Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: RDobSF0ShKX+fpIyLKfk4k3ua7DH47aZOmmlV1pOIxo=
Subject key identifier: 72:FF:14:30:8C:4D:AC:87:64:F1:1F:8B:26:0C:88:5F:C7:A4:D4:2F
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019A4FD00DE5FC3FAB2E07D0655AF144B6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 090E
Signing time: Tue 04 Nov 2025 17:00:26 +0000
Manifest this update: Tue 04 Nov 2025 17:00:26 +0000
Manifest next update: Wed 05 Nov 2025 17:00:26 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: i9T7LL9d1HIgJqCmugr251kmI9M2L0+1fA2pw2aJurE=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0d:e5:fc:3f:ab:2e:07:d0:65:5a:f1:44:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Nov 4 17:00:26 2025 GMT
Not After : Nov 5 17:00:26 2025 GMT
Subject: CN=72ff14308c4dac8764f11f8b260c885fc7a4d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:34:6d:ae:70:0d:cf:63:1c:74:63:ab:89:
52:65:9f:2e:cd:79:31:ef:e1:f2:1b:20:de:0f:c9:
a6:3f:75:f0:21:35:98:85:d0:db:7e:81:5e:c7:d9:
a9:89:b4:34:31:13:93:a3:8a:d4:09:f4:13:e6:48:
3e:62:a8:3e:b0:08:68:67:fc:e8:d3:74:ea:99:05:
f8:a5:77:6d:11:a2:ca:f7:78:59:30:4a:1c:13:7b:
d2:cf:cd:74:5a:a2:57:5d:3d:81:0f:26:e8:4e:22:
1a:e4:de:74:95:1b:58:9a:2a:a9:33:e2:42:29:ff:
0c:bb:a3:7b:e6:bd:ce:55:4a:4c:38:d7:0d:9a:d2:
19:5b:14:55:f1:6a:1c:e6:89:57:73:b4:b8:bd:16:
43:15:bc:22:6c:0e:5e:1b:74:d8:b5:57:62:36:16:
7b:66:01:1c:82:16:19:1a:68:7d:e1:2b:2d:71:e1:
f9:cf:70:04:bb:7d:15:33:81:d2:76:c0:ff:6b:db:
f3:8d:d7:74:61:55:22:4d:79:69:5e:f5:a3:dd:4c:
09:63:d9:f6:24:86:5c:ac:11:cf:f5:67:1c:51:a4:
67:40:64:dd:c2:a6:ba:22:70:c2:fe:42:12:7f:56:
5b:1a:10:0b:51:07:4c:f7:4d:68:37:15:4a:09:33:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:14:30:8C:4D:AC:87:64:F1:1F:8B:26:0C:88:5F:C7:A4:D4:2F
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:a1:44:3a:70:a0:a2:d4:d4:9a:9f:97:79:70:7e:59:77:
5b:e0:2f:b1:13:a0:ac:c7:e1:a9:fe:3c:23:80:1c:c5:1c:3a:
8d:f0:5e:79:92:88:08:2f:8d:b8:34:51:78:e8:9a:d1:d3:53:
cb:1e:a1:35:21:62:96:7e:8e:89:63:d3:4b:fa:f8:74:a7:6b:
f9:16:89:c9:d8:b9:5b:8c:72:f4:41:e5:29:27:b8:16:7b:36:
fa:bf:82:38:ab:a8:6c:c7:7c:68:8b:75:5f:30:ec:90:d5:df:
36:e4:01:58:aa:82:a7:75:bf:4a:ad:45:76:22:0e:35:15:ff:
8b:80:13:29:9f:6e:6f:ee:2d:2e:fb:76:d7:75:af:8a:2e:28:
f9:b2:16:80:26:9a:09:d2:a8:64:2d:49:24:ea:e4:69:5b:5a:
18:51:23:50:3f:3e:33:b9:63:9b:bb:f4:87:c7:78:30:14:51:
9b:cb:44:17:4e:90:46:f9:12:e1:74:32:81:5f:96:92:ca:92:
a4:67:a4:72:01:52:ce:d3:d8:db:ae:ba:80:4d:7a:e1:dc:f2:
55:ff:39:f5:c6:95:9e:f5:07:25:e7:64:42:65:f9:55:10:f3:
b3:86:f1:6e:22:58:71:88:d7:d4:17:29:dc:06:be:52:48:cf:
75:0b:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:22 2025 by rpki-client