Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: llDWq5ryB3YYoMtocMPlO5SI/ZxUJB0p1/gGQS6/AZQ=
Subject key identifier: 85:BD:19:0F:AC:FD:8C:A9:72:98:B7:B0:82:E6:C1:89:2C:42:83:D6
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019A53E4235327507A23A8BA39024B7EAE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 12:00:51 +0000
Manifest this update: Wed 05 Nov 2025 12:00:51 +0000
Manifest next update: Thu 06 Nov 2025 12:00:51 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: b5E/PgIkb0prD8szL9pM6/M1KLJns9wIxs1capd2vUI=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:23:53:27:50:7a:23:a8:ba:39:02:4b:7e:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Nov 5 12:00:51 2025 GMT
Not After : Nov 6 12:00:51 2025 GMT
Subject: CN=85bd190facfd8ca97298b7b082e6c1892c4283d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:68:e8:97:eb:36:04:23:d9:1d:17:ff:36:
f0:42:00:0e:d5:52:b9:dd:cd:3a:4a:e6:7c:34:70:
a0:f6:68:84:c6:62:d8:e1:d6:4b:23:25:94:48:95:
b9:3b:08:55:da:8b:b9:5a:47:fd:0c:2b:28:b9:c7:
ff:74:f6:da:09:eb:2e:90:47:fe:e6:bb:7d:0a:ce:
8e:51:29:ba:89:8d:79:86:3e:4e:95:4e:76:10:bd:
fb:8f:23:16:cf:86:d9:41:ed:de:d3:c3:2c:ac:e8:
e7:36:09:9a:64:cd:e2:02:b6:96:d9:9d:c7:2c:95:
e1:1b:c9:f3:0d:d5:5b:a4:aa:9f:bd:ac:06:ab:1c:
1f:8a:36:2e:6b:28:ba:00:a5:52:b5:27:e9:3f:15:
6a:d0:4b:6d:ab:e8:c5:be:38:a5:dd:c2:f6:f3:98:
2f:aa:cf:ac:5b:d6:24:0e:fd:e8:2f:3d:98:b8:f7:
33:e6:12:8a:8b:23:a7:28:66:3b:a3:63:ff:56:de:
c0:83:0c:0b:dc:24:c9:31:4d:75:5d:49:f7:67:4f:
ea:c4:0b:f0:41:fd:d6:5d:13:a2:14:cf:8f:c4:f5:
6e:9d:ec:2a:26:19:9d:8e:26:2a:cd:75:3a:a7:1a:
e5:2c:5e:dd:9f:c2:18:9d:fe:db:54:0b:18:14:2f:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:19:0F:AC:FD:8C:A9:72:98:B7:B0:82:E6:C1:89:2C:42:83:D6
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a5:bf:3a:af:5a:f6:58:0d:b5:19:7c:06:c7:43:9e:40:9d:
a2:b1:50:7c:b4:be:38:06:57:53:1e:c0:bf:0b:ca:21:02:e1:
c4:28:79:f5:c2:fd:d3:d9:e0:3e:85:e0:b8:ad:b1:b7:80:75:
59:bb:9c:3e:7e:f0:e9:5c:08:dd:f0:3f:ca:60:3d:66:ef:68:
dc:81:74:47:cf:91:76:f4:f0:9c:34:13:38:8b:60:2b:9f:48:
31:0f:7a:be:ff:d6:fc:51:e9:a0:61:0a:c2:08:3c:62:d0:2c:
c4:38:97:d9:33:67:25:b1:e8:4a:3a:cc:4f:59:54:cd:0b:50:
6f:a5:47:09:71:ea:a5:01:3d:b2:23:3c:3c:c8:e4:2a:00:d3:
9b:76:a5:17:6b:29:e4:ef:b7:3a:94:cb:49:85:43:8e:ef:4f:
51:50:ed:8b:4c:a6:78:e2:c0:63:ce:7d:42:23:60:da:6e:62:
d7:a5:da:c5:15:c6:e4:e5:d7:8c:f5:fa:d4:fa:ab:4e:48:41:
f7:5e:ba:0d:6f:b4:0c:76:d8:12:cf:8f:56:94:9f:b0:1f:e3:
a3:1d:20:e9:e8:29:1b:03:dc:e3:0e:e6:f8:c2:68:73:54:d8:
1b:1c:f8:4f:7f:6e:57:9a:43:ba:a0:26:25:a0:ef:3e:5d:cc:
e6:00:c1:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5CNTJ1B6I6i6OQJLfq5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1
ZjU2NTgwHhcNMjUxMTA1MTIwMDUxWhcNMjUxMTA2MTIwMDUxWjAzMTEwLwYDVQQD
Eyg4NWJkMTkwZmFjZmQ4Y2E5NzI5OGI3YjA4MmU2YzE4OTJjNDI4M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWNo6JfrNgQj2R0X/zbwQgAO1VK5
3c06SuZ8NHCg9miExmLY4dZLIyWUSJW5OwhV2ou5Wkf9DCsoucf/dPbaCesukEf+
5rt9Cs6OUSm6iY15hj5OlU52EL37jyMWz4bZQe3e08MsrOjnNgmaZM3iAraW2Z3H
LJXhG8nzDdVbpKqfvawGqxwfijYuayi6AKVStSfpPxVq0Ettq+jFvjil3cL285gv
qs+sW9YkDv3oLz2YuPcz5hKKiyOnKGY7o2P/Vt7AgwwL3CTJMU11XUn3Z0/qxAvw
Qf3WXROiFM+PxPVunewqJhmdjiYqzXU6pxrlLF7dn8IYnf7bVAsYFC/m9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW9GQ+s/Yypcpi3sILmwYksQoPWMB8GA1UdIwQY
MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt
OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl
LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqW/Oq9a
9lgNtRl8BsdDnkCdorFQfLS+OAZXUx7AvwvKIQLhxCh59cL909ngPoXguK2xt4B1
WbucPn7w6VwI3fA/ymA9Zu9o3IF0R8+RdvTwnDQTOItgK59IMQ96vv/W/FHpoGEK
wgg8YtAsxDiX2TNnJbHoSjrMT1lUzQtQb6VHCXHqpQE9siM8PMjkKgDTm3alF2sp
5O+3OpTLSYVDju9PUVDti0ymeOLAY859QiNg2m5i16XaxRXG5OXXjPX61PqrTkhB
9166DW+0DHbYEs+PVpSfsB/jox0g6egpGwPc4w7m+MJoc1TYGxz4T39uV5pDuqAm
JaDvPl3M5gDB7w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:39 2025 by rpki-client