Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: JtXcDK15YwhvlkcyyGcyReyjM/IQnhBZYoPLoXJC8vs=
Subject key identifier: 74:AD:99:F6:9E:D3:BB:76:76:BA:82:11:3A:1E:70:B4:72:E7:4D:30
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 01977B9E432AFD466DFC511AAC0424AFDBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 02:00:58 +0000
Manifest this update: Tue 17 Jun 2025 02:00:58 +0000
Manifest next update: Wed 18 Jun 2025 02:00:58 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: /JqXiT2drlQc94DPoB6VitHo31806FRHOIBOQQrvvxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9e:43:2a:fd:46:6d:fc:51:1a:ac:04:24:af:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Jun 17 02:00:58 2025 GMT
Not After : Jun 18 02:00:58 2025 GMT
Subject: CN=74ad99f69ed3bb7676ba82113a1e70b472e74d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:99:f2:5d:2b:25:8a:df:dd:eb:3a:76:b4:
07:8a:9f:75:c8:8b:a4:9b:ad:28:5e:36:da:8e:e1:
72:91:de:95:ab:47:4f:6f:42:20:e6:e9:39:70:01:
62:bf:e7:c9:3a:7f:d3:fe:79:2f:29:44:f5:fd:90:
1f:e7:80:35:41:03:3c:2e:9c:6c:19:13:33:b0:3e:
36:bf:fd:01:8d:3f:94:eb:f4:43:d6:b1:56:9a:8a:
84:2a:d9:8b:68:89:7c:e7:8f:5a:45:91:87:9d:84:
46:e0:07:ec:89:6d:b4:31:59:94:6e:39:69:16:87:
2a:07:3b:01:4c:4c:8c:d4:38:1a:20:4e:b2:55:e7:
41:2e:c4:de:62:21:20:75:d9:71:0f:09:9b:d2:53:
6b:2b:a2:85:15:ae:9a:b2:94:e8:dd:65:b8:35:7d:
3c:a5:ea:a0:e8:8f:a1:24:ac:82:6f:ea:e1:6c:4e:
81:44:3d:b3:53:a6:0f:f3:16:0e:41:7b:04:a9:01:
cc:09:04:7b:50:9f:e2:3b:ce:4a:85:ba:c4:98:76:
aa:0b:57:96:69:24:0f:04:d7:06:b8:6d:8e:a1:ca:
02:b9:9d:32:97:c5:67:87:d9:85:1d:09:8d:dc:b9:
47:35:cf:29:6b:e0:cb:4f:7c:cd:3c:67:27:54:19:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:99:F6:9E:D3:BB:76:76:BA:82:11:3A:1E:70:B4:72:E7:4D:30
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:a2:e2:a1:fa:23:ba:26:9b:98:41:98:f2:6c:d9:3a:d0:
b5:9a:62:ec:a8:96:98:5c:14:59:7f:98:9e:3c:06:c6:f9:6d:
28:b5:53:d5:18:8b:35:05:5a:59:03:5a:f0:f3:e4:f6:99:e2:
30:3e:05:97:72:c3:04:a0:ad:19:f9:d3:4b:80:37:e6:c0:c0:
ef:51:d7:dc:f6:bf:5d:f4:2c:60:a2:c3:b7:0f:d7:3d:35:33:
a8:1a:af:a1:40:99:e4:ce:67:aa:40:1e:71:b3:35:6a:a4:c5:
36:af:24:4c:44:f1:0b:bd:94:1d:d5:31:bb:f0:ea:49:99:25:
10:9c:53:3e:91:52:11:4c:8b:8a:6f:1d:96:6d:9b:8f:09:f3:
25:45:76:6e:5a:e5:8f:7b:e2:e4:31:20:a7:13:91:20:b9:10:
82:eb:bc:d7:89:2d:12:da:cf:62:ad:26:46:9e:74:33:9e:cf:
92:d1:f6:71:de:bc:33:16:46:dd:fb:17:33:7d:b0:b3:49:1c:
61:e1:73:9b:50:61:19:aa:2b:ec:88:a3:e8:4a:bd:71:af:85:
98:cd:63:48:29:38:c6:48:a5:4d:c0:ef:a6:68:64:9f:17:83:
1f:d6:11:c8:51:30:56:7e:2e:d4:b6:36:00:9c:31:8b:47:63:
5d:ae:2d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7nkMq/UZt/FEarAQkr9u1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGU1MjQ3NTJlZDg1NTE3NWEwMTQxMmNiMzdjNGE5ZTRk
YjYxNzAwHhcNMjUwNjE3MDIwMDU4WhcNMjUwNjE4MDIwMDU4WjAzMTEwLwYDVQQD
Eyg3NGFkOTlmNjllZDNiYjc2NzZiYTgyMTEzYTFlNzBiNDcyZTc0ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dWZ8l0rJYrf3es6drQHip91yIuk
m60oXjbajuFykd6Vq0dPb0Ig5uk5cAFiv+fJOn/T/nkvKUT1/ZAf54A1QQM8Lpxs
GRMzsD42v/0BjT+U6/RD1rFWmoqEKtmLaIl8549aRZGHnYRG4AfsiW20MVmUbjlp
FocqBzsBTEyM1DgaIE6yVedBLsTeYiEgddlxDwmb0lNrK6KFFa6aspTo3WW4NX08
peqg6I+hJKyCb+rhbE6BRD2zU6YP8xYOQXsEqQHMCQR7UJ/iO85KhbrEmHaqC1eW
aSQPBNcGuG2OocoCuZ0yl8Vnh9mFHQmN3LlHNc8pa+DLT3zNPGcnVBmBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHStmfae07t2drqCEToecLRy500wMB8GA1UdIwQY
MBaAFCyOUkdS7YVRdaAUEss3xKnk22FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQt
NTkzYjc3NGZiMDMwLzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQtNTkzYjc3NGZiMDMw
LzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANmi4qH6
I7omm5hBmPJs2TrQtZpi7KiWmFwUWX+YnjwGxvltKLVT1RiLNQVaWQNa8PPk9pni
MD4Fl3LDBKCtGfnTS4A35sDA71HX3Pa/XfQsYKLDtw/XPTUzqBqvoUCZ5M5nqkAe
cbM1aqTFNq8kTETxC72UHdUxu/DqSZklEJxTPpFSEUyLim8dlm2bjwnzJUV2blrl
j3vi5DEgpxORILkQguu814ktEtrPYq0mRp50M57PktH2cd68MxZG3fsXM32ws0kc
YeFzm1BhGaor7Iij6Eq9ca+FmM1jSCk4xkilTcDvpmhknxeDH9YRyFEwVn4u1LY2
AJwxi0djXa4t3w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:16 2025 by rpki-client