Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: P943BHV7sQPTCHnDiFwqYNwitRDr4bkaE3bF5LOW5h4=
Subject key identifier: A2:E6:30:9E:A8:31:C9:E2:EA:FE:C4:2D:B3:1B:C4:B3:CF:ED:1C:AD
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 0197B8C5C1B0DE90B8B9DD31E7201FAAC5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0978
Signing time: Sat 28 Jun 2025 23:00:57 +0000
Manifest this update: Sat 28 Jun 2025 23:00:57 +0000
Manifest next update: Sun 29 Jun 2025 23:00:57 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: dXwSf2lyGrD9aAfreJACZNsqMKGa84vqWeP7I7YVOvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c1:b0:de:90:b8:b9:dd:31:e7:20:1f:aa:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jun 28 23:00:57 2025 GMT
Not After : Jun 29 23:00:57 2025 GMT
Subject: CN=a2e6309ea831c9e2eafec42db31bc4b3cfed1cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:22:67:bf:b1:be:33:57:50:5e:55:32:3c:
c1:cf:40:02:71:71:84:c1:f7:fb:19:ef:6e:bb:62:
f5:9f:28:5e:07:7d:d7:18:da:27:94:d6:f2:54:7f:
a8:ed:14:69:1d:eb:f3:66:fc:d3:8d:01:18:c1:37:
63:7a:25:63:52:d7:10:72:84:e7:ee:ea:3f:b7:77:
5b:e9:74:d3:5e:8e:f4:2a:9a:39:1c:31:69:b9:95:
cc:ed:f3:7c:50:f2:8e:a9:c9:b3:5f:ef:84:e0:46:
ed:6e:ed:b1:eb:30:4b:40:c3:e7:bd:b8:4d:94:58:
60:fa:40:43:8a:87:aa:89:38:de:ba:24:f6:8e:59:
99:1d:1c:1f:b7:bb:9b:2a:3e:a6:a3:05:6e:06:7f:
97:72:0d:30:d0:57:7e:db:e1:47:b7:f5:e9:5f:74:
2d:76:81:b1:02:68:6a:a0:36:be:aa:aa:72:a9:2f:
e9:f1:23:58:21:15:98:89:d0:08:4d:d5:99:07:98:
0a:c0:2f:d0:c5:bd:1c:b0:04:b4:d6:9c:77:46:f3:
2a:f0:a4:78:93:c9:3d:b3:1c:5b:48:3a:09:c2:77:
bb:de:f1:68:11:1d:a3:7c:b3:4f:27:19:04:fa:97:
15:c4:26:be:04:37:d5:36:15:d8:01:4c:9a:e6:81:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:30:9E:A8:31:C9:E2:EA:FE:C4:2D:B3:1B:C4:B3:CF:ED:1C:AD
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5d:2c:a5:33:f4:8e:a8:5d:24:b4:0e:6e:bc:2f:a2:5c:ef:
9e:e6:e4:98:d3:9d:4a:0d:4b:44:5e:bd:00:18:bf:fe:29:71:
ef:0a:d0:b6:52:41:ad:98:88:af:f5:b9:26:a1:91:d9:42:d4:
a3:6a:dd:d7:d2:b3:d8:e6:e9:34:3b:ba:52:7f:24:4f:fd:21:
4c:fb:cf:8c:d6:0f:ac:1d:a4:e9:72:fc:2e:1d:18:49:39:5e:
01:c3:0e:29:ea:99:8f:11:9f:8b:e0:74:06:7a:b6:79:ed:12:
83:e9:ab:24:b1:4b:a0:40:26:ad:e2:80:b3:b0:54:41:3e:f5:
e1:73:5c:f2:6f:45:0a:7c:66:85:3e:50:2f:df:21:e5:fc:86:
aa:43:90:13:bc:fa:31:16:16:c5:3c:d2:12:c4:e3:96:70:14:
4d:57:9e:5c:a6:0f:38:e1:be:ac:84:c0:00:c5:1d:0d:f0:84:
70:a1:ea:b2:3a:f3:34:7a:e0:89:90:19:e7:32:b5:bf:f8:94:
33:2f:5f:c3:04:78:a6:0d:ab:4b:5f:38:9a:b8:71:be:48:3f:
d4:10:57:ec:9e:65:64:23:2e:80:d3:21:ca:58:d4:34:f7:ff:
dc:87:4b:46:52:86:a8:79:21:31:6b:22:96:32:50:13:d6:b1:
51:a7:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:30 2025 by rpki-client