
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: VabXNSwXuww7hlKCcj5Xt8AG8Ttzg2ASk/GyWt2cQds=
Subject key identifier: 58:04:B8:A7:54:96:1D:0A:34:07:01:E8:6C:EE:57:7F:68:20:BC:27
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 019841AD3159F10CAEC87509743889A529AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 08D8
Signing time: Fri 25 Jul 2025 13:02:06 +0000
Manifest this update: Fri 25 Jul 2025 13:02:06 +0000
Manifest next update: Sat 26 Jul 2025 13:02:06 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: f1pj4WRDYI1J3Dgzw/+cXLfCuLciYaIUjJb48p5VUZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ad:31:59:f1:0c:ae:c8:75:09:74:38:89:a5:29:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Jul 25 13:02:06 2025 GMT
Not After : Jul 26 13:02:06 2025 GMT
Subject: CN=5804b8a754961d0a340701e86cee577f6820bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:4b:1b:65:01:88:78:fd:96:d7:17:a7:8f:
7b:1b:f3:07:ac:27:46:1f:af:df:2b:a7:25:80:fc:
c3:64:6b:4f:81:c3:1e:ff:0f:31:ec:ca:ae:fe:02:
9a:5e:0b:3b:79:47:2a:a0:c3:9b:62:39:9a:6e:c7:
55:a2:a6:97:34:bf:bd:01:73:b2:bb:9a:1c:7c:ca:
2e:ff:8e:19:33:5b:af:3f:d8:03:e4:9f:f9:b5:c3:
a2:ae:1c:65:27:1b:25:c4:72:23:c9:69:4a:ca:81:
08:34:d8:cf:84:88:b5:d1:1a:63:2d:d8:02:2f:45:
f3:49:f6:40:a1:af:7a:b6:81:05:9e:4e:11:ae:e8:
12:2a:fb:97:65:5f:cf:08:c9:40:a6:c8:a9:34:c8:
d6:6d:87:3a:19:93:ad:c6:93:67:79:39:11:03:c4:
11:34:31:44:16:c5:de:3b:db:97:d7:6c:be:21:c1:
63:c2:e3:d9:0b:f6:47:60:34:49:9d:20:1f:62:6b:
d7:56:a2:be:38:f5:bb:bf:36:be:3c:25:19:29:90:
fe:0d:9b:43:6e:a9:4e:a4:04:68:32:7d:92:6b:f3:
a2:af:d7:17:e8:72:dd:20:06:bb:3f:c0:60:0a:7d:
e4:22:05:8f:6a:75:01:81:0d:44:56:66:26:2c:10:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:B8:A7:54:96:1D:0A:34:07:01:E8:6C:EE:57:7F:68:20:BC:27
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:6b:66:cb:6c:04:c0:06:49:ce:52:5b:19:22:d1:c4:78:
b5:21:13:5c:3a:07:f0:33:39:4a:05:59:6f:89:a4:05:c0:ec:
f4:58:bb:c4:a9:79:dc:b8:5b:2e:e1:db:48:f4:a4:bd:73:c2:
19:be:64:75:35:57:1f:06:95:d1:7d:4b:75:bb:ba:31:75:60:
ea:85:56:1e:11:3d:be:ca:fe:41:d9:33:65:36:81:c7:d0:e3:
10:b6:95:b5:c6:49:28:2b:44:bb:7c:42:9c:cf:87:86:1f:52:
b8:b3:9b:7b:67:62:9c:ce:76:9f:78:de:9c:10:9b:04:33:57:
cb:10:cf:97:26:7b:35:5b:dd:fe:b1:b2:9b:fd:24:05:96:b8:
48:70:95:b6:d8:37:1f:ae:f6:ba:c9:a4:ef:53:08:93:f3:10:
48:25:c8:ce:b2:73:f6:45:26:09:c1:f1:ad:81:00:d0:dc:16:
45:eb:67:1b:3c:9b:31:de:73:9f:8a:fc:61:41:cf:91:4a:22:
60:99:6d:3f:28:ae:39:5d:32:a3:a2:b1:f1:27:70:d2:16:37:
83:1c:19:34:84:d6:ad:cb:29:0b:26:e3:61:5d:71:36:1e:73:
ed:ec:4d:ae:c4:0f:00:f2:57:be:fb:b0:5e:1d:2f:fc:de:c6:
a2:12:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:42:22 2025 by rpki-client