Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: SmRZWitGsyPuFf5MCgnQaN2MkCrY3vu5cCDvl4Jiy6U=
Subject key identifier: A0:71:67:73:AB:38:88:9E:47:CB:6A:D4:3F:E5:DF:F0:E7:2D:70:84
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01965CBA1094F701046C0E0B29B6ED6522DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 07DD
Signing time: Tue 22 Apr 2025 09:00:19 +0000
Manifest this update: Tue 22 Apr 2025 09:00:19 +0000
Manifest next update: Wed 23 Apr 2025 09:00:19 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: BsH2xRcpsNNh2M0b71ipk36sVBG61Mp2FIe9KalfCKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:10:94:f7:01:04:6c:0e:0b:29:b6:ed:65:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Apr 22 09:00:19 2025 GMT
Not After : Apr 23 09:00:19 2025 GMT
Subject: CN=a0716773ab38889e47cb6ad43fe5dff0e72d7084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:8e:8b:7c:12:40:d4:cb:fb:6b:83:ba:87:
8b:24:30:f4:f9:a0:e3:59:6c:92:f8:de:df:99:48:
75:5b:80:b4:f7:bc:b5:9c:6d:df:49:00:ac:e8:5a:
57:bf:dd:8a:26:fe:80:4c:59:ed:10:f5:a5:90:df:
11:da:42:06:5e:8e:95:a7:44:57:97:dc:85:9f:27:
29:aa:f8:5f:54:73:d7:72:e7:f3:b2:a4:a3:6d:52:
98:d4:45:94:35:2e:7a:c8:c3:c8:d6:a0:f1:20:7d:
af:57:6c:b1:a5:b7:20:02:d6:86:fc:df:4c:b9:45:
35:2c:28:75:06:70:e8:68:40:89:b2:84:25:48:98:
08:f1:72:59:f4:f9:72:2a:a9:4c:6f:b2:ae:17:f0:
f8:43:84:c2:e4:0e:7f:b7:58:a2:34:20:72:be:68:
ed:59:9c:e7:6a:d4:22:a5:40:40:e0:45:f7:d6:a3:
50:3e:02:5d:3f:1b:61:c6:79:ea:34:aa:bd:c6:b9:
88:6a:02:75:b9:87:9b:ea:b1:a0:5e:3b:ff:71:78:
3e:48:04:47:03:3e:28:1b:95:b2:fc:35:9e:f5:d9:
e9:8f:1f:f0:30:af:19:2c:a5:c8:eb:e5:f1:ef:70:
c8:5c:55:41:24:bb:aa:f1:a9:d7:4e:5a:ab:27:37:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:67:73:AB:38:88:9E:47:CB:6A:D4:3F:E5:DF:F0:E7:2D:70:84
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:00:11:f7:66:fb:ed:73:24:5b:e1:78:06:38:95:62:5a:
fa:e7:f6:fb:8b:cf:25:ca:49:ad:a7:6e:38:53:d4:96:37:23:
70:5e:5a:19:76:5d:56:6f:b7:8a:a4:63:8d:09:d8:35:45:cc:
b7:85:cd:36:e2:68:be:35:ce:a9:60:50:45:cb:cd:2d:09:f3:
05:86:00:f2:fb:7c:fc:08:5f:7f:d7:70:91:a6:40:c7:3a:76:
ad:ac:66:00:91:51:8f:f8:b8:0a:2e:af:97:c5:58:bb:11:de:
4f:f6:5b:ca:33:36:67:2d:51:60:8e:cc:40:f5:ab:fd:6b:0f:
d7:e9:21:fc:33:cb:20:a5:22:81:44:c7:b6:b3:a3:68:9d:52:
27:a2:09:b9:a2:b0:29:65:2a:d4:df:2b:81:83:36:c5:84:88:
7c:99:4e:6b:ca:6b:44:7c:b3:13:7b:eb:41:12:ca:83:6d:67:
e2:8d:29:11:26:99:9e:9a:3d:7d:f7:b4:1e:42:04:1e:c4:5c:
01:5c:bd:88:43:14:b3:8d:c5:d0:b3:ce:ba:0e:68:a3:1f:63:
d4:1d:5f:60:59:93:be:34:27:42:6b:f1:3c:44:87:cf:8d:67:
e9:2b:ef:b1:03:88:ed:aa:f9:05:38:12:ba:17:be:51:21:f6:
f0:0f:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:00:55 2025 by rpki-client