Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: c2WpEFn4GL0VsKM3S9mpvwolE2iQ/N7KCbLM4MV5JqQ=
Subject key identifier: 39:81:EB:E4:08:C7:D6:43:8D:1A:5D:08:41:F6:51:45:4F:3F:8D:58
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0196A19B54E1D25C724CBC2F6EA175D3F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 18:00:33 +0000
Manifest this update: Mon 05 May 2025 18:00:33 +0000
Manifest next update: Tue 06 May 2025 18:00:33 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: HyMrzaZNX9R8bvxsJukE9YWLtEhhP2x0zYRJyyaS/8I=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:54:e1:d2:5c:72:4c:bc:2f:6e:a1:75:d3:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: May 5 18:00:33 2025 GMT
Not After : May 6 18:00:33 2025 GMT
Subject: CN=3981ebe408c7d6438d1a5d0841f651454f3f8d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:ca:51:39:4e:a8:81:ca:ad:e3:64:6e:0e:
b7:e6:9d:aa:38:65:ec:94:a8:93:ae:91:fc:72:19:
4e:39:95:92:cd:43:05:17:17:9c:1c:28:29:83:77:
0a:13:18:42:b2:4a:16:7b:7a:34:6a:5b:b7:25:e6:
b2:1a:1c:22:68:1f:44:42:4e:e4:4a:ba:f6:28:3e:
6d:75:ee:a2:c3:98:8b:34:74:a7:ad:63:c4:e2:b9:
79:9f:af:af:01:94:0d:cb:86:d7:aa:54:08:5e:f9:
b9:a1:24:53:a4:a9:5c:4e:14:9f:a3:14:dd:31:d8:
8b:68:48:18:13:ad:a6:63:2e:cd:18:d6:e3:cd:c1:
ba:12:bd:72:a2:96:94:e6:ae:10:76:82:ee:81:12:
f3:5d:fc:5b:96:66:87:7a:56:73:78:50:7b:26:19:
2c:8c:2e:e8:d2:46:6b:47:eb:76:09:f4:80:5e:46:
df:84:1a:c7:e8:51:fb:0d:f5:36:46:37:8d:9c:1d:
f5:20:64:6b:44:97:bd:63:f5:f0:17:47:c8:ae:7d:
95:2b:1a:11:39:b9:8b:2b:52:4b:da:0b:8d:84:de:
8e:2b:b7:16:e1:1c:aa:d4:a9:70:88:cc:ec:4d:a7:
ab:39:1a:29:84:2c:ca:31:e9:a2:b4:7a:de:f5:9c:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:EB:E4:08:C7:D6:43:8D:1A:5D:08:41:F6:51:45:4F:3F:8D:58
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:82:46:73:f5:03:de:1a:6f:e2:20:f8:84:e3:02:5b:4d:a5:
fb:48:27:69:86:95:a7:f3:dc:91:4c:50:70:2d:f2:65:9e:45:
0d:2a:41:08:64:01:c2:7c:30:95:68:dd:9a:52:91:de:2e:c2:
0e:6c:6d:0d:58:be:fd:35:d2:34:60:0c:ab:5f:f4:ad:33:f5:
48:ad:58:43:9f:87:28:29:06:db:99:92:e8:6f:3e:7b:cf:15:
31:ae:c7:7f:10:90:6b:74:6b:71:de:98:6a:a2:a1:82:5a:95:
d4:22:12:25:70:3b:e3:91:87:50:7d:e7:42:3b:87:f8:12:31:
b3:a9:95:b8:34:0a:d6:a6:ed:d4:fa:67:d8:d2:7b:c5:d3:cb:
b9:c4:55:ec:ff:53:33:40:b9:69:dd:d1:98:90:fb:98:7c:5a:
f0:69:d2:2d:65:22:c8:5f:fd:aa:99:86:b8:91:e8:21:ac:d2:
d3:03:29:4e:58:87:97:47:34:01:07:8e:a9:ae:74:97:88:59:
f6:d8:ab:b5:b5:a9:ed:43:89:22:fb:00:9b:7c:80:3d:98:c4:
2f:5c:5f:bc:44:5b:69:de:b6:ff:2c:7c:1d:c9:ac:f6:a3:df:
ff:83:46:8a:4d:b8:c1:03:86:39:50:b6:82:cb:52:b4:da:00:
cb:38:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:15:46 2025 by rpki-client