Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: E5+EAL5iD+zOT9QjJMhY06BC9H/OmFmW7ON8rKDisHc=
Subject key identifier: 16:4F:3A:72:89:CE:39:E5:C7:8C:1E:72:E7:21:81:70:3C:CE:C2:5C
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019A00A38B166D90E5036CC6772F4E6DAECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 08E5
Signing time: Mon 20 Oct 2025 08:01:49 +0000
Manifest this update: Mon 20 Oct 2025 08:01:49 +0000
Manifest next update: Tue 21 Oct 2025 08:01:49 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: yKuEzgdMkiK2h+TXduwbTuoItLnvALTsJPHL0W2+8oA=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:8b:16:6d:90:e5:03:6c:c6:77:2f:4e:6d:ae:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Oct 20 08:01:49 2025 GMT
Not After : Oct 21 08:01:49 2025 GMT
Subject: CN=164f3a7289ce39e5c78c1e72e72181703ccec25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:1d:f3:9b:2f:da:c1:57:1d:0c:e2:af:b4:
b2:a4:6e:ee:f2:bd:11:b5:af:11:20:80:dd:aa:40:
23:cc:e4:a1:06:eb:c4:89:1f:4c:95:d8:d5:e2:e2:
f6:9f:8d:93:25:13:43:13:e2:2c:e2:4b:27:90:44:
d1:09:db:5a:11:d8:ed:1a:9b:79:d1:86:c9:bb:52:
bb:40:df:cc:3c:61:50:63:14:63:4a:36:35:8e:f7:
f1:dc:ec:bc:e3:03:fc:60:c9:05:b3:d5:75:99:eb:
66:05:d5:96:e8:88:8f:ed:a5:24:d7:42:0c:fc:13:
7a:9d:0b:a0:ac:f3:5c:c5:46:96:1d:4e:e8:96:3b:
e7:76:c2:69:97:9a:3f:23:af:18:91:b0:fe:29:fb:
8a:a3:6b:b2:52:dd:d4:13:74:f8:c9:60:43:b4:48:
05:61:b6:ea:9f:43:f8:f5:83:0c:c2:3b:f2:55:71:
19:aa:5e:2e:3b:40:74:19:f2:16:68:ba:7f:fa:c6:
7b:c0:6c:d3:a9:25:b4:13:4e:9d:60:ac:9a:0f:f2:
08:cf:52:9c:e2:c2:30:f0:3d:76:b5:98:61:e4:68:
79:16:d7:ce:fc:c6:81:e2:8c:e7:c3:9f:93:12:cc:
68:1c:98:5a:10:c2:0e:31:ba:e1:79:be:69:5c:c5:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:3A:72:89:CE:39:E5:C7:8C:1E:72:E7:21:81:70:3C:CE:C2:5C
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:98:c0:8b:57:af:53:76:50:b1:08:3b:50:6b:3e:2b:fe:
6b:aa:fc:a0:e7:51:e6:47:f2:ac:d5:5a:d7:a6:a1:a9:23:b8:
7c:87:ce:49:5e:38:1e:09:b8:54:ae:ea:73:77:e7:16:61:3c:
24:5f:9f:d2:dc:6f:f6:89:58:38:8e:f1:e9:a3:e7:f1:20:cb:
d5:8b:d8:8a:de:07:73:7e:bb:6b:62:09:a7:81:0c:fe:60:0c:
13:7e:05:70:dc:b6:c4:1d:a1:46:e8:02:85:56:ea:3e:61:61:
e0:39:7f:8c:f7:93:31:e7:7d:63:9f:31:8f:e3:dd:13:1f:9d:
de:37:e0:5f:df:f9:a5:47:3b:53:bf:4e:59:cd:88:24:09:95:
f5:ad:6e:01:18:a7:2b:1a:06:d7:63:34:1f:d3:aa:ab:03:20:
d3:c9:69:b8:99:8c:db:bd:c4:f0:c5:b8:f1:c9:8a:59:c9:69:
82:fe:e4:94:d0:43:b4:b9:c4:29:bf:c9:6c:7d:c5:6e:1c:f9:
ac:1a:b0:79:c9:08:11:5c:71:0e:e1:73:4b:3b:20:71:13:0c:
13:62:1e:60:15:ee:d4:1e:a4:ce:9e:21:32:a7:f7:e9:98:d5:
79:1c:5c:85:16:7d:b1:ba:1a:38:3f:d6:94:26:d0:85:32:45:
10:e6:30:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo4sWbZDlA2zGdy9Oba7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1
MzFkYjkwHhcNMjUxMDIwMDgwMTQ5WhcNMjUxMDIxMDgwMTQ5WjAzMTEwLwYDVQQD
EygxNjRmM2E3Mjg5Y2UzOWU1Yzc4YzFlNzJlNzIxODE3MDNjY2VjMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xId85sv2sFXHQzir7SypG7u8r0R
ta8RIIDdqkAjzOShBuvEiR9MldjV4uL2n42TJRNDE+Is4ksnkETRCdtaEdjtGpt5
0YbJu1K7QN/MPGFQYxRjSjY1jvfx3Oy84wP8YMkFs9V1metmBdWW6IiP7aUk10IM
/BN6nQugrPNcxUaWHU7oljvndsJpl5o/I68YkbD+KfuKo2uyUt3UE3T4yWBDtEgF
Ybbqn0P49YMMwjvyVXEZql4uO0B0GfIWaLp/+sZ7wGzTqSW0E06dYKyaD/IIz1Kc
4sIw8D12tZhh5Gh5FtfO/MaB4oznw5+TEsxoHJhaEMIOMbrheb5pXMWTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZPOnKJzjnlx4wecuchgXA8zsJcMB8GA1UdIwQY
MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et
OWU5NmFmNmQ2YThmLzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm
LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcCYwItX
r1N2ULEIO1BrPiv+a6r8oOdR5kfyrNVa16ahqSO4fIfOSV44Hgm4VK7qc3fnFmE8
JF+f0txv9olYOI7x6aPn8SDL1YvYit4Hc367a2IJp4EM/mAME34FcNy2xB2hRugC
hVbqPmFh4Dl/jPeTMed9Y58xj+PdEx+d3jfgX9/5pUc7U79OWc2IJAmV9a1uARin
KxoG12M0H9OqqwMg08lpuJmM273E8MW48cmKWclpgv7klNBDtLnEKb/JbH3Fbhz5
rBqweckIEVxxDuFzSzsgcRMME2IeYBXu1B6kzp4hMqf36ZjVeRxchRZ9sboaOD/W
lCbQhTJFEOYw9A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:33:53 2025 by rpki-client