Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: anj2k82uMUIM0P28XPPZfjTRcnuXW6Q1VwBO8zstCNo=
Subject key identifier: 53:6D:66:C1:41:F4:98:5A:31:EE:01:2E:99:7F:99:FF:03:17:FB:83
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 019873E3445FB33A1745821F4DA6248B34E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 01B5
Signing time: Mon 04 Aug 2025 07:02:10 +0000
Manifest this update: Mon 04 Aug 2025 07:02:10 +0000
Manifest next update: Tue 05 Aug 2025 07:02:10 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: wFWJ5WXoc8hF7A+t3P8SpeSf9dIZg/6SIG37aHL72iM=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:44:5f:b3:3a:17:45:82:1f:4d:a6:24:8b:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Aug 4 07:02:10 2025 GMT
Not After : Aug 5 07:02:10 2025 GMT
Subject: CN=536d66c141f4985a31ee012e997f99ff0317fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:36:af:4f:34:bf:87:ba:c2:53:18:e4:12:
a2:25:10:d8:ee:4d:8f:fb:43:c5:56:d3:31:cf:5d:
64:c7:18:9a:3f:16:03:76:61:ce:e3:9d:c1:81:18:
cd:36:4f:8e:1c:fc:80:15:e8:79:3a:e6:36:3e:fc:
39:9a:0e:41:dd:82:8d:a5:cc:8e:a5:db:c9:16:e7:
48:1e:35:c6:cf:92:fc:df:4b:30:67:e6:40:8d:bd:
d8:63:25:4f:29:35:6b:0b:fa:2b:af:14:e2:53:f5:
78:e6:dd:88:de:c1:15:59:a7:c5:18:21:63:65:9d:
02:84:f2:9a:13:92:d9:d6:72:f3:be:9c:0e:ff:e2:
e6:f0:21:4f:e4:5c:3e:d0:12:e6:4c:89:2a:0f:ef:
3a:3a:04:88:58:1f:bf:ed:1f:21:9c:a7:ac:ee:76:
1f:93:24:71:42:9c:d3:54:bc:4b:74:ab:fa:95:4d:
83:d6:45:5b:0a:9a:61:a9:69:32:e4:f8:0f:fe:77:
dc:86:f5:9c:87:43:a7:64:34:05:a2:50:a3:16:85:
0a:d9:f2:1d:83:62:b5:a2:5f:39:88:7a:2b:a2:73:
2b:33:d0:82:cf:e9:2a:da:e1:68:69:fd:8b:37:0e:
72:1c:b7:da:76:76:b8:e0:ac:d2:14:57:9f:7b:aa:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:66:C1:41:F4:98:5A:31:EE:01:2E:99:7F:99:FF:03:17:FB:83
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:69:2a:f4:5a:d3:1f:b9:34:d8:28:a2:91:97:d7:a3:7d:ef:
06:bc:53:01:f9:d2:20:dc:56:db:ab:e3:22:21:f1:73:9e:c3:
01:e1:11:87:7e:e3:67:4d:9d:1c:1e:3a:7d:22:fc:69:b4:3d:
5d:db:15:36:b1:e1:85:75:c6:81:12:eb:4e:5f:32:e6:24:ea:
42:68:01:10:f8:a1:58:cb:4e:0c:ea:25:ff:08:12:d4:f7:4c:
02:64:19:02:8f:75:bd:f7:37:0e:1e:f7:5a:fe:ec:d1:0d:7b:
61:17:69:2f:79:3c:0c:57:ba:e9:e3:cb:1d:9d:92:70:2b:3b:
51:60:20:34:db:22:46:63:99:3f:b4:5f:2f:4d:3a:bc:3f:a7:
b5:17:0d:5d:bd:d3:36:38:c0:1c:db:07:f2:e9:1e:77:f5:0a:
3a:67:b6:4d:f2:3a:dc:e6:45:1d:0c:e0:3b:83:25:8d:9c:1a:
c9:a7:98:2d:fb:c7:6d:a2:68:be:9e:c4:09:eb:cc:02:96:ed:
eb:e2:64:36:50:01:f9:1a:80:f1:88:a2:ba:74:93:85:c8:7f:
c2:24:5c:b3:1d:9b:b7:d9:2f:ff:42:66:7a:d4:4b:e7:28:a9:
55:92:1c:97:c8:0e:55:e4:87:40:9a:49:29:5f:e7:ae:b1:1e:
b1:3c:fe:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz40RfszoXRYIfTaYkizTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjEwYmQyYzdjYmVmMjBmMjI0YTQ3YjMyYTE1NzMxODg4
OGVjODUwHhcNMjUwODA0MDcwMjEwWhcNMjUwODA1MDcwMjEwWjAzMTEwLwYDVQQD
Eyg1MzZkNjZjMTQxZjQ5ODVhMzFlZTAxMmU5OTdmOTlmZjAzMTdmYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8E2r080v4e6wlMY5BKiJRDY7k2P
+0PFVtMxz11kxxiaPxYDdmHO453BgRjNNk+OHPyAFeh5OuY2Pvw5mg5B3YKNpcyO
pdvJFudIHjXGz5L830swZ+ZAjb3YYyVPKTVrC/orrxTiU/V45t2I3sEVWafFGCFj
ZZ0ChPKaE5LZ1nLzvpwO/+Lm8CFP5Fw+0BLmTIkqD+86OgSIWB+/7R8hnKes7nYf
kyRxQpzTVLxLdKv6lU2D1kVbCpphqWky5PgP/nfchvWch0OnZDQFolCjFoUK2fId
g2K1ol85iHoronMrM9CCz+kq2uFoaf2LNw5yHLfadna44KzSFFefe6peyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNtZsFB9JhaMe4BLpl/mf8DF/uDMB8GA1UdIwQY
MBaAFC4hC9LHy+8g8iSkezKhVzGIiOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAt
YmY5MGQwMTUxYjUzLzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAtYmY5MGQwMTUxYjUz
LzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmkq9FrT
H7k02CiikZfXo33vBrxTAfnSINxW26vjIiHxc57DAeERh37jZ02dHB46fSL8abQ9
XdsVNrHhhXXGgRLrTl8y5iTqQmgBEPihWMtODOol/wgS1PdMAmQZAo91vfc3Dh73
Wv7s0Q17YRdpL3k8DFe66ePLHZ2ScCs7UWAgNNsiRmOZP7RfL006vD+ntRcNXb3T
NjjAHNsH8uked/UKOme2TfI63OZFHQzgO4MljZwayaeYLfvHbaJovp7ECevMApbt
6+JkNlAB+RqA8YiiunSThch/wiRcsx2bt9kv/0JmetRL5yipVZIcl8gOVeSHQJpJ
KV/nrrEesTz+RA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:22 2025 by rpki-client