Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: KVj+h80rzHIRNSNpqRxCJdLroV5Obou02auIgeDPrwQ=
Subject key identifier: 7F:76:84:EC:E7:68:86:CF:FD:F5:F6:8C:9C:A5:B9:9C:E7:9A:E2:B7
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 019922FA9E5D8BBE2E3867A1F6CEDF7574A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0A7E
Signing time: Sun 07 Sep 2025 07:01:13 +0000
Manifest this update: Sun 07 Sep 2025 07:01:13 +0000
Manifest next update: Mon 08 Sep 2025 07:01:13 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: Ald3uea5f7joI6xJy8dMv2TN0XyfTT9SUT6d3Ln34Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9e:5d:8b:be:2e:38:67:a1:f6:ce:df:75:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: Sep 7 07:01:13 2025 GMT
Not After : Sep 8 07:01:13 2025 GMT
Subject: CN=7f7684ece76886cffdf5f68c9ca5b99ce79ae2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:f1:3e:5e:ce:6f:c4:43:78:b0:a3:0d:96:
16:39:c9:af:f1:82:d2:5a:a5:2d:3a:84:85:f4:5b:
11:8b:0f:f5:4b:c8:91:d9:49:d7:0e:4d:eb:98:68:
99:1d:01:25:09:2a:c2:c8:8e:dd:a0:1a:b9:40:a4:
2b:77:4c:91:7c:20:c1:63:5c:21:ae:41:b8:71:36:
f6:a9:d3:b5:a7:32:b2:2d:e9:e6:70:9f:9b:76:9d:
8d:b2:2a:c8:56:59:5b:cd:29:df:07:c4:8e:01:dc:
58:8b:0a:4c:f9:e9:61:e9:25:bd:98:31:4f:ef:42:
7c:cd:80:6f:cf:2d:ef:e8:ed:43:cd:31:8c:7d:dd:
e3:09:b4:af:35:91:7d:19:a9:99:d5:d7:81:79:45:
80:6b:09:ea:82:37:e9:43:3c:52:00:3d:3b:3d:94:
61:e3:8c:b7:75:d7:e3:50:f5:81:37:ee:53:f9:c0:
c8:2b:01:02:47:72:e0:ad:18:19:19:e3:29:4c:03:
1d:99:7f:5c:e9:06:8a:60:a9:f0:06:dd:32:9c:00:
b3:b9:7d:45:2b:74:e2:31:89:8c:c5:63:01:34:3b:
39:fb:e6:31:bc:d6:66:f4:e6:4e:5f:b2:a6:e1:01:
c0:83:4b:50:a0:6f:57:1a:66:39:68:89:a0:c1:e4:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:84:EC:E7:68:86:CF:FD:F5:F6:8C:9C:A5:B9:9C:E7:9A:E2:B7
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d0:42:39:ab:d1:82:8e:6d:1c:04:49:57:a8:99:e2:6d:da:
0f:bd:c1:73:84:84:cc:8b:68:5a:ed:40:7f:83:8c:8a:5a:da:
a6:18:ba:5c:a8:a8:1f:f4:9a:8e:16:f7:a5:16:8b:77:b3:6f:
ba:c5:fa:cc:38:36:08:d3:05:7c:be:35:e2:f0:33:22:4a:e8:
b0:f6:05:5b:3a:c2:a0:47:93:72:49:e8:2d:7b:2c:1f:f3:fe:
66:b4:1a:62:b1:81:d1:31:c1:d5:5f:46:3a:e0:7e:8a:2e:e0:
4a:92:9d:25:ee:ba:be:a5:fa:38:df:c9:f2:08:d9:3a:ed:79:
de:6c:0f:97:e6:8b:e1:36:9d:ba:40:95:48:cc:8d:57:44:1a:
cc:7f:58:68:82:ac:39:85:c3:aa:b8:e1:1a:a0:fe:c3:75:c8:
0b:ea:04:38:ad:62:22:10:ac:c1:a6:f3:18:76:91:7c:b6:c5:
6f:c6:5c:59:2f:47:d8:eb:38:db:42:3b:c9:72:70:73:ba:aa:
b4:c7:18:08:71:45:cc:c0:8c:71:7e:25:fe:5d:77:e7:ba:09:
6f:90:7f:11:1f:ba:5d:ed:f2:3e:db:4b:7b:6e:78:9f:f8:cd:
ae:f1:09:d8:7a:7e:14:ef:5b:ab:4f:7d:67:97:b4:e2:59:fc:
20:a5:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:23 2025 by rpki-client