Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: OX84EUdSJi1KAdpbyecXlH4/CGp+ebnCGH/KjODr5EY=
Subject key identifier: 87:B1:F2:FA:84:EC:3D:70:09:F4:A7:29:83:FE:D2:92:C7:72:DE:56
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 019A4DE1A276EEF7181D409CD9124A76680F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: XmlNT6kEV/6F7l/zkU+Y5BssXgnW/6qlvGYC2HkP5Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a2:76:ee:f7:18:1d:40:9c:d9:12:4a:76:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=87b1f2fa84ec3d7009f4a72983fed292c772de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:30:df:66:3f:6d:67:b5:d2:78:c3:79:6b:
cc:0a:71:7c:7c:60:97:67:88:c0:e6:a2:c4:d6:35:
9d:22:17:43:57:40:9c:5e:ff:af:40:ea:1c:78:5a:
dd:1b:72:d4:2a:ff:2d:5c:73:17:7b:07:cc:ca:96:
04:e3:70:f8:4a:62:c0:79:46:15:0e:52:c4:42:f8:
20:40:be:70:c3:c3:a1:1f:fc:34:d3:18:5c:cc:7a:
d1:f8:d3:9e:0c:30:9c:96:e7:6c:9a:2c:9e:bc:cd:
07:46:ac:48:ad:17:15:93:aa:67:ea:55:af:ef:ee:
d8:91:5c:a4:de:00:4e:2e:a0:8d:62:55:ef:fd:3b:
ea:a8:40:f8:11:53:a2:92:4b:19:57:a7:3a:2d:e2:
29:30:1c:a7:9d:be:61:70:87:92:fe:0e:f5:aa:ba:
cf:c1:93:44:25:14:97:5c:58:d3:1d:c0:e0:9e:a7:
2d:c4:8a:fb:77:5d:44:31:26:48:18:e5:2c:2b:1f:
f4:4e:e1:6b:40:15:29:25:00:b5:3f:23:fa:22:45:
46:a8:d9:75:8e:37:bc:69:9a:05:e3:4a:26:aa:99:
b4:98:8d:74:21:e1:fa:9b:e8:b0:04:15:c9:81:dc:
1e:00:ff:be:5c:4e:c0:28:ca:c5:44:9d:95:0f:db:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:F2:FA:84:EC:3D:70:09:F4:A7:29:83:FE:D2:92:C7:72:DE:56
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:e0:f7:26:7f:bd:09:75:49:a2:ab:4f:72:88:da:ba:dc:
50:ce:0e:3e:84:53:1a:27:c1:a2:49:14:74:b3:0f:ac:48:25:
40:43:c3:19:64:28:de:16:65:ae:8f:81:33:d1:6c:f0:20:27:
45:2c:1c:89:24:4d:3d:f2:28:7c:63:d2:e3:f4:3e:74:7e:94:
70:51:e8:30:ce:ba:76:30:a3:ec:7d:f2:6b:03:e5:b8:f7:2d:
0f:31:44:b0:92:1c:e4:89:48:c8:df:78:49:b5:29:2b:d7:47:
d8:ce:86:ff:a0:cb:d8:a1:03:05:99:8e:73:9b:82:3f:7b:39:
37:c3:05:42:7e:b8:77:05:83:01:f8:f1:e2:53:40:22:c5:d8:
8d:d0:8b:7e:77:64:98:47:de:0b:19:19:72:e7:46:80:75:23:
69:16:53:0a:8c:76:49:0a:30:12:11:93:8d:58:68:0d:39:d2:
20:51:ff:ff:0f:7b:85:5e:ef:74:cb:3a:b6:da:d9:d1:12:b4:
22:a7:9c:ac:69:00:99:c6:04:1a:dc:83:ac:78:5e:08:00:ce:
b7:4f:71:19:1e:3f:b5:3e:32:75:50:5d:fa:b0:85:f1:77:d0:
e7:13:4e:b1:b1:81:8e:45:3c:5d:95:99:dc:97:cb:5f:7d:c2:
45:ef:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:31 2025 by rpki-client