Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: LdWKIEpla8gnKQbB8580BvruJ96v5bPR5yRp9KH5oKc=
Subject key identifier: B5:5C:BC:CD:89:5B:4C:62:72:F5:FD:37:75:8B:10:B4:EB:D5:C5:A2
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 01984A411F81B0494E60212960E16841DBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 05:00:38 +0000
Manifest this update: Sun 27 Jul 2025 05:00:38 +0000
Manifest next update: Mon 28 Jul 2025 05:00:38 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: TEeLJIlHsNoR3c3haJwdx6QE+au5PtkiLOsmhSmO8zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:1f:81:b0:49:4e:60:21:29:60:e1:68:41:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Jul 27 05:00:38 2025 GMT
Not After : Jul 28 05:00:38 2025 GMT
Subject: CN=b55cbccd895b4c6272f5fd37758b10b4ebd5c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:d9:61:90:7f:a3:09:d0:74:63:7b:47:90:
85:80:68:fa:f7:1a:18:72:3f:82:fe:40:a4:18:24:
19:76:91:9e:0a:25:0b:c0:37:bf:b7:f9:85:6b:67:
c8:a0:82:ea:cd:58:2b:08:c5:dc:4a:2a:76:ba:e4:
01:27:65:db:70:0f:cd:96:29:ea:30:e4:f9:fb:9e:
e2:e5:ac:29:eb:6e:57:fd:1c:5d:a2:cd:d6:22:4a:
a7:51:ba:d8:a2:82:c3:0b:e8:d3:ad:eb:af:07:52:
ce:fc:81:a8:54:d2:21:a7:3b:6b:31:17:d3:4e:80:
b8:de:b1:29:52:a1:4b:b8:50:b9:ff:a1:ba:c0:f6:
7a:23:4b:7f:21:8c:a7:e5:fe:2b:f3:85:a3:3e:11:
42:09:c9:38:4d:06:0f:46:ca:32:a7:ff:e8:44:cb:
e6:89:23:da:87:7d:c1:9f:f8:f1:38:91:30:dd:6f:
a2:1c:94:d7:85:b6:16:24:32:92:55:4a:cf:4a:31:
00:1b:8a:5c:c7:d1:71:08:64:e3:8c:18:87:5a:cd:
ba:4a:b2:1c:e3:c2:9e:d9:30:c7:4e:04:e3:34:19:
16:36:59:85:a3:a4:db:7e:a3:59:ef:df:a4:63:1b:
42:2e:07:cd:57:5a:c0:44:f1:1e:64:d6:16:25:aa:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:BC:CD:89:5B:4C:62:72:F5:FD:37:75:8B:10:B4:EB:D5:C5:A2
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:b0:d8:bb:54:aa:38:23:5e:c1:69:66:89:43:af:0f:76:
d3:b2:71:4a:53:54:70:f2:6b:75:2b:0d:a9:86:db:e8:b7:61:
7e:89:fb:bd:40:72:21:9f:c4:a6:7b:cc:e8:37:aa:52:96:77:
b7:16:53:4d:f1:ec:15:84:8a:71:01:79:eb:e7:2e:1b:6b:f6:
f9:53:97:88:26:3f:8e:69:ca:0f:da:67:b5:f4:95:d9:33:29:
6d:aa:1b:51:3f:e4:51:56:a1:97:bb:36:40:88:30:bc:99:97:
58:fe:0f:56:44:8c:31:c7:2c:10:28:a0:76:86:cf:e9:8d:b5:
8a:38:4f:fb:ce:41:22:c4:a0:b8:63:d2:6a:e7:17:30:6c:b4:
8c:bb:31:13:b7:9c:68:ec:5e:d7:06:ed:8e:bb:0b:3d:c2:a0:
7e:7a:19:c5:ff:50:ac:6c:12:bb:32:1d:4c:2a:32:70:ba:58:
1f:16:f5:c3:ae:bd:26:6a:d6:3f:13:6f:db:2a:70:c2:88:9e:
ff:97:23:ac:d7:24:72:0a:2d:4d:b1:e6:41:fe:64:f3:77:17:
69:30:6d:49:5e:00:ba:f9:e4:12:00:06:00:1e:89:c2:3c:9f:
2b:51:86:ac:57:11:20:52:04:d1:78:d2:6d:b6:dd:6f:1e:f9:
e0:d8:46:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQR+BsElOYCEpYOFoQdvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGU1MjQ3NTJlZDg1NTE3NWEwMTQxMmNiMzdjNGE5ZTRk
YjYxNzAwHhcNMjUwNzI3MDUwMDM4WhcNMjUwNzI4MDUwMDM4WjAzMTEwLwYDVQQD
EyhiNTVjYmNjZDg5NWI0YzYyNzJmNWZkMzc3NThiMTBiNGViZDVjNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroLZYZB/ownQdGN7R5CFgGj69xoY
cj+C/kCkGCQZdpGeCiULwDe/t/mFa2fIoILqzVgrCMXcSip2uuQBJ2XbcA/Nlinq
MOT5+57i5awp625X/Rxdos3WIkqnUbrYooLDC+jTreuvB1LO/IGoVNIhpztrMRfT
ToC43rEpUqFLuFC5/6G6wPZ6I0t/IYyn5f4r84WjPhFCCck4TQYPRsoyp//oRMvm
iSPah33Bn/jxOJEw3W+iHJTXhbYWJDKSVUrPSjEAG4pcx9FxCGTjjBiHWs26SrIc
48Ke2TDHTgTjNBkWNlmFo6TbfqNZ79+kYxtCLgfNV1rARPEeZNYWJarGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVcvM2JW0xicvX9N3WLELTr1cWiMB8GA1UdIwQY
MBaAFCyOUkdS7YVRdaAUEss3xKnk22FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQt
NTkzYjc3NGZiMDMwLzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQtNTkzYjc3NGZiMDMw
LzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcROw2LtU
qjgjXsFpZolDrw9207JxSlNUcPJrdSsNqYbb6Ldhfon7vUByIZ/EpnvM6DeqUpZ3
txZTTfHsFYSKcQF56+cuG2v2+VOXiCY/jmnKD9pntfSV2TMpbaobUT/kUVahl7s2
QIgwvJmXWP4PVkSMMccsECigdobP6Y21ijhP+85BIsSguGPSaucXMGy0jLsxE7ec
aOxe1wbtjrsLPcKgfnoZxf9QrGwSuzIdTCoycLpYHxb1w669JmrWPxNv2ypwwoie
/5cjrNckcgotTbHmQf5k83cXaTBtSV4AuvnkEgAGAB6JwjyfK1GGrFcRIFIE0XjS
bbbdbx754NhGbg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:50 2025 by rpki-client