Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 0txG/DffZGgX1nxTMKZp8VZjiR2JcRFQC+odLY1gePY=
Subject key identifier: FB:3A:7E:AF:04:F3:CF:FC:86:82:C0:D9:A4:06:BF:7F:8E:2D:D5:35
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0197439D57BF8EDDC8B260EA9659962EC858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 077A
Signing time: Fri 06 Jun 2025 05:01:14 +0000
Manifest this update: Fri 06 Jun 2025 05:01:14 +0000
Manifest next update: Sat 07 Jun 2025 05:01:14 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: jyQvGOlJPTDkh86FImaZfoP9JhLU9f3DTUs2ZFnKG2s=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:57:bf:8e:dd:c8:b2:60:ea:96:59:96:2e:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 6 05:01:14 2025 GMT
Not After : Jun 7 05:01:14 2025 GMT
Subject: CN=fb3a7eaf04f3cffc8682c0d9a406bf7f8e2dd535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:76:6d:ef:1e:1c:d4:d7:8d:3f:71:9f:4f:
f9:43:aa:ea:a0:1b:d5:4a:01:92:0c:af:99:3d:83:
19:ef:18:e4:5c:68:28:5a:2b:a4:de:c1:e1:01:15:
4e:2e:73:3a:db:b6:7b:f1:85:af:f2:34:88:47:b2:
70:aa:ab:3e:0a:93:6d:a0:2f:11:86:5f:08:4f:87:
59:cb:ba:9f:4b:6c:3e:2f:f4:e3:68:58:fa:82:c4:
bb:60:7d:55:6d:56:41:34:65:61:d3:3a:72:e3:1a:
a2:cf:e0:04:5d:40:94:84:d0:4b:d1:4d:88:1b:d4:
d4:79:22:d1:55:a9:e9:39:09:ac:92:1c:37:24:09:
a8:2d:a0:c2:b1:f3:c1:1b:ec:79:c4:00:b5:2f:0a:
90:5f:15:4a:41:51:c8:c5:d3:d7:d7:6c:c1:2c:72:
17:d4:1c:e5:2b:5a:97:74:cb:0d:00:d4:15:ec:a1:
be:fc:6f:4c:77:f7:42:f5:1f:2d:51:6b:d8:5c:de:
85:59:d6:6d:a1:14:5c:d7:87:39:31:c5:1e:84:00:
11:9c:93:34:c2:5f:1c:bd:72:df:0a:8f:1f:4e:7c:
ff:e4:c9:d7:40:fc:fc:83:ba:46:19:2f:b5:26:3c:
b8:6f:0d:1a:2e:7b:c4:21:91:58:4b:70:25:45:e4:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:7E:AF:04:F3:CF:FC:86:82:C0:D9:A4:06:BF:7F:8E:2D:D5:35
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:45:1c:1c:fd:ee:7a:b2:cc:e8:df:69:c4:fe:ba:a4:77:5e:
d7:af:55:4b:58:8c:57:4f:15:26:3e:5c:12:ba:b0:be:41:d4:
c8:0b:4e:79:eb:8c:0b:ab:d9:bd:9a:b7:51:c5:d0:0b:fe:54:
99:9f:49:0d:2c:47:25:19:f4:4f:f2:c5:90:78:f0:54:a6:29:
dd:8d:fe:82:f9:c1:5f:8e:72:4b:35:0d:63:18:ff:df:69:1f:
83:fa:37:72:85:d5:e5:6c:f4:a7:08:0c:72:f4:fa:e4:2d:2e:
01:a8:c9:6c:7f:83:2a:8d:86:ef:bf:e0:58:39:a1:d7:67:4f:
9f:d1:3b:a7:6c:6d:5f:cd:b5:27:4d:59:22:47:18:c8:5a:64:
ee:3e:0e:cb:5d:c6:6a:d2:47:14:c1:4f:c6:fd:14:e7:f8:98:
0b:1d:28:d2:e2:49:c1:bb:d6:83:7e:f4:ac:1f:46:36:6c:30:
4c:a4:5c:45:4b:64:67:01:70:47:11:72:8e:5a:1a:87:01:6e:
78:cd:96:82:8a:c0:eb:bc:c7:0f:4b:35:19:75:cf:cf:9c:9c:
07:f8:5e:93:37:f8:75:dd:21:73:50:5d:76:8d:4a:07:ea:f6:
e6:07:c2:41:2e:59:6a:1a:4d:e3:11:6f:f8:07:31:49:64:1c:
6b:61:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:04:38 2025 by rpki-client