Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: f48J4ihVVynBWjXMtlx+4nnG7Y1XPuUSFGlG/68slWU=
Subject key identifier: 19:EC:E7:28:D9:C2:61:34:0D:E5:3D:FB:6B:07:15:00:9D:52:E1:67
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 019A7293C1DCD91D39B3E14263F2C0A66CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: hhpYMEnUvWIym6Da56B872J5ieZBElb1YthfuuMdI68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c1:dc:d9:1d:39:b3:e1:42:63:f2:c0:a6:6c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=19ece728d9c261340de53dfb6b0715009d52e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:55:0a:54:39:c2:37:d7:36:6b:8d:2e:82:79:
3e:42:97:e0:5b:02:fd:50:ef:af:3b:b5:cf:4c:4b:
b1:97:25:b6:4d:70:4c:cb:49:e1:76:31:a3:19:05:
90:b8:13:d9:ab:c0:64:97:17:0c:55:84:95:b2:96:
1c:1c:b4:54:a8:7f:8e:dc:8f:1d:5f:42:6b:d1:71:
0c:a7:e9:9a:7e:c6:e8:ba:52:90:8d:24:87:ca:fd:
a2:ba:7b:c8:1c:21:07:60:b2:b7:89:1d:c7:73:91:
9a:19:ef:49:34:95:fa:68:fa:30:b9:eb:50:23:91:
04:13:57:ef:04:cb:a3:12:70:a4:7b:7c:23:57:85:
81:52:80:fd:eb:69:a8:3f:af:bc:33:d4:78:c2:f8:
bc:4b:bb:09:a8:00:53:2d:7a:37:c4:f0:b1:f3:09:
20:2d:0f:86:c6:b2:6d:c9:ce:ca:9a:18:a0:02:d5:
03:24:64:09:7b:6e:cd:96:df:20:72:f5:db:14:8e:
83:c5:c6:65:a0:b5:0e:b8:7d:32:75:14:65:23:f0:
e9:df:59:83:77:da:8a:70:ca:f7:48:57:f6:5e:35:
ea:e9:74:8b:96:7e:fc:a5:ea:6b:74:0e:78:c0:a6:
ae:c2:76:29:c9:bf:da:94:bb:9c:5c:9e:0f:d3:3b:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:E7:28:D9:C2:61:34:0D:E5:3D:FB:6B:07:15:00:9D:52:E1:67
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:e3:31:e3:5d:58:5c:8d:2c:20:38:37:54:c9:2e:dd:55:
5a:a0:a9:30:f0:9a:e2:26:a4:3d:19:b3:2d:b6:0a:c7:f9:ad:
6d:81:4a:1e:0a:4a:ba:82:33:d1:b6:83:c4:d0:e7:5e:16:21:
89:64:90:9e:a6:ba:0f:a4:86:d3:e4:e4:25:91:d6:7a:d0:0c:
1f:09:bb:c6:4b:a6:b2:aa:4e:1a:55:8c:d0:24:70:a5:9d:ee:
26:57:fc:9b:13:89:9c:7d:df:61:33:1b:68:8a:9d:ac:72:e3:
7f:bd:46:ee:e9:82:e4:17:2c:4b:b9:9e:a1:cb:c6:d7:ba:71:
2e:43:8c:7b:1a:7b:2c:13:6c:59:ec:4d:d7:a3:6b:43:bd:e9:
91:47:05:52:c5:90:06:bd:c7:ae:8d:95:41:0f:7b:95:8a:3a:
a9:1f:45:28:52:04:a6:84:42:26:13:68:26:a9:86:61:da:c4:
ee:52:25:0f:f6:e5:a6:e4:e2:e7:6c:95:13:7f:c8:ec:44:00:
02:45:35:26:f8:c5:df:03:3d:8e:59:50:12:cd:7b:1c:fa:d1:
2f:5d:5c:3d:95:11:40:81:5d:6a:7f:6b:50:70:40:86:95:5c:
41:58:c6:99:a0:74:22:cc:5a:fb:8f:a4:35:bd:d5:9a:73:ad:
df:1d:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client