Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: evbPsonythQG/fkBBAB5B2JJ1lfPUR3jFUqwDqlJypk=
Subject key identifier: DD:4D:01:F4:04:23:4C:5A:D2:A9:35:24:D8:D2:4D:43:1F:DD:47:10
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 019770E33679D651B74D76E5AA934AB4F657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:27 +0000
Manifest this update: Sun 15 Jun 2025 00:00:27 +0000
Manifest next update: Mon 16 Jun 2025 00:00:27 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: LcJMKGayZjOhC2+DZofqNJLUWzwahQc94EBllVJymQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:36:79:d6:51:b7:4d:76:e5:aa:93:4a:b4:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Jun 15 00:00:27 2025 GMT
Not After : Jun 16 00:00:27 2025 GMT
Subject: CN=dd4d01f404234c5ad2a93524d8d24d431fdd4710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:85:ee:54:de:f8:c1:db:f8:32:78:d8:50:
15:a2:f9:15:40:6d:2f:a4:d5:19:5c:c5:01:9c:ef:
1b:3e:0e:da:29:47:62:21:cc:f2:c1:ad:8f:05:53:
9f:de:c4:7d:d3:0e:c0:8c:74:eb:f0:67:6d:3c:93:
3b:0c:c3:72:a8:56:6b:97:51:fb:26:96:57:65:ba:
32:15:6e:9d:b7:08:b1:a9:21:f6:87:8b:9a:97:ed:
a3:28:06:da:14:42:6a:bf:3b:5c:f0:3b:9e:f5:37:
23:27:72:ea:25:75:a0:39:59:54:10:ef:a8:10:41:
a2:f9:16:a7:89:20:11:11:c3:dc:03:44:0f:07:3a:
23:2e:55:49:08:77:60:b7:3b:bd:a4:6f:93:93:7e:
38:88:3b:71:a0:0b:fe:6c:05:f2:7c:63:46:fa:ef:
ed:14:4d:d2:28:f9:fa:53:d9:f0:79:ee:86:00:00:
3d:f9:a9:16:27:1b:5c:ec:fd:64:f8:c7:26:85:1b:
98:6a:25:c7:61:37:1e:88:6d:95:32:e7:f8:45:39:
a2:5f:97:68:d9:79:03:03:29:6b:93:83:bd:d2:e5:
bb:df:c1:05:6f:c9:58:94:db:6e:02:c6:16:ab:fa:
28:a3:e1:4c:73:c9:fa:46:eb:ac:16:e5:6c:54:32:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:01:F4:04:23:4C:5A:D2:A9:35:24:D8:D2:4D:43:1F:DD:47:10
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:07:86:97:bd:8a:1d:7c:96:80:63:17:12:34:46:ab:c0:
d5:be:88:3c:c0:84:1f:3b:04:bd:8e:0a:21:83:ae:50:36:f4:
95:22:8a:5f:29:b3:81:83:d7:f3:68:49:c2:9a:29:57:4f:6a:
93:82:81:32:00:64:d5:35:74:9c:94:9f:8a:b0:84:a1:b7:32:
ce:95:0d:12:a6:1e:29:8d:94:f8:04:b8:bb:43:ae:54:d5:87:
f1:97:26:1e:47:46:0d:5f:67:f6:f4:df:03:b8:6b:0b:78:f0:
07:b1:cb:1f:cc:9b:15:52:db:dc:48:f1:df:c7:11:3a:36:17:
a9:b3:3d:df:27:31:b7:0a:c2:16:43:7c:f4:72:f1:ad:fd:f2:
b0:46:17:5a:c1:be:95:63:8f:a1:22:ee:ae:ef:6c:34:31:ad:
15:44:d2:dd:b7:a3:30:bc:e5:9d:13:29:45:36:ff:1a:ed:ee:
6d:17:7d:36:9a:77:1e:07:19:2f:15:83:3b:fe:de:96:ac:76:
e8:b9:00:84:43:c1:6c:8d:1d:ef:8e:10:c6:b9:b7:fc:e4:ab:
62:6b:c9:10:86:08:0c:3e:42:69:97:a4:a9:77:a4:a3:d0:18:
2a:92:6a:d1:31:6c:12:4c:fb:ab:77:0f:58:0f:2d:88:75:54:
69:f3:f5:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw4zZ51lG3TXblqpNKtPZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy
NGI5NjYwHhcNMjUwNjE1MDAwMDI3WhcNMjUwNjE2MDAwMDI3WjAzMTEwLwYDVQQD
EyhkZDRkMDFmNDA0MjM0YzVhZDJhOTM1MjRkOGQyNGQ0MzFmZGQ0NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXyF7lTe+MHb+DJ42FAVovkVQG0v
pNUZXMUBnO8bPg7aKUdiIczywa2PBVOf3sR90w7AjHTr8GdtPJM7DMNyqFZrl1H7
JpZXZboyFW6dtwixqSH2h4ual+2jKAbaFEJqvztc8Due9TcjJ3LqJXWgOVlUEO+o
EEGi+RaniSAREcPcA0QPBzojLlVJCHdgtzu9pG+Tk344iDtxoAv+bAXyfGNG+u/t
FE3SKPn6U9nwee6GAAA9+akWJxtc7P1k+McmhRuYaiXHYTceiG2VMuf4RTmiX5do
2XkDAylrk4O90uW738EFb8lYlNtuAsYWq/ooo+FMc8n6RuusFuVsVDI4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1NAfQEI0xa0qk1JNjSTUMf3UcQMB8GA1UdIwQY
MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt
OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0
LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ8Hhpe9
ih18loBjFxI0RqvA1b6IPMCEHzsEvY4KIYOuUDb0lSKKXymzgYPX82hJwpopV09q
k4KBMgBk1TV0nJSfirCEobcyzpUNEqYeKY2U+AS4u0OuVNWH8ZcmHkdGDV9n9vTf
A7hrC3jwB7HLH8ybFVLb3Ejx38cROjYXqbM93ycxtwrCFkN89HLxrf3ysEYXWsG+
lWOPoSLuru9sNDGtFUTS3bejMLzlnRMpRTb/Gu3ubRd9Npp3HgcZLxWDO/7elqx2
6LkAhEPBbI0d744Qxrm3/OSrYmvJEIYIDD5CaZekqXeko9AYKpJq0TFsEkz7q3cP
WA8tiHVUafP1EQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:57 2025 by rpki-client