Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: +h4+eZwlH2dL/ef93scAvWbMgN8Xb5KqgaTvO4bViP8=
Subject key identifier: 09:02:C5:53:D6:DB:E1:FA:32:EE:57:91:12:CE:2F:8B:98:52:A1:80
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 019A0290BBBC0CE201580C954028B692CC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 08E6
Signing time: Mon 20 Oct 2025 17:00:30 +0000
Manifest this update: Mon 20 Oct 2025 17:00:30 +0000
Manifest next update: Tue 21 Oct 2025 17:00:30 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 2MxRQWzyjX2TiqD3itx8ZBBlfGV8GmzLeW1z3DjLAZY=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:bb:bc:0c:e2:01:58:0c:95:40:28:b6:92:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Oct 20 17:00:30 2025 GMT
Not After : Oct 21 17:00:30 2025 GMT
Subject: CN=0902c553d6dbe1fa32ee579112ce2f8b9852a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:4a:59:41:6f:f4:8f:cb:5c:54:ca:9b:d3:
a3:6b:72:15:a1:36:2c:42:c1:bf:52:16:6e:85:aa:
26:cf:03:4a:e9:9c:88:22:6d:d1:cc:03:db:88:94:
96:9b:1e:42:c7:56:7c:b2:54:cb:66:c9:59:33:97:
4c:5a:48:af:51:88:c4:7a:21:fd:bd:6b:e0:40:27:
5e:c4:70:32:04:25:eb:6f:77:0e:40:50:8f:47:0e:
55:46:39:46:65:6f:0b:72:76:ca:a0:39:3f:c0:fb:
6a:74:3f:cf:9c:7c:8b:06:cc:a0:c7:8d:18:4c:b7:
99:03:ce:e0:d4:9a:20:6a:7a:ed:cd:c5:78:aa:4d:
cd:3a:24:61:21:85:50:2b:a2:95:17:d2:7a:80:bc:
5b:7f:fb:7b:00:65:d9:f5:62:62:d0:f8:bc:3f:c3:
4f:b8:ac:5b:df:01:25:21:72:f9:86:eb:04:3d:0e:
c1:18:f1:28:ba:9a:a6:07:97:83:2e:3d:11:aa:46:
9f:69:3a:1b:a8:0b:07:1b:f2:31:6e:d8:ef:1c:a7:
3f:8a:0b:c6:77:f7:54:11:e5:9d:c3:82:07:b1:21:
99:90:48:95:24:46:67:13:8d:1f:4d:c6:9b:92:32:
13:dd:d2:2f:08:90:8b:dd:49:6e:7b:c1:ea:bb:2e:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:C5:53:D6:DB:E1:FA:32:EE:57:91:12:CE:2F:8B:98:52:A1:80
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:7b:5d:fc:9a:43:d5:84:cf:ce:58:34:b2:2f:c1:15:f2:
f6:a3:54:43:d6:91:a7:9b:b2:06:69:92:51:b0:8a:89:4c:c9:
42:cc:06:fb:ec:c0:d6:a5:b9:2f:b4:67:f4:b4:4e:9b:45:c1:
4f:ca:02:22:72:d2:f4:24:78:0e:32:c6:51:a4:73:da:fd:ce:
3f:51:3c:fb:3e:0e:a3:b2:09:f1:54:3c:c5:9d:35:5c:51:fa:
0a:6e:fa:c1:e8:3e:9d:6d:3e:8d:67:7d:84:9d:37:46:ac:93:
1c:f5:4f:02:a9:8f:dc:1f:d2:93:4d:4d:a2:b8:84:68:5c:2c:
66:3c:71:78:33:fc:b9:3d:12:e4:04:24:7e:7c:f5:2e:fe:f2:
b4:94:9a:dd:39:ad:1f:0d:08:a2:b5:b0:e2:26:d9:09:8b:2a:
8a:81:14:d9:e0:93:52:f9:8b:ad:ac:16:52:3a:0e:4d:7e:43:
75:38:a6:56:9b:0e:a3:cd:eb:c1:07:e9:70:5c:22:85:2a:92:
bc:9e:8a:4a:cf:35:7a:7d:45:52:98:66:58:af:71:ec:c3:29:
5d:6e:36:09:86:db:cf:4b:99:70:a7:ef:db:73:d3:c1:a0:e2:
43:e9:e2:51:60:fd:a3:21:51:ba:e9:64:28:51:ca:d9:b2:ff:
7d:ad:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:18 2025 by rpki-client