Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: JYk7dciTOdb9FCay6tRb/hPuq0C6OJOo8Bt+w84oDK0=
Subject key identifier: 79:82:33:25:F0:4D:29:19:B7:24:1F:E1:2C:AF:88:9D:FD:BE:0C:76
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019893A4314335B2DE263FBB00587CF29F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0874
Signing time: Sun 10 Aug 2025 11:01:07 +0000
Manifest this update: Sun 10 Aug 2025 11:01:07 +0000
Manifest next update: Mon 11 Aug 2025 11:01:07 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: XV/AQ0gg1oHmqW4tJyVxtYIghbRUb4bfLSDM69FG8bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:31:43:35:b2:de:26:3f:bb:00:58:7c:f2:9f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Aug 10 11:01:07 2025 GMT
Not After : Aug 11 11:01:07 2025 GMT
Subject: CN=79823325f04d2919b7241fe12caf889dfdbe0c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:c7:27:d0:e1:3a:96:a9:cd:a8:7c:ca:86:
91:5c:c3:33:95:3d:6b:80:a8:15:0c:14:30:8e:d3:
61:30:8c:15:68:07:fe:d2:ed:73:b7:cd:95:05:e2:
20:11:5c:6c:d5:da:49:9a:30:f8:5a:94:a8:33:38:
7d:70:2a:d0:df:63:a0:13:d7:e1:66:97:f9:1a:8b:
b2:15:c0:25:74:e5:7d:f1:90:7e:45:b7:39:d1:10:
8b:fe:b6:79:a9:5a:d0:f8:97:fe:27:72:95:ee:ca:
75:b6:12:e8:72:13:07:83:fa:75:e3:00:af:b1:d9:
d3:02:2f:ab:13:37:cc:57:2f:b9:50:7b:84:f1:30:
21:31:4f:d2:24:b3:3e:90:0e:5e:c0:ed:e3:61:ba:
42:43:6e:de:25:9c:58:d9:b8:21:3e:c3:00:60:39:
82:0d:7c:29:81:77:04:30:17:e5:8a:cb:1d:37:e2:
70:84:4e:fe:8a:47:66:ad:19:86:08:c1:4f:5b:17:
59:5a:33:ff:a2:dc:c1:2f:fe:c9:f5:1a:4c:b8:65:
97:65:2f:e8:a4:14:3e:45:58:50:95:04:5f:04:bf:
9a:67:c5:57:36:c0:c8:94:fe:d6:e3:a7:3f:c7:df:
c3:1d:9c:31:95:94:9c:9b:70:a2:42:8c:24:b6:f8:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:33:25:F0:4D:29:19:B7:24:1F:E1:2C:AF:88:9D:FD:BE:0C:76
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:86:03:4e:14:ff:22:e5:16:d0:2e:13:16:95:db:53:2d:
5f:a3:60:45:05:00:53:50:29:35:90:ac:6c:5d:6e:6b:45:a0:
87:3f:2d:08:95:7e:00:99:72:fe:5e:bf:f8:96:06:4b:71:94:
99:78:fe:09:70:cb:92:9d:db:8f:e5:24:c7:b8:7e:15:86:b9:
48:5e:45:76:21:2b:0e:d8:8f:40:f6:de:de:52:da:28:3e:f6:
11:9d:41:83:75:4b:a3:aa:ea:41:75:49:33:ad:b9:84:87:e9:
fd:ac:5b:3e:78:51:e0:b3:4c:61:99:99:5b:0c:76:74:a6:f8:
b0:4b:c3:32:75:55:a0:c0:62:8c:56:6b:fb:71:87:aa:e0:1c:
49:2c:23:55:7f:a0:21:67:e8:ab:bf:84:e8:25:06:1c:0c:60:
68:d4:11:18:86:43:0f:a4:c3:c0:cf:db:87:ac:88:5f:eb:c2:
37:e8:70:a4:a4:c3:14:e4:6a:c9:05:c1:8b:ed:2c:36:d7:f6:
94:68:b9:97:2b:13:1a:70:39:a2:18:1a:2a:e7:e3:53:ef:bf:
d1:b1:72:80:d2:8b:50:ac:b9:69:9a:d9:b6:e8:a9:75:46:5a:
55:c4:a0:fd:48:27:a6:78:94:e4:fc:1b:bd:24:80:b5:1e:11:
e5:80:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:20 2025 by rpki-client