Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: bYQTtKmmjbXdeKrTgSf01gsbvYjvaU7HY94uc/vwcvU=
Subject key identifier: 33:7C:7C:FD:4E:3E:09:51:16:28:5A:BF:66:6D:31:D5:25:48:7C:C5
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 019A711369A1A02689DD004B578F6D27E6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: Ye1cxw85OQb1Ima8Neu0NXnjw38LNe44Rbw8EmqtR9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:69:a1:a0:26:89:dd:00:4b:57:8f:6d:27:e6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=337c7cfd4e3e095116285abf666d31d525487cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:8b:09:d9:7d:ac:7b:d6:c9:e5:72:78:aa:
f5:56:e1:db:d3:59:1b:ef:bc:94:7b:57:73:29:98:
51:56:62:e2:de:e7:4c:ce:c9:54:61:8c:6f:9d:87:
eb:2d:74:af:84:34:b7:a7:65:df:57:68:4e:cf:6e:
3f:e9:eb:14:26:f2:a2:4b:ec:1a:dc:ee:c6:f3:c9:
c1:47:51:bf:08:12:f2:f1:16:d2:45:f6:5a:80:f9:
38:a6:0b:fd:17:2f:3f:0f:67:c4:a1:74:99:f1:49:
61:9a:db:b0:ee:08:39:8b:12:e6:30:54:92:f0:2a:
24:90:00:f1:0f:e7:7e:96:20:c0:86:80:e9:ea:89:
10:0a:73:2c:16:7e:b4:35:5d:7f:8e:e2:a7:bb:23:
3d:12:50:de:7f:fa:d1:e3:cc:38:72:4a:af:b8:dd:
c0:a2:04:d0:23:67:84:1a:de:d9:88:70:aa:7e:4d:
b6:ab:5c:4c:f6:ae:42:cd:44:57:6c:e5:dc:12:0e:
e6:a5:4b:a6:88:0a:18:ef:ab:9f:8e:2e:99:be:5f:
d0:fc:f6:ee:e0:66:03:5d:61:db:0f:ed:21:fb:80:
54:ab:3d:30:07:e3:1c:ac:47:c0:9d:c4:cc:e9:e3:
22:c6:4d:0a:a5:a8:0e:26:49:c0:aa:14:2f:6c:b0:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7C:7C:FD:4E:3E:09:51:16:28:5A:BF:66:6D:31:D5:25:48:7C:C5
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f8:d3:0e:5a:bd:39:16:47:72:45:50:c3:45:de:53:8d:22:
7d:61:59:4c:c0:59:b6:1c:fe:29:42:a4:0e:3e:42:9d:a7:a0:
7b:75:ad:74:85:ef:d8:39:59:49:15:0d:4d:93:b7:cc:95:00:
82:88:f9:05:57:d5:d5:d3:46:06:f0:df:79:49:f2:d0:59:e0:
14:08:4f:b9:db:04:a1:18:f7:a6:91:73:d3:82:48:b5:be:f3:
0c:8b:5e:a5:c6:b5:fc:87:fd:b5:48:bc:38:56:fe:99:82:9f:
06:2c:1f:eb:5e:ff:25:b3:d0:ac:5f:b6:7c:08:d0:22:79:ff:
d8:f9:2d:23:42:16:0e:9d:e9:e3:ae:1d:31:99:3b:17:10:25:
a6:f3:9d:e9:fc:bb:3f:55:75:83:e7:80:6f:e9:6e:77:3f:99:
60:f7:e6:ab:a0:32:30:25:2f:00:03:e1:68:8c:2a:16:54:0e:
d8:fa:9e:4e:8d:65:34:b6:9e:35:18:31:aa:ee:d6:4c:aa:ea:
a9:64:f8:e0:6e:c2:bf:aa:55:27:b4:52:9a:b0:e8:72:c1:8c:
ae:99:55:ea:79:ab:fc:7f:62:d7:5f:c4:5b:04:91:39:1b:94:
f4:7f:f8:25:16:3b:ac:74:31:de:68:63:79:a8:0a:20:8b:71:
aa:de:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:58 2025 by rpki-client