Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: huRp5Bw9w5y80UfQ5FAuRjkWu77wqjwh1+3jw3e+5tw=
Subject key identifier: F3:FD:41:DE:A9:A6:74:7A:1A:7F:35:25:31:CA:19:B8:7C:6D:82:91
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01988CFD87BE1E281993C273336D1352A229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 08FF
Signing time: Sat 09 Aug 2025 04:01:22 +0000
Manifest this update: Sat 09 Aug 2025 04:01:22 +0000
Manifest next update: Sun 10 Aug 2025 04:01:22 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: 2XF7K0rO8qTRkNMXp4Ih9R9UntwgTXQoOzYr0BtDBBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:87:be:1e:28:19:93:c2:73:33:6d:13:52:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Aug 9 04:01:22 2025 GMT
Not After : Aug 10 04:01:22 2025 GMT
Subject: CN=f3fd41dea9a6747a1a7f352531ca19b87c6d8291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:b3:3f:12:65:49:17:97:f9:36:78:87:83:
5b:b8:8c:ee:5b:ad:a8:2f:ff:33:82:3d:87:59:a5:
e0:ff:f5:8e:ee:15:c2:e0:76:8d:30:f3:2a:ca:17:
4d:82:40:c9:ef:01:a5:f6:8d:fa:25:ba:e7:9a:6c:
9d:35:5b:72:4c:13:2a:d8:97:6b:b9:61:a1:23:66:
ce:38:d1:da:ab:cf:32:70:3c:9d:fa:2e:09:44:12:
5e:e4:74:d1:0b:ee:74:77:11:0f:d5:b8:5c:88:1f:
13:bb:12:26:d6:01:75:d0:8c:a7:c4:0a:8f:16:fb:
a6:66:08:2d:ab:dd:30:24:b9:10:84:c6:ab:18:70:
24:fa:5f:1b:39:43:1c:90:5f:4e:da:08:da:8d:b0:
ca:43:f9:6c:7f:0b:2a:fa:b5:2a:82:ce:f0:96:4c:
bd:ac:49:05:66:3a:fb:b9:ca:e3:4e:7e:48:d1:21:
59:6c:05:53:dd:3b:73:5d:2b:76:a2:42:c3:74:59:
82:10:4b:21:47:c1:a4:73:c5:bd:9c:39:b5:48:3c:
fd:88:d6:65:d4:e2:71:a4:2f:00:9a:a9:12:18:4c:
b4:ad:35:9d:4d:95:f8:01:d7:35:30:2b:d7:0b:b7:
0f:03:11:36:c5:08:b1:53:1d:d3:1c:2b:30:aa:9c:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:41:DE:A9:A6:74:7A:1A:7F:35:25:31:CA:19:B8:7C:6D:82:91
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:16:bc:b6:95:09:fd:d1:ae:ca:3a:5c:70:d6:51:19:91:ec:
b6:e1:c9:a1:df:d1:d6:29:d0:6a:a9:5f:1b:a2:33:74:53:e4:
7d:1f:e7:fc:8c:e0:17:8b:c0:82:da:38:90:15:04:49:dd:9f:
5e:3b:db:12:29:63:17:78:eb:bc:5a:4b:5c:f6:fa:97:f2:67:
2b:21:ca:a8:3a:ba:cb:96:5a:a9:b9:81:d0:e8:bf:b7:8a:95:
bf:78:34:07:9c:04:7f:92:0c:e6:df:d8:a9:d4:30:f7:45:41:
87:55:4d:47:a4:9f:0c:13:fd:16:53:20:a8:af:17:39:fd:45:
27:ae:a9:8c:10:30:75:b9:73:fe:9d:79:d1:fa:45:3b:4a:50:
e7:0f:2b:d8:05:5a:c2:5b:9b:f5:49:c9:6f:30:2e:3c:e9:2b:
a7:26:8a:38:67:1c:ff:1d:6c:d2:8c:55:94:6b:b0:53:82:37:
97:c5:9e:1e:be:c9:87:f4:84:af:08:2a:60:77:2a:8b:e8:cd:
e5:ad:87:89:cb:51:f3:32:98:17:a9:c6:c8:7d:19:dd:35:ba:
43:7c:6e:2b:8b:50:85:7a:86:c4:63:73:21:91:14:5b:00:09:
bd:a2:97:ea:b9:5f:06:b5:2b:8a:ea:f5:91:69:02:3a:3f:50:
75:42:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:20 2025 by rpki-client