:b4:b8:8b:08:11:0d:
29:0c:b6:35:22:05:b2:6f:14:46:02:4d:ee:57:86:
1e:37:1a:82:0e:96:45:19:61:60:6e:c8:86:d2:cc:
f8:21:1c:17:9c:0f:c7:a9:2b:90:8c:08:34:6a:19:
23:c3:e3:e7:a2:2d:fb:a0:a3:90:fb:c5:06:c4:aa:
9d:c0:bb:e5:16:9c:f4:e1:67:ca:78:9b:94:7c:d7:
32:70:49:f9:d7:1e:f5:d5:62:85:69:a0:b3:d1:26:
da:05:cc:b4:68:01:0e:0a:ee:04:48:19:41:01:39:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:9E:79:D8:F3:35:CE:9D:5A:D4:79:B5:A7:CA:1A:87:81:F5:26
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:cf:25:de:49:ca:dc:c0:9e:56:38:89:c9:f6:ec:da:02:
c3:03:4d:d4:97:5f:d9:2b:f7:a4:4c:2e:27:68:4f:ab:47:c2:
b9:f6:6f:e6:e3:c2:c6:00:07:8c:1c:62:f1:26:38:ef:70:f4:
6b:1d:cc:92:4f:3f:d7:af:4a:9a:f2:40:5f:c3:39:aa:d3:da:
60:70:4b:ba:ca:8e:79:95:df:ca:9a:dc:62:b8:e6:82:79:a3:
ea:da:3c:7c:7f:1c:4b:b4:50:d5:54:9c:fc:a2:2e:71:c1:38:
69:d4:2b:84:13:1c:2d:b5:cc:ea:34:26:2b:1d:e9:0a:fe:19:
6f:ae:52:2b:df:7c:47:ea:02:99:74:84:a0:44:ab:7a:28:c4:
a2:10:da:28:bc:79:4c:ce:39:9d:5a:b6:d2:ce:fa:8c:bc:83:
39:14:ab:74:c7:c2:b9:40:97:39:89:d5:c1:36:16:c6:e6:e8:
75:8c:d2:d4:6b:3b:25:c2:fb:a7:e8:f0:d3:dc:80:0f:a5:d7:
88:01:01:9c:33:01:40:3d:4e:a8:42:38:b2:6a:21:8d:e6:4f:
ff:ed:99:22:42:d8:4f:4b:6c:4e:f2:92:1a:01:0b:cb:e5:8b:
d2:fe:5e:4a:99:b2:ab:da:d7:38:28:f3:fd:dc:e0:cd:9b:9f:
90:44:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:34 2025 by rpki-client