Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: I0VMThzWiABmshiwfXTyLR2HwUvNwrJUrKPZhXTQrlk=
Subject key identifier: 45:1E:A9:2D:3A:41:44:C3:1D:77:86:22:2F:5F:0A:92:63:1D:62:43
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019853E93809E28CCF7D36EE8EE3062345D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0807
Signing time: Tue 29 Jul 2025 02:00:49 +0000
Manifest this update: Tue 29 Jul 2025 02:00:49 +0000
Manifest next update: Wed 30 Jul 2025 02:00:49 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 9ZRpF+1Sxs+ArRibXqn+mt/7HBDQ0k0YPmye0gfxsjw=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:38:09:e2:8c:cf:7d:36:ee:8e:e3:06:23:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jul 29 02:00:49 2025 GMT
Not After : Jul 30 02:00:49 2025 GMT
Subject: CN=451ea92d3a4144c31d7786222f5f0a92631d6243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:d9:dd:b0:9e:70:02:e2:a4:23:d6:15:69:
e3:2d:d6:9a:7f:3c:0f:b5:7d:99:eb:18:d9:57:64:
69:58:dc:f9:fb:07:92:cd:40:6f:be:1a:c3:85:1e:
2a:cd:0c:3b:cc:71:b0:e9:e5:6a:ad:f8:ed:45:fb:
ca:b0:bb:50:8f:ed:d2:23:d4:80:60:5e:1f:1a:f0:
5f:e4:78:97:77:6f:4c:81:1f:5c:14:91:ce:cb:c6:
93:69:21:e1:19:ee:ad:ed:d6:c1:30:36:14:93:90:
d4:9f:b2:6b:29:9c:9b:c2:30:0f:ff:b0:88:37:76:
c1:0a:b8:bc:7e:6d:12:96:c9:45:e4:70:ed:79:1f:
e5:e9:03:b1:46:88:7e:c5:8c:2b:7c:b3:69:e9:56:
f3:f0:57:0e:8a:f4:cd:01:be:a6:d0:7f:70:59:29:
93:fc:da:8c:ff:1c:fa:d1:c4:84:ae:60:f9:59:cd:
89:f5:af:1d:f4:2b:6a:3e:92:c9:80:c4:73:be:e7:
91:e7:a9:10:c3:e5:e1:4d:5c:1f:c4:be:4e:6c:7f:
62:be:c8:32:e3:00:5d:50:c1:66:7c:cf:fe:80:c8:
f0:b1:f9:f5:a4:b2:e0:46:42:12:7f:02:12:37:8d:
aa:a6:94:13:48:dc:57:0a:65:35:9d:7c:a7:a6:f6:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:A9:2D:3A:41:44:C3:1D:77:86:22:2F:5F:0A:92:63:1D:62:43
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:36:b9:4c:ac:e8:3f:a5:c3:c9:2a:eb:4a:b8:b8:a0:6e:6b:
2d:9f:0b:cd:a4:15:2b:f6:65:6b:67:5c:3d:67:a4:81:34:8e:
4f:ce:bc:8a:47:41:e3:e7:cd:de:a4:73:0b:27:0a:92:c7:0a:
7f:9a:53:e1:d9:74:f4:d0:45:f2:45:31:f2:6d:7e:c0:0e:75:
27:4e:ba:a5:a5:da:b9:4d:bd:1e:6c:4d:35:31:e3:85:6b:e7:
ea:7b:14:ef:16:0c:39:18:fb:67:2a:0c:56:25:d4:3d:13:7a:
53:28:cd:53:9f:60:2d:c3:4f:6a:1c:d9:a4:e5:73:72:22:52:
d3:19:d2:66:e7:f0:b0:a0:f9:e8:99:7a:f6:df:5d:70:ec:da:
ea:14:7e:a2:3f:25:70:a9:65:6c:94:8f:4a:72:d4:a3:fc:41:
7f:f8:76:88:5e:6e:a9:ba:9a:b5:e8:20:a1:89:be:4b:f6:33:
69:cd:5f:0b:04:60:ea:ce:19:3a:f4:77:4c:3d:c4:c8:10:d8:
57:0c:da:c2:4a:d1:91:e8:26:f6:17:e0:47:c3:fe:2f:f4:99:
a0:c2:8a:9d:01:28:30:d5:a8:86:22:26:c4:be:38:8d:55:80:
e5:c5:7b:ae:61:60:b7:bc:c5:1b:88:c9:df:b3:04:a5:df:e6:
8c:db:20:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:02 2025 by rpki-client