Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: y4JyI8MUO5NPvQWbfKQxB7jyR/HoEiqxhEWJsgtsPL8=
Subject key identifier: F0:50:42:AC:EC:84:A6:5E:F9:08:27:3E:CE:F0:21:8A:49:1C:DB:8F
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 01988BEA4F6B7924E41C5AAC178FCF86A41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 23:00:45 +0000
Manifest this update: Fri 08 Aug 2025 23:00:45 +0000
Manifest next update: Sat 09 Aug 2025 23:00:45 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: /t4Ach8xVZU+SeAH9tnOHhoIKFeYKj7dw1Y7AHA2fnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:4f:6b:79:24:e4:1c:5a:ac:17:8f:cf:86:a4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Aug 8 23:00:45 2025 GMT
Not After : Aug 9 23:00:45 2025 GMT
Subject: CN=f05042acec84a65ef908273ecef0218a491cdb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:2a:65:68:0b:d0:3e:22:65:d2:5a:4e:2e:
13:a5:38:89:c5:01:e2:4b:71:cb:13:37:bb:7e:a3:
eb:a1:41:2e:11:89:50:eb:9d:bf:54:51:48:a4:28:
46:09:2c:74:6e:2d:5f:fd:24:c5:b6:9f:d9:3b:55:
5d:d7:77:a3:d1:5b:bb:c7:a9:de:71:7a:d8:df:dc:
29:18:95:e5:fb:cd:cc:86:0d:52:c2:50:bb:7a:fb:
4c:91:ca:46:22:9d:0a:be:f7:d7:3e:33:0b:11:e4:
9f:86:6e:3e:f4:d2:54:88:60:e8:0d:c7:c0:cb:54:
74:70:1b:3a:b2:dd:cb:11:8c:0b:dd:3b:0f:9e:4a:
b9:c4:e9:bc:60:f5:4b:1b:6d:ff:f1:74:bf:ad:19:
43:0e:ee:bf:af:8e:9f:bd:fa:b6:2a:f6:f3:38:7d:
15:e9:35:cc:f9:72:4a:55:2c:ca:b4:d1:13:84:1b:
82:be:e6:d4:9a:bd:57:88:ba:9f:aa:90:13:32:46:
ec:65:67:ee:6d:a0:b4:ef:aa:10:28:e4:a8:37:2e:
ea:98:e7:88:cd:ec:03:71:e7:90:ab:af:2c:54:84:
a0:55:b5:ca:77:96:82:97:59:db:c1:fb:94:68:fa:
8f:fc:1b:ce:be:24:a8:3e:22:28:78:70:42:b8:20:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:42:AC:EC:84:A6:5E:F9:08:27:3E:CE:F0:21:8A:49:1C:DB:8F
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:08:ff:53:55:c2:4c:7d:2b:81:50:9d:ab:c2:da:bc:d0:f5:
fa:2a:38:f2:29:e2:76:45:7c:7a:2a:01:ad:be:e5:5d:b2:53:
b3:f7:b8:ce:b6:fd:11:a7:db:f6:5c:e1:73:76:bb:6e:d8:16:
d9:c4:35:13:dd:aa:c3:cf:21:56:eb:8f:21:20:b2:63:35:eb:
92:3f:1f:b8:c0:e1:99:b8:98:0b:e3:12:dd:cb:1d:1a:a3:d0:
de:e9:28:9d:c3:4f:dc:a4:dd:2b:99:5a:9d:13:ca:f9:90:a6:
bf:07:18:2b:01:17:dd:9d:58:ab:d6:3f:c8:a7:17:dc:1d:5a:
7f:1e:de:c6:97:f4:20:4e:0c:db:de:cf:55:97:2b:a1:07:5f:
29:3f:5f:66:4e:ce:55:0e:ed:76:ed:d2:43:ae:dd:83:9e:74:
db:66:bf:c1:83:35:3c:19:b1:cd:4a:bd:8f:c2:53:9b:88:cb:
31:e7:bd:03:1e:47:70:82:1b:c9:3c:6a:c9:a1:c3:7d:13:83:
8a:32:fe:3e:ec:ce:a8:fd:c5:b2:88:31:16:01:82:34:7f:6c:
81:8d:2a:f0:76:3d:9b:7f:d4:9f:3d:7c:79:28:83:dd:01:ee:
4b:7c:ec:58:5c:93:f3:0b:ea:35:ec:ff:28:8d:73:df:46:27:
2f:ab:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:25 2025 by rpki-client