Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: Y+85tUf7Qp5PyaOhyrOKeWjP96nOZ28xQXCmWEtp0bk=
Subject key identifier: 5E:98:67:50:9E:C3:BF:41:0B:AB:4D:21:06:F6:17:1E:CA:30:8C:8E
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019880546997175950EC6ACD92D476D4A9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 081E
Signing time: Wed 06 Aug 2025 17:01:12 +0000
Manifest this update: Wed 06 Aug 2025 17:01:12 +0000
Manifest next update: Thu 07 Aug 2025 17:01:12 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: fGeLvK2PgSTpo6A9GHMfT1y7xjA+s/Jj3tvlHep7Zcc=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:69:97:17:59:50:ec:6a:cd:92:d4:76:d4:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Aug 6 17:01:12 2025 GMT
Not After : Aug 7 17:01:12 2025 GMT
Subject: CN=5e9867509ec3bf410bab4d2106f6171eca308c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:cf:2f:95:d5:c4:45:a6:3f:3b:de:88:70:
f4:28:79:21:26:86:fd:d5:de:1f:4e:07:47:2e:c7:
3e:29:23:89:30:6d:b7:e8:42:1c:a1:bf:d4:73:6a:
61:88:ae:51:9b:7c:2c:03:78:36:dc:13:59:1b:d2:
07:6d:38:42:c4:ef:f5:b1:3b:6d:4e:b4:b6:c4:9c:
e4:25:9c:01:2e:f4:f1:ba:34:4a:06:5e:85:bd:4a:
ff:69:f5:06:58:ca:2e:c2:e5:6a:aa:ae:c7:a9:e9:
09:12:7d:63:c6:71:95:ed:3f:11:41:dd:34:7a:64:
82:84:cb:20:1c:ec:93:d3:ec:81:bc:8f:3d:69:62:
9d:ad:24:fe:5a:d3:c1:70:95:af:20:14:9e:85:53:
b5:2e:d3:f8:f2:ac:5a:3d:1a:dd:e3:22:43:a4:a5:
24:00:ca:c1:8c:1d:d8:8e:e5:9b:3f:9d:c5:3e:5c:
92:f0:85:f8:99:4e:dd:8b:84:1a:7f:61:1f:07:6a:
31:c1:9c:83:9b:43:ea:e1:86:a3:a3:f9:05:b3:63:
76:01:7d:a2:47:b3:8a:d9:5c:de:80:f5:d5:a1:76:
12:cc:d1:4b:9b:8e:41:6b:8b:21:e4:f7:69:c0:b5:
81:02:95:54:18:de:8b:79:5d:8b:c6:dc:77:9b:71:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:67:50:9E:C3:BF:41:0B:AB:4D:21:06:F6:17:1E:CA:30:8C:8E
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:ea:1f:14:ad:7a:f9:7c:88:35:56:89:4a:c1:ee:c9:3f:
02:17:f9:41:78:16:b8:77:bc:0e:05:8f:3f:57:12:ce:32:ea:
26:2b:58:39:c8:f7:ce:c9:34:0e:1e:e0:bf:8e:ea:40:5d:06:
96:4c:c4:01:53:bb:e1:ad:a4:61:42:2d:2b:68:29:ee:65:3c:
97:e9:6c:ce:69:d4:27:0f:ef:72:6b:6b:ab:7c:b0:3d:a7:8c:
34:67:33:11:dd:a9:62:c8:2f:c8:65:f3:fb:2f:50:4c:84:cf:
0f:b9:bc:de:85:92:d0:02:a9:7c:00:48:5c:60:19:53:fb:68:
6a:5f:9f:44:d6:4e:b4:59:fe:5b:a8:8e:db:a9:49:20:2c:74:
d0:c9:0d:b3:ce:05:23:ef:ee:8a:bc:00:f4:55:f2:67:c2:03:
c7:8d:e4:f2:79:79:35:2a:37:44:14:0f:c3:e3:33:27:98:17:
20:0e:c2:a5:f4:ef:be:ea:c6:bb:a7:07:be:d0:02:7b:38:0e:
6a:f8:f8:e3:7a:de:35:ae:70:92:0d:fa:fe:52:2d:33:d3:53:
a8:2a:5c:50:ee:d8:d1:2e:16:bf:94:e0:cf:74:3c:87:20:a0:
87:6e:5a:de:b9:01:58:bb:f1:df:78:7a:f0:31:b6:d5:1f:6b:
fe:94:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:28:53 2025 by rpki-client