Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: 9HKEnpnMNRn1FddiHz3jyFPCfqwqbRORwTQ7CUravTA=
Subject key identifier: 1A:13:9B:4C:C8:D9:93:67:0D:26:08:4F:29:FA:4D:FE:2C:B7:36:1F
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 019753471BF3E1129D89E62B98A7464830EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 06:00:58 +0000
Manifest this update: Mon 09 Jun 2025 06:00:58 +0000
Manifest next update: Tue 10 Jun 2025 06:00:58 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: 89QCpV43ldRsJOHkxHdhKbDbIc5a83vpfS9f3yrcCbk=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:1b:f3:e1:12:9d:89:e6:2b:98:a7:46:48:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Jun 9 06:00:58 2025 GMT
Not After : Jun 10 06:00:58 2025 GMT
Subject: CN=1a139b4cc8d993670d26084f29fa4dfe2cb7361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:59:13:93:64:2e:47:75:da:11:dd:a2:88:
86:bb:26:cf:64:b6:f7:fc:1e:31:63:ad:42:97:1a:
2c:6e:e3:1a:ff:32:f9:89:84:66:e3:13:2d:2b:44:
40:45:aa:7b:23:8c:ba:19:2f:bc:c5:81:f0:b7:8b:
32:c5:00:0c:e3:b4:08:5b:95:cd:16:a9:7a:c9:24:
aa:b0:a6:82:82:58:d7:04:ab:96:d0:88:e6:d0:68:
5d:a2:c3:b3:ee:f5:cb:33:79:e0:a9:09:54:4e:86:
86:d7:c7:98:48:18:da:19:db:de:26:24:aa:fe:d1:
c9:88:9a:84:86:08:7a:81:c0:29:f3:de:6f:15:aa:
5b:3d:3c:e8:95:60:22:b8:8d:b5:46:51:81:9d:40:
04:f8:29:1e:75:a9:e7:09:4c:09:84:bb:37:77:74:
1e:37:7c:03:54:e3:03:49:f9:3c:c9:17:6e:9a:6a:
a4:e8:a1:6a:56:f6:1f:3e:f2:1f:85:18:64:6f:1e:
ce:bf:f9:43:63:ee:6e:cf:bb:bb:ef:d4:dd:e0:87:
e7:86:bd:50:33:2a:b9:ba:2d:f9:b3:f0:8f:70:ff:
b8:7f:78:1a:9a:16:1e:9f:c2:93:3d:03:87:2a:d9:
1f:ac:95:25:5e:a4:2d:85:a5:ae:b5:d7:99:b8:67:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:9B:4C:C8:D9:93:67:0D:26:08:4F:29:FA:4D:FE:2C:B7:36:1F
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:5b:81:c9:f8:37:b6:2e:14:1e:2b:1d:19:c9:9d:55:13:
e9:6b:2d:b1:68:ea:b1:18:3d:6f:f6:4b:29:fd:bb:f9:0d:7e:
b1:6b:5d:82:7f:6f:65:57:d3:e5:87:10:61:42:b6:db:b0:aa:
f4:26:74:94:6d:63:aa:36:9c:7c:2c:83:b5:cc:b5:36:4b:f1:
42:ce:d9:fd:ff:86:fd:eb:38:3a:c3:8e:0c:5a:df:80:bb:bd:
63:b4:5a:50:d0:50:9d:3d:64:28:be:e6:de:7b:81:a4:61:55:
cd:73:17:5d:3d:04:44:fc:aa:93:e5:b0:31:a0:0c:b2:3a:93:
db:46:b9:0e:e3:d1:f3:d4:df:96:cc:e8:f9:83:06:7b:c7:03:
0d:11:ff:a7:db:3c:b9:2a:d8:9b:eb:de:8e:83:fe:b1:61:c0:
f8:ca:4c:7a:6a:b3:89:ee:f5:bf:5a:47:41:1e:1f:c9:4a:f0:
ea:a6:e3:39:57:39:59:f7:fb:ed:8b:5b:6b:ef:4b:24:7b:a9:
cd:01:4c:10:79:76:11:60:e6:db:f8:66:5b:0e:9a:eb:12:e7:
76:14:c4:c1:a3:3f:01:72:f5:fa:1d:31:30:5c:c3:7b:be:7f:
a8:17:66:e5:07:2f:82:0f:05:9c:c4:a3:c1:c0:6e:4e:33:fb:
bc:f0:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:15 2025 by rpki-client