Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: fOgI7+Uf5JjS4IcpLcy8DCww/8Mxgz5kFbNCeKCq0+s=
Subject key identifier: 37:2A:4A:0A:CE:C0:0D:C6:FA:75:F3:39:F3:75:7C:35:DB:91:AC:58
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019A4EF533EE3738C2259A24F0FFAFD8F320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 13:01:23 +0000
Manifest this update: Tue 04 Nov 2025 13:01:23 +0000
Manifest next update: Wed 05 Nov 2025 13:01:23 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: rxJpUnwCJrQnvwdQY3ilncqhZsbOuIMbWgQEOoiDKzM=)
2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:33:ee:37:38:c2:25:9a:24:f0:ff:af:d8:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Nov 4 13:01:23 2025 GMT
Not After : Nov 5 13:01:23 2025 GMT
Subject: CN=372a4a0acec00dc6fa75f339f3757c35db91ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:eb:48:d0:92:1d:f0:0c:a9:e9:41:1f:44:
ae:3a:2f:e5:19:a9:d6:fc:72:eb:04:de:9e:b7:42:
8c:9b:e8:bc:aa:cd:58:9f:80:09:78:2f:7f:f5:98:
f3:b4:9d:ef:a5:8f:8c:ae:30:ef:cd:9c:6c:e1:2a:
c8:d3:d1:d3:15:c5:53:08:8d:2b:01:44:8b:19:d0:
01:02:0d:1f:4a:65:5b:d9:11:db:85:a0:a2:57:cc:
1e:fa:42:ed:ee:c3:c2:bd:84:85:93:2e:b5:1f:78:
cd:32:75:e6:6c:4a:84:d0:5a:ee:fa:08:ab:1c:cd:
69:ff:86:d4:63:e0:1e:c2:db:db:78:fb:28:1a:3d:
69:89:c9:aa:01:fc:ae:47:42:ae:2f:2a:28:f4:91:
a8:1e:c8:16:f0:a3:61:d0:cd:b3:c6:ae:0f:b8:7c:
50:73:2b:ac:bf:6e:31:3c:dd:76:98:d4:a6:17:21:
7f:88:a8:4b:fc:c4:60:5e:d2:89:ea:80:42:a6:f0:
7e:11:2a:ab:57:78:0a:03:39:9f:f6:25:26:f4:5e:
42:72:b6:e7:e5:32:47:4b:00:68:c6:c9:26:90:2d:
39:0a:18:3c:24:74:4c:a8:e6:ec:f1:b2:aa:27:74:
6c:48:57:b6:70:a6:8a:29:55:19:27:24:ba:1a:5d:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:4A:0A:CE:C0:0D:C6:FA:75:F3:39:F3:75:7C:35:DB:91:AC:58
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b9:ec:f9:2f:b1:1d:38:5e:00:09:ac:86:15:29:ae:a0:76:
5a:21:68:71:19:6b:9b:d9:b6:10:c4:41:bb:19:bb:fd:f2:ef:
e3:9d:ae:a3:52:2d:92:42:ed:e4:bc:47:5b:e9:f0:df:f6:8d:
de:59:93:c2:24:2d:ea:a9:47:a2:87:fa:ff:6c:96:f9:a8:6c:
09:73:23:7b:1b:a9:27:80:94:30:7b:e1:e1:61:6d:5a:bc:8d:
c2:f3:a7:b5:74:94:ff:95:83:6e:d4:f2:52:88:c8:89:17:f6:
fe:97:ba:a9:05:8a:ea:3d:7b:75:3f:9d:3e:57:33:97:39:ac:
94:c4:d6:0c:19:43:af:0f:c3:1a:f5:a1:5d:20:33:03:e0:96:
22:2e:1f:bc:98:df:28:fd:34:14:30:85:4b:42:5b:2d:c5:54:
fa:55:8b:ed:c8:59:6f:8f:01:16:85:ea:46:ca:b6:5d:17:be:
72:e1:af:a2:80:97:47:ea:9c:bd:4b:4b:6f:90:c1:93:df:60:
3b:4b:1a:43:48:6e:3c:df:51:4c:80:fc:9c:d8:d0:c4:44:b0:
c0:89:62:b7:5c:c3:78:64:d6:42:71:05:ff:60:bf:49:46:5c:
c7:33:0c:12:6c:d5:0e:23:29:0d:ad:75:c4:58:67:12:cd:9a:
8f:b7:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:23 2025 by rpki-client