Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: 777JcXM8jPUvELEnv+EbRjdVW0zDt8ocbcUb+gk46Us=
Subject key identifier: D1:3C:C1:15:6C:95:07:BA:11:93:26:BD:2C:66:64:B1:2C:7B:4B:BB
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 0198D4A7869BEEF17C80004F18B0A7848440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0A0B
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: sAyHAz+fVTe3oZCOfdv+WSPUerJ1BquqGqAsYIgNaUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:86:9b:ee:f1:7c:80:00:4f:18:b0:a7:84:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=d13cc1156c9507ba119326bd2c6664b12c7b4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:a2:07:20:97:cd:33:d7:8c:78:0e:21:58:
07:89:ed:72:08:d6:c6:52:8a:19:c5:08:ec:7c:4b:
f1:25:03:11:4d:ce:7e:1d:f9:7a:56:ee:49:d0:fd:
ad:b9:73:e9:cc:2c:7c:a8:a6:8e:de:f5:63:db:7c:
36:2b:dd:02:ca:a3:b5:d3:48:8b:18:7b:98:f9:31:
da:0e:bf:07:bc:25:ef:eb:56:c5:c4:09:19:13:0f:
82:68:5a:98:c1:c6:1f:a3:d0:e2:4c:31:51:02:4f:
95:64:bf:a4:cf:f3:b5:1c:ad:26:1e:12:7b:06:f7:
fa:1b:4e:ec:fb:97:88:12:0f:77:5f:e6:10:19:6d:
c5:30:87:41:38:15:4d:ee:cc:07:9d:d9:45:a1:77:
7b:6d:f9:26:d6:7a:46:e0:e8:86:c8:7c:bd:fe:c0:
95:89:4a:1c:34:7c:7f:d7:67:4c:17:7f:d5:cc:8c:
71:31:d3:e6:43:89:0b:1e:57:c4:a5:95:4c:34:70:
fc:20:d1:e6:04:d1:ce:19:9d:0e:1b:3f:a0:1b:34:
2d:fe:57:d0:35:fd:b2:0a:56:21:3e:f2:7c:aa:df:
82:98:80:4a:e6:b2:8e:2b:3a:e3:51:fb:9c:cd:43:
03:b5:c0:97:be:50:01:29:37:d4:e5:31:38:9c:0c:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3C:C1:15:6C:95:07:BA:11:93:26:BD:2C:66:64:B1:2C:7B:4B:BB
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:2c:d2:36:fe:2b:cd:e9:35:b4:71:87:ae:60:c2:92:d7:
d1:92:15:98:42:a4:a3:63:34:43:ce:47:f1:a0:ce:2e:c7:0b:
59:16:27:b1:a1:c8:56:2d:d7:c2:62:13:06:81:e0:52:23:4e:
0f:46:8c:6d:a4:f5:7e:b1:b3:8f:6f:df:b3:88:85:90:2f:21:
2f:0a:27:e5:57:fc:05:22:73:c7:1b:7f:e4:4c:84:a6:b8:ce:
41:46:11:67:61:32:e6:b3:9c:ef:0b:8b:dd:95:5e:31:68:a4:
07:61:7b:c1:a9:22:84:60:74:5a:ac:79:56:6c:cd:da:c4:b5:
34:b9:d2:1b:5c:dc:7f:dc:ea:38:23:52:c1:a7:3f:97:a1:2a:
41:85:4d:7c:4d:b2:ea:cc:13:c8:4b:a8:44:6a:55:5d:ba:98:
77:c6:ff:11:38:20:a5:b2:c8:9b:d0:58:87:1c:2a:b7:3c:06:
95:19:c3:cd:59:2b:a1:07:5b:5b:1f:8a:ca:22:03:88:e3:a8:
58:63:58:b1:f7:dd:04:08:2e:c6:d0:fd:01:27:c5:91:22:37:
16:62:db:e1:0e:44:6f:80:62:0c:8a:2a:03:a3:59:54:fc:d8:
2f:8c:d6:9b:1e:09:d8:33:15:68:3a:e7:a2:e3:b1:8c:42:f9:
4b:b7:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:49 2025 by rpki-client