Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: FBpfZi4AOAjxwr5+T0rSJ2IKnjENYRrv6BJOgwJVb3Q=
Subject key identifier: EC:32:4A:38:9D:75:BB:91:76:00:EF:99:EB:B6:F4:90:85:E6:30:C1
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 019A52D1B170897CAE6E493DF740A7D55AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: 02AD
Signing time: Wed 05 Nov 2025 07:01:05 +0000
Manifest this update: Wed 05 Nov 2025 07:01:05 +0000
Manifest next update: Thu 06 Nov 2025 07:01:05 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: qoAGeYcuuBme2xybnIMaxQUD6J13ahbxKJOI7iby8E4=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b1:70:89:7c:ae:6e:49:3d:f7:40:a7:d5:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Nov 5 07:01:05 2025 GMT
Not After : Nov 6 07:01:05 2025 GMT
Subject: CN=ec324a389d75bb917600ef99ebb6f49085e630c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:f0:7c:57:b6:3e:b6:57:ce:32:50:cf:3c:
c2:4c:ee:31:40:34:78:3b:01:0c:4c:93:a7:c9:11:
10:fa:07:6e:bd:70:8b:75:b1:c9:d0:ee:b4:bb:4e:
7a:c2:f5:fc:22:e5:37:8f:7a:a7:ad:80:7c:51:c3:
5b:09:b5:16:af:6b:fb:a8:28:36:d8:3e:eb:8e:1f:
39:e5:8b:f2:c2:07:a3:ce:4b:88:e0:bd:67:94:4b:
15:26:3e:99:03:a0:16:3e:25:4c:76:be:51:04:ec:
0b:b4:bf:d6:b2:db:1c:a7:9a:4f:59:4d:c3:99:4d:
c3:06:04:0b:3e:84:68:3c:87:46:84:83:21:62:2f:
79:ff:d6:93:0e:da:d4:8d:cd:ca:a7:5e:a2:83:3e:
1e:8b:72:9a:35:a5:87:12:e3:28:18:90:e8:eb:1a:
39:f6:99:4b:60:0f:90:e1:f7:4d:2a:8e:3a:54:d7:
b7:90:dd:b3:5b:56:85:7c:f9:9d:f1:53:d5:9f:f4:
3d:a0:20:f1:05:1a:53:ea:ca:46:e1:32:51:f2:0f:
df:49:60:86:1a:f9:d3:42:09:1b:63:0c:96:a0:fa:
be:a1:34:3f:ba:04:e8:26:6c:1c:f8:52:16:02:c4:
e0:85:f3:c9:4f:b2:bf:a1:ca:cb:1f:1c:7d:b3:c5:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:4A:38:9D:75:BB:91:76:00:EF:99:EB:B6:F4:90:85:E6:30:C1
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:69:4c:f8:07:f5:f6:e4:53:15:80:cb:09:e0:39:ee:00:
3b:3e:ed:d8:a2:68:d9:b2:f8:43:61:0b:03:50:53:c1:4b:f9:
49:db:75:08:25:1e:80:19:ad:ce:92:59:3c:b0:96:ad:9e:9c:
29:18:81:6c:82:0c:11:a0:b0:36:f0:ff:39:eb:2e:0a:fb:f2:
cf:1a:67:b4:b3:ce:19:3b:7f:84:7c:48:c7:a5:a6:97:0f:ef:
48:c5:79:2c:98:46:1b:29:63:ae:95:a2:8d:7f:cc:1b:4a:b4:
65:a9:50:c6:aa:4b:44:52:c6:bf:2c:29:db:a2:ac:d8:39:30:
61:8d:7d:95:f0:24:f8:ac:92:a0:1f:65:6f:e5:69:b8:c9:56:
fd:5d:c5:de:96:57:15:ec:95:d7:3a:2f:c4:02:a5:d1:30:eb:
3d:63:e3:43:f8:4a:9c:42:02:00:be:0d:3c:e6:4d:4a:e5:6a:
b9:96:ad:55:3d:c0:29:d0:a9:44:ae:4e:9a:0c:79:2e:c4:ca:
b9:ec:11:93:d2:2c:49:87:a0:4f:6f:08:b7:03:32:9a:b4:ee:
a3:ab:bc:39:00:da:25:55:de:ed:1b:5d:86:a1:f6:4b:77:6f:
e8:c4:50:3d:1d:ea:07:ea:ab:76:7b:8b:bf:b7:29:75:d3:2e:
fb:ae:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:55 2025 by rpki-client