Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 5hLrjuR2xtghtLQkBGSWakyrawVXHk01hF+dpvAc25U=
Subject key identifier: 80:A9:59:23:C0:A5:CC:C6:39:52:83:46:E5:60:EA:D7:AE:1B:B9:FF
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 019A16F40C7C2CD97DD4F30F3BE243B4F1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1681
Signing time: Fri 24 Oct 2025 16:01:23 +0000
Manifest this update: Fri 24 Oct 2025 16:01:23 +0000
Manifest next update: Sat 25 Oct 2025 16:01:23 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: 9CbodKgkN/D/EJAx2zkwh7HH8JEyrf4lj56mWs+S/xo=)
2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f4:0c:7c:2c:d9:7d:d4:f3:0f:3b:e2:43:b4:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Oct 24 16:01:23 2025 GMT
Not After : Oct 25 16:01:23 2025 GMT
Subject: CN=80a95923c0a5ccc639528346e560ead7ae1bb9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:ad:6d:0a:2c:d3:63:e1:a6:3d:e1:7a:1d:
0f:7c:c2:97:92:f2:3b:1d:3c:f1:05:7e:d0:9f:53:
5f:d3:bf:3d:d3:32:49:5f:20:42:c0:8b:53:7a:ff:
6e:03:fd:e7:04:6e:2a:f9:18:d6:a4:9d:36:c6:bd:
0c:ad:9a:7f:55:f4:50:29:80:7c:af:bc:e7:25:23:
12:25:62:e8:ea:22:38:5a:d0:3d:ae:5e:2f:28:cc:
8b:61:25:c6:c8:f9:c9:85:b8:9b:2c:58:e0:cc:67:
c7:0c:03:05:5e:3d:90:f2:9a:f0:b3:90:5a:c5:53:
49:3d:16:ba:e4:bb:cc:ab:51:c1:d6:fe:37:6a:92:
35:8f:1c:0a:bf:3d:47:2e:26:6f:7d:44:2f:42:e0:
12:80:6d:98:16:cc:f3:2d:14:05:97:8b:36:2e:80:
66:62:36:d2:1d:ce:e1:2c:7f:f3:58:e4:9f:f7:37:
15:d1:d6:36:ec:8c:69:b8:28:5c:a9:1d:34:e7:71:
cc:c5:8a:a2:a7:dd:eb:57:0f:99:7e:93:72:98:31:
21:f4:99:bc:ee:aa:a6:fe:78:38:9d:b1:06:1d:a1:
e5:92:a5:0e:0b:95:c7:05:db:5a:c6:94:ea:e8:fc:
ea:b6:4f:0a:76:c9:f9:f4:90:dd:94:35:b4:b1:46:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:59:23:C0:A5:CC:C6:39:52:83:46:E5:60:EA:D7:AE:1B:B9:FF
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:9f:77:20:57:50:62:07:ab:53:9a:8e:73:ee:06:f8:c4:
af:c9:14:87:f1:7e:ba:81:af:4e:4f:9e:ad:24:3a:ff:9b:e2:
eb:54:22:a9:3f:ac:2d:d2:11:1f:15:5f:d5:f4:06:54:c4:63:
e2:de:c1:47:da:87:23:a3:3c:ab:75:94:90:36:f0:8c:7a:bc:
b3:fa:d2:31:d5:fa:15:d1:14:3c:30:2e:45:4c:0f:af:c8:a4:
46:82:17:b1:a4:61:73:de:a6:82:8b:7c:1c:49:9a:31:60:87:
12:fe:e3:8f:36:8b:19:ea:aa:01:8e:ee:a2:5e:43:1c:be:2f:
b3:16:03:55:10:2d:59:1a:c8:da:33:8a:12:b5:70:76:b0:5f:
12:f6:18:36:f6:0c:cc:97:28:2c:a0:c4:a1:08:3a:bc:ca:6f:
9b:72:b1:d4:d1:18:41:b6:4c:cf:75:89:35:22:d1:a1:d7:b3:
cc:37:f4:a7:73:05:70:a3:e6:ed:a8:3e:8a:0a:e2:62:f5:61:
9d:45:3a:b1:0c:a8:a1:00:fa:8c:28:58:4c:b1:cf:31:3b:e7:
40:81:8c:47:62:f1:30:a1:69:e6:bb:d5:15:1b:e8:85:0c:5b:
04:8c:99:00:e9:a2:c4:3a:75:c9:66:1c:95:05:23:33:a3:b9:
a5:4e:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:42:36 2025 by rpki-client