Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: Z7q2zy0MVGUB4JWuBTguPdLH2DeOnz+7NzMnnkgUMdo=
Subject key identifier: 2D:48:9F:0F:F6:CD:17:89:59:B4:E5:06:D4:06:08:3C:28:F2:FA:2A
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019849654D29333CAC2B829D261C3C6D3F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 15D9
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: GjawqShQECmlL07g5t47mG7WkJC6+TbKv6wgS18n27w=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4d:29:33:3c:ac:2b:82:9d:26:1c:3c:6d:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=2d489f0ff6cd178959b4e506d406083c28f2fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:41:f9:d9:ed:25:7a:f2:f7:1d:5a:1b:be:
55:2d:53:23:f9:9d:be:5f:b0:17:b8:eb:b0:b1:4b:
67:56:a4:f3:e8:56:92:25:45:c9:65:2c:ea:61:3b:
8e:8b:c0:6a:05:aa:54:f4:10:a4:e1:fd:f0:ed:f7:
31:d8:e4:66:23:99:26:48:50:2e:85:f5:b8:d3:73:
46:86:d6:32:6f:ea:c9:92:06:9f:e3:97:0d:f6:4d:
aa:a4:1b:29:f2:47:2d:0d:fb:01:28:e1:87:73:54:
4e:3b:bb:39:b4:66:69:53:bc:8a:68:83:57:e1:b2:
ed:4f:73:86:b7:08:5a:a5:37:99:03:be:8d:0e:1f:
ac:fb:d9:c6:94:f8:10:8c:ca:59:b9:11:e7:a6:e2:
af:b8:2e:68:f9:4c:73:1c:9f:c0:81:e7:8d:1f:bc:
a8:d7:6a:47:f8:cf:5e:9a:79:e8:a8:04:69:09:00:
87:f2:b3:26:44:71:57:2a:89:47:67:64:f8:62:a6:
70:08:da:a3:a2:93:8b:ab:7d:64:dd:73:1b:ae:3a:
c8:c1:0e:d5:33:7e:b3:6a:f6:60:7a:c9:e2:31:e0:
1d:60:23:77:dd:f8:8c:14:d5:5f:33:f1:65:ee:fd:
d9:25:46:5a:d0:fe:f7:05:ff:c6:2d:26:2f:8f:9b:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:9F:0F:F6:CD:17:89:59:B4:E5:06:D4:06:08:3C:28:F2:FA:2A
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ff:89:20:60:b6:7a:91:27:16:38:1f:94:cc:68:1d:be:e3:
14:48:8a:e9:ce:37:18:86:76:17:c3:24:7f:8b:c1:b8:50:c6:
bc:36:4d:44:b4:e2:d6:0b:e3:8d:aa:c5:c3:d4:9e:32:8f:d9:
23:f0:93:37:61:ae:d9:82:77:70:5e:f3:c9:5b:59:e3:37:52:
93:e5:32:b4:77:bd:31:05:95:49:27:da:1f:e7:5b:4c:d8:97:
5f:c8:fa:e0:1f:12:4d:3b:21:ae:f7:c3:c4:82:5e:31:9b:13:
12:5e:fa:91:90:06:ec:44:5f:3d:e1:45:36:0f:7d:a1:b8:0b:
c2:5a:0a:c8:16:23:31:fb:5b:92:00:7f:31:42:2c:c5:3e:76:
79:8e:47:d6:e7:c5:af:cb:f7:5a:7e:4c:7c:e3:fa:85:47:35:
b1:f7:9a:24:6f:a3:94:e6:58:48:4f:c8:99:26:3f:53:f6:a2:
3c:5c:47:f9:ea:c2:93:7f:85:21:62:5e:4c:a7:c1:8b:f5:cf:
d5:f0:03:3f:94:c5:e3:76:37:90:eb:0b:52:d8:71:a6:2c:e8:
d6:a3:50:d2:37:93:a7:8a:48:0a:26:bf:b0:f8:0f:7d:39:db:
2b:78:d5:da:3c:56:e1:bb:ae:4e:a7:47:8f:e7:8e:a3:13:f4:
3f:08:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:12 2025 by rpki-client