Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json)
Hash identifier: lCUOXvZz40WxH17kJWJhbfrgKD6b+9O6n8KzaHY+wKo=
Subject key identifier: EE:F5:13:1C:2E:F8:AD:AA:03:E7:20:00:02:22:8F:0D:85:41:64:E3
Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Certificate serial: 019A5D551E912039DD02D7C9573EFBE8ABED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
Manifest number: 0165
Signing time: Fri 07 Nov 2025 08:00:50 +0000
Manifest this update: Fri 07 Nov 2025 08:00:50 +0000
Manifest next update: Sat 08 Nov 2025 08:00:50 +0000
Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: mVPA/ChpAR95NUjpBhv3ibdDPQFq85UN8FBHVhEziiE=)
2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:1e:91:20:39:dd:02:d7:c9:57:3e:fb:e8:ab:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Validity
Not Before: Nov 7 08:00:50 2025 GMT
Not After : Nov 8 08:00:50 2025 GMT
Subject: CN=eef5131c2ef8adaa03e7200002228f0d854164e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:63:ff:f4:06:46:19:a4:b7:fa:f5:ac:e1:
fd:e7:93:d7:9c:00:6a:e4:92:41:0b:fd:87:c2:b6:
c0:57:1a:1e:bd:01:53:e1:20:ca:cd:1f:b5:45:d4:
7b:3e:b8:a3:d7:cd:8b:0f:6f:e6:af:d6:ca:ff:41:
9b:c3:28:72:a2:78:c9:71:67:6e:30:79:35:10:c6:
1b:5f:44:27:57:13:2d:5e:69:cf:c5:06:15:0b:a9:
88:8e:4a:7d:03:ad:49:c0:46:6b:b8:92:eb:e7:81:
b4:22:80:1a:30:a5:ff:e6:ce:69:6b:c7:79:5e:b4:
8d:a5:45:70:b7:e1:93:70:94:81:89:d5:9a:1b:83:
61:a9:a7:d6:55:77:7b:89:a9:b6:4d:57:54:51:fb:
da:65:d5:8e:52:98:27:40:6e:45:5b:64:01:01:93:
5d:83:a5:e5:a1:07:ae:49:94:14:82:08:2f:14:be:
38:5d:29:e7:6e:0a:60:ab:80:f2:bb:1f:c7:ba:ac:
26:08:b8:f8:60:dc:83:30:a7:0f:cb:12:fd:c3:32:
46:6f:66:18:9e:cc:cf:05:c9:42:80:87:65:0a:35:
71:2c:a0:38:1a:5b:a4:3e:34:20:92:f1:3a:0b:ce:
33:da:9d:d5:d2:0f:91:4b:b1:06:de:7e:44:82:c1:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:13:1C:2E:F8:AD:AA:03:E7:20:00:02:22:8F:0D:85:41:64:E3
X509v3 Authority Key Identifier:
keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:25:ca:49:4f:f3:a2:89:94:2c:d3:24:13:a3:d6:11:ca:68:
ad:89:77:7e:23:2e:8c:39:cf:ff:f0:fc:de:a8:c2:4f:19:21:
4e:46:6a:8c:17:4a:e3:e7:bd:01:25:d0:cd:9c:8d:91:2d:3b:
34:57:39:07:e7:7e:28:5f:53:9e:21:45:f1:da:f0:4f:7a:ec:
bd:f4:4a:c8:a4:e2:11:b8:0e:be:f8:4e:e6:56:96:7b:05:e2:
01:fb:a6:c0:06:bc:37:c7:01:54:f2:16:73:fb:2a:d0:09:34:
63:42:0f:f2:e0:23:d2:33:3b:8c:61:ee:17:7e:49:25:1c:e4:
e2:21:e1:ae:ae:d8:00:7b:c1:22:b6:4d:a7:1c:bb:7e:1a:76:
20:b9:ab:5b:af:86:b4:6d:cf:2b:86:40:3b:3e:1f:48:57:67:
c0:8b:03:8e:55:1d:d3:12:66:88:4b:09:6c:d3:e8:12:75:44:
69:9c:a8:87:f2:3a:23:53:f0:b0:38:d8:b8:8c:6b:af:65:b1:
9a:09:e8:60:4e:a2:59:6c:16:ab:cb:91:1d:ed:51:3c:c9:78:
8d:92:63:3f:c3:7f:a6:66:06:a8:40:7f:c1:3d:6c:12:de:f4:
45:fb:52:14:74:56:0a:f9:d7:e3:7b:e3:b5:16:fa:4c:09:b5:
24:40:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:41:42 2025 by rpki-client