Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: OxwvCLwHXnHQTtqdHf/NDyUF96SiDFtnQEtRrkszO88=
Subject key identifier: 8A:11:48:C9:BB:51:41:EF:1C:62:21:49:CC:C5:0A:A6:E4:04:2A:CD
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019933142BE8A2E5FA57606BE405F67C0608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1652
Signing time: Wed 10 Sep 2025 10:03:03 +0000
Manifest this update: Wed 10 Sep 2025 10:03:03 +0000
Manifest next update: Thu 11 Sep 2025 10:03:03 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: 5bvnEQEQiP3URxfdthnU14sCEblv7mMHDZaJQ5zz79w=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:2b:e8:a2:e5:fa:57:60:6b:e4:05:f6:7c:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Sep 10 10:03:03 2025 GMT
Not After : Sep 11 10:03:03 2025 GMT
Subject: CN=8a1148c9bb5141ef1c622149ccc50aa6e4042acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:25:c9:6b:6e:1b:34:ae:e1:48:a8:88:41:
2a:c4:ab:5c:bd:af:83:bd:06:8a:c4:65:c1:f6:78:
d8:e9:b6:2b:44:60:1f:0f:ef:e8:8a:03:6d:60:4b:
3f:6b:7a:b9:4b:49:3c:5f:cb:84:24:12:8d:36:eb:
2b:1e:77:3e:9c:b2:26:66:13:e2:e6:a3:e2:c0:e4:
53:79:01:32:23:2e:06:30:07:56:5f:67:cd:48:ff:
aa:ca:16:9f:45:ac:56:16:80:a0:af:5c:f2:5c:87:
38:c2:86:89:8c:3d:28:f7:0a:60:d7:f7:7d:dd:08:
6a:48:81:81:a5:6c:ff:d5:7b:4c:1e:71:57:74:d9:
7a:56:21:6a:b3:04:79:ec:24:73:cc:cf:2d:89:b9:
b8:f6:97:dc:28:82:f3:db:70:7d:5f:42:fa:a5:93:
df:23:97:e9:19:a7:9d:54:2a:d1:b8:8f:ad:43:6b:
81:e5:62:71:57:b6:66:f7:fd:20:25:57:15:a5:1e:
04:a2:c7:12:47:42:f9:ca:37:3a:7b:ad:9b:a8:e2:
ee:10:29:37:82:9f:27:39:66:67:19:10:61:80:1e:
b9:84:cf:f7:6a:96:fd:ed:a7:b1:7a:fb:8b:d5:ae:
30:5e:4a:18:e4:22:15:8e:65:81:72:1c:5b:83:54:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:48:C9:BB:51:41:EF:1C:62:21:49:CC:C5:0A:A6:E4:04:2A:CD
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:4b:1c:fe:ad:55:e0:33:1f:a8:0b:1e:95:50:e6:00:03:
1e:ae:9d:dc:b3:fe:65:6c:38:6f:7f:83:a8:79:25:68:4a:0c:
c8:b4:ec:23:c1:b5:4c:c3:44:35:27:b8:e4:2a:10:e4:e2:7d:
4b:cf:62:2c:67:66:53:bc:ad:7a:2e:dd:b8:48:5e:02:5f:c0:
08:63:6f:4c:41:f2:97:34:66:82:3c:94:6a:4f:c8:92:45:2a:
de:c6:af:f7:31:bc:c1:de:04:ec:85:d2:b5:66:44:ee:9a:49:
8d:85:9b:07:3f:fe:47:c6:55:60:76:c9:40:59:93:d4:a5:98:
d6:18:07:d5:a5:d6:54:46:1e:fe:d5:8e:2c:9f:9d:ce:94:31:
01:48:1d:ef:7b:74:78:c5:d5:c5:bd:d5:22:02:2a:23:58:19:
0a:33:b9:88:46:10:a7:bb:ca:12:dd:a4:c6:35:0d:3a:65:83:
05:ef:28:56:ca:2e:03:ef:b5:47:50:d1:66:fc:d7:7c:5b:54:
70:79:c9:42:59:be:d6:59:37:65:a5:f0:55:fc:e2:52:bd:b0:
fd:d2:4c:85:89:bc:82:0f:6a:46:b7:b5:1f:57:53:b6:1a:75:
2d:34:c6:2c:57:f6:ec:bb:2a:29:96:67:c5:37:45:2c:a9:ff:
3d:e7:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:52:28 2025 by rpki-client