Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: afjQgEpgo8VkH7Z78CwtRkghHjwcGhslHA2NcPUqF4E=
Subject key identifier: 71:95:E0:A9:85:A4:AF:35:E3:1D:67:10:92:DF:08:11:A0:82:28:81
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01974E20B5C03EA862F01861885DA436EE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 085A
Signing time: Sun 08 Jun 2025 06:00:55 +0000
Manifest this update: Sun 08 Jun 2025 06:00:55 +0000
Manifest next update: Mon 09 Jun 2025 06:00:55 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: tM2lbCT0vadNXkzg/ppvksAqPoHUUaa8pV9BjWh+fe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:b5:c0:3e:a8:62:f0:18:61:88:5d:a4:36:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Jun 8 06:00:55 2025 GMT
Not After : Jun 9 06:00:55 2025 GMT
Subject: CN=7195e0a985a4af35e31d671092df0811a0822881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:32:48:2f:d0:b3:a4:63:67:8f:48:d4:c9:
28:b8:ed:b0:fa:94:29:90:c9:09:18:02:0e:2f:33:
30:c0:ee:7b:00:7f:40:56:1d:fa:ba:8d:5e:19:d2:
b6:20:f9:bc:f3:ce:e0:d7:d0:c8:5e:ff:24:40:e6:
d7:6f:e0:82:2e:53:46:2f:ed:6b:65:b7:fa:42:05:
ed:3e:6b:b6:95:1a:74:e4:53:b7:d7:0d:47:c5:9e:
07:d5:2f:c2:26:93:f9:79:18:86:91:77:cf:78:7b:
5d:97:69:8b:cb:c7:a0:16:ad:00:bb:54:a6:cf:ce:
cb:b5:bf:8c:bf:52:7a:0f:2c:96:2c:75:86:4e:28:
f7:f9:77:17:db:94:db:a9:ab:a3:b8:23:77:b4:2e:
e4:21:28:23:eb:d7:99:19:b3:2b:53:c0:2f:7d:b5:
d6:20:15:5a:ac:9a:6e:92:81:2d:4f:1a:0f:eb:d1:
33:85:7c:a4:21:b0:96:b9:31:89:39:77:26:23:06:
0e:a4:3f:67:b1:f8:0d:91:bf:34:e0:bf:1a:bb:8c:
14:49:2d:66:4b:8e:cf:96:9f:a9:8f:82:52:a5:26:
6e:5d:51:55:16:1a:8e:9e:e2:08:43:8e:66:71:a7:
a7:03:e6:18:1d:86:f5:eb:6f:8a:cf:13:4e:fb:11:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:E0:A9:85:A4:AF:35:E3:1D:67:10:92:DF:08:11:A0:82:28:81
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:07:8e:ba:a7:ba:a0:25:a1:3a:fa:91:a9:a8:77:69:6c:61:
73:2f:28:76:6b:66:7d:8b:b5:da:b3:6e:5c:f9:7e:3e:43:04:
82:ad:08:4d:8f:80:ee:17:7b:05:ea:7d:a5:9c:d0:60:82:4d:
6e:e9:54:40:86:43:94:79:0d:e4:1f:f2:db:ba:76:da:77:90:
e4:7e:a0:09:a3:d8:e9:3d:cc:51:bf:5d:24:b9:5a:29:ca:08:
fa:2e:38:ef:2b:29:61:11:41:59:f8:5b:a7:6a:77:f0:70:b2:
f2:98:86:7d:0f:24:05:ea:13:41:d3:a8:0b:6d:05:c1:86:1e:
b4:21:48:5b:36:e2:d4:3d:5d:8f:9c:9c:fb:bd:50:ca:82:c8:
1c:04:ba:12:b6:8b:5b:97:b2:68:51:0b:3b:c0:71:17:04:ed:
35:37:ce:ea:dd:e8:00:73:52:07:a1:87:04:0e:71:70:af:77:
a0:a3:f4:8b:1e:16:23:b2:77:c2:ec:b1:da:4d:99:90:9c:0c:
bd:a3:a3:9b:05:56:96:06:e2:50:ac:11:e6:95:d0:75:38:cf:
d5:6d:67:bc:3f:e7:79:e0:13:e0:ae:b4:54:57:16:87:8f:ec:
bc:7c:e0:9a:95:69:f2:1d:98:ea:5a:2a:81:02:bd:6e:ff:cf:
9b:e8:76:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOILXAPqhi8BhhiF2kNu4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmZkNjg4MWRjNjg1OWI3YWZhYTlmNzUwYTZkZDhiYmQ2
OWU5OWEwHhcNMjUwNjA4MDYwMDU1WhcNMjUwNjA5MDYwMDU1WjAzMTEwLwYDVQQD
Eyg3MTk1ZTBhOTg1YTRhZjM1ZTMxZDY3MTA5MmRmMDgxMWEwODIyODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b8ySC/Qs6RjZ49I1MkouO2w+pQp
kMkJGAIOLzMwwO57AH9AVh36uo1eGdK2IPm8887g19DIXv8kQObXb+CCLlNGL+1r
Zbf6QgXtPmu2lRp05FO31w1HxZ4H1S/CJpP5eRiGkXfPeHtdl2mLy8egFq0Au1Sm
z87Ltb+Mv1J6DyyWLHWGTij3+XcX25TbqaujuCN3tC7kISgj69eZGbMrU8AvfbXW
IBVarJpukoEtTxoP69EzhXykIbCWuTGJOXcmIwYOpD9nsfgNkb804L8au4wUSS1m
S47Plp+pj4JSpSZuXVFVFhqOnuIIQ45mcaenA+YYHYb162+KzxNO+xEKNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGV4KmFpK814x1nEJLfCBGggiiBMB8GA1UdIwQY
MBaAFJYv1ogdxoWbevqp91Cm3Yu9aemaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQt
NDg3NDEwMDlmYzFlLzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQtNDg3NDEwMDlmYzFl
LzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgeOuqe6
oCWhOvqRqah3aWxhcy8odmtmfYu12rNuXPl+PkMEgq0ITY+A7hd7Bep9pZzQYIJN
bulUQIZDlHkN5B/y27p22neQ5H6gCaPY6T3MUb9dJLlaKcoI+i447yspYRFBWfhb
p2p38HCy8piGfQ8kBeoTQdOoC20FwYYetCFIWzbi1D1dj5yc+71QyoLIHAS6EraL
W5eyaFELO8BxFwTtNTfO6t3oAHNSB6GHBA5xcK93oKP0ix4WI7J3wuyx2k2ZkJwM
vaOjmwVWlgbiUKwR5pXQdTjP1W1nvD/neeAT4K60VFcWh4/svHzgmpVp8h2Y6loq
gQK9bv/Pm+h2WQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:20:50 2025 by rpki-client