Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: 7I5xnCVFx+3+LlMSaER3LaAWfxiV8PNHifoELntAq0U=
Subject key identifier: 72:8B:08:9D:A2:FA:F0:2A:A3:ED:D1:4F:BE:FB:22:8E:DB:2F:3C:17
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01968B133284EA3E02A890F8047D03832925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 07F5
Signing time: Thu 01 May 2025 09:00:13 +0000
Manifest this update: Thu 01 May 2025 09:00:13 +0000
Manifest next update: Fri 02 May 2025 09:00:13 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: PYOT5x5b9iiGp49floWUx8dkWAyiR1vmb6AmM2skaaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:32:84:ea:3e:02:a8:90:f8:04:7d:03:83:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: May 1 09:00:13 2025 GMT
Not After : May 2 09:00:13 2025 GMT
Subject: CN=728b089da2faf02aa3edd14fbefb228edb2f3c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:c6:c0:af:e4:91:d1:0d:fb:96:9b:a6:62:
fd:bb:8d:01:e1:f4:45:f1:eb:12:64:3a:2f:ea:45:
13:e0:16:5c:85:b4:54:33:54:5b:8a:6e:31:77:4e:
f4:0e:5b:36:5d:b4:6f:f1:13:29:bc:4b:88:31:d8:
fa:76:26:6f:3b:4f:85:a6:d3:4a:15:d8:ac:7e:a2:
4d:c4:3a:de:b2:4d:42:02:d3:b7:28:3e:bd:c4:35:
64:bc:f7:45:a5:26:57:da:97:aa:4a:16:8c:9d:7c:
12:b8:f5:42:3e:be:8b:cb:49:95:81:4c:b8:21:01:
bd:39:44:b7:f8:81:b3:e9:03:1f:e6:b7:ed:15:7a:
83:7e:60:dd:3a:95:c4:e3:37:19:e9:17:1a:8f:29:
89:c8:7c:8c:ef:5a:cb:73:07:52:7f:52:4a:65:c0:
35:f7:d7:ad:8f:2e:94:90:79:54:61:2c:b4:05:b2:
06:c2:78:d5:7c:01:35:5d:4e:61:8d:f3:51:a2:c0:
8d:77:40:b0:4f:31:6b:80:c5:14:6b:e9:a6:14:62:
be:32:c9:4e:12:d6:1c:7a:42:2e:eb:d1:33:47:f6:
f6:06:53:0d:66:bf:b6:d9:1e:22:b6:62:51:dd:81:
f7:42:f1:aa:8b:67:4a:4c:ec:98:1e:70:b8:99:81:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:08:9D:A2:FA:F0:2A:A3:ED:D1:4F:BE:FB:22:8E:DB:2F:3C:17
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:2d:db:e7:19:f8:2f:4f:d2:93:11:31:ca:61:9f:bf:10:
a2:1c:78:44:d1:90:b1:53:fd:c8:4d:97:5e:f5:c5:8a:36:01:
b9:c1:cc:03:1d:87:59:33:21:79:fd:e4:6d:a3:87:a9:b8:38:
5b:a4:4f:03:b8:66:34:de:b6:29:c6:be:84:cb:ed:3d:69:82:
6d:19:b0:82:7e:29:3e:32:b3:db:64:d9:a4:1a:a2:68:e6:ce:
16:29:1d:3a:96:48:13:2e:70:24:f3:f4:4c:21:df:ec:8e:50:
3c:f5:8e:2f:06:e2:2b:99:70:d1:54:c9:eb:f2:d6:5c:a2:0c:
51:d3:a0:a4:01:a7:c2:a6:6f:4b:fe:5a:04:37:71:88:06:3e:
40:34:6b:1a:16:e6:ea:51:c7:23:73:ad:6a:31:d3:eb:e9:c5:
a2:a3:e7:9c:e1:7d:02:3e:71:07:ad:53:34:c5:20:68:1e:f1:
67:2c:fd:77:c8:8b:45:08:d9:c5:e0:29:39:bc:9f:5e:12:f1:
95:df:4e:f7:2e:72:21:e1:54:86:a6:29:37:59:96:01:0b:f0:
04:f2:88:65:b4:85:a2:34:92:9a:c5:aa:e7:74:1c:7b:0f:bb:
84:41:43:66:2c:fb:18:0f:1f:99:31:3d:45:d1:f0:9c:65:b2:
b0:55:48:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLEzKE6j4CqJD4BH0DgyklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmZkNjg4MWRjNjg1OWI3YWZhYTlmNzUwYTZkZDhiYmQ2
OWU5OWEwHhcNMjUwNTAxMDkwMDEzWhcNMjUwNTAyMDkwMDEzWjAzMTEwLwYDVQQD
Eyg3MjhiMDg5ZGEyZmFmMDJhYTNlZGQxNGZiZWZiMjI4ZWRiMmYzYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzXGwK/kkdEN+5abpmL9u40B4fRF
8esSZDov6kUT4BZchbRUM1Rbim4xd070Dls2XbRv8RMpvEuIMdj6diZvO0+FptNK
FdisfqJNxDresk1CAtO3KD69xDVkvPdFpSZX2peqShaMnXwSuPVCPr6Ly0mVgUy4
IQG9OUS3+IGz6QMf5rftFXqDfmDdOpXE4zcZ6RcajymJyHyM71rLcwdSf1JKZcA1
99etjy6UkHlUYSy0BbIGwnjVfAE1XU5hjfNRosCNd0CwTzFrgMUUa+mmFGK+MslO
EtYcekIu69EzR/b2BlMNZr+22R4itmJR3YH3QvGqi2dKTOyYHnC4mYF9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKLCJ2i+vAqo+3RT777Io7bLzwXMB8GA1UdIwQY
MBaAFJYv1ogdxoWbevqp91Cm3Yu9aemaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQt
NDg3NDEwMDlmYzFlLzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQtNDg3NDEwMDlmYzFl
LzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Mt2+cZ
+C9P0pMRMcphn78Qohx4RNGQsVP9yE2XXvXFijYBucHMAx2HWTMhef3kbaOHqbg4
W6RPA7hmNN62Kca+hMvtPWmCbRmwgn4pPjKz22TZpBqiaObOFikdOpZIEy5wJPP0
TCHf7I5QPPWOLwbiK5lw0VTJ6/LWXKIMUdOgpAGnwqZvS/5aBDdxiAY+QDRrGhbm
6lHHI3OtajHT6+nFoqPnnOF9Aj5xB61TNMUgaB7xZyz9d8iLRQjZxeApObyfXhLx
ld9O9y5yIeFUhqYpN1mWAQvwBPKIZbSFojSSmsWq53Qcew+7hEFDZiz7GA8fmTE9
RdHwnGWysFVIyg==
-----END CERTIFICATE-----
Generated at Thu May 1 17:02:34 2025 by rpki-client