Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: DSF033wCAsJx2lutVaL+KAFT4LupTcqLkb2a0q539ew=
Subject key identifier: 3F:AE:EB:8E:2E:B0:C7:A8:EF:3D:3F:C9:B0:10:67:5D:CF:7F:CF:9F
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 01967BA09B11AD88BD8E9CA914FB8D08E68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 09:00:44 +0000
Manifest this update: Mon 28 Apr 2025 09:00:44 +0000
Manifest next update: Tue 29 Apr 2025 09:00:44 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: Yt4jJYzmOsjBzXliYac6hZugH7LSzDUxgf7eqew70Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:9b:11:ad:88:bd:8e:9c:a9:14:fb:8d:08:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Apr 28 09:00:44 2025 GMT
Not After : Apr 29 09:00:44 2025 GMT
Subject: CN=3faeeb8e2eb0c7a8ef3d3fc9b010675dcf7fcf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:dc:ce:12:8b:7c:a4:f3:09:8a:2c:c2:fc:
39:93:a0:e7:68:aa:03:9b:43:e2:ea:cc:e1:84:7c:
37:c2:5c:cd:53:f6:10:6a:e5:6c:c2:aa:bc:b1:e5:
1b:1f:39:08:05:82:30:34:60:11:61:e1:d2:c3:da:
d1:d2:bb:3a:2c:fd:70:0a:34:40:89:fa:65:34:eb:
d2:c8:c5:48:20:99:cf:ca:c7:99:57:cd:8e:63:1c:
a8:93:7c:80:11:e4:10:14:31:86:4f:4f:13:62:ae:
62:f3:64:20:6e:94:d5:3c:11:60:2d:2c:82:50:fc:
cd:25:d1:0f:64:db:d1:6d:b1:30:9a:0b:18:5c:56:
b6:f7:66:68:4b:79:a1:81:31:12:2e:58:e1:4b:e0:
87:d4:80:f3:d5:d6:e9:4b:e7:6c:7c:02:a8:e9:3a:
fc:b0:20:5e:c5:e4:02:a9:69:ce:b5:32:28:77:26:
66:3d:44:cb:20:21:33:07:e4:8a:69:26:c8:e9:b8:
94:e5:df:ad:b2:b7:d1:90:f5:b5:3b:7e:70:67:65:
04:97:1f:35:09:04:bb:aa:9f:0d:3f:55:69:03:d2:
6c:e8:2e:8c:7a:62:cc:a0:70:4d:d4:8d:2b:45:b1:
79:31:b3:37:4d:3b:2a:3d:57:84:08:4c:9d:60:51:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:EB:8E:2E:B0:C7:A8:EF:3D:3F:C9:B0:10:67:5D:CF:7F:CF:9F
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7e:8a:f8:e5:a0:9e:67:f8:2f:5e:03:96:06:02:68:3f:e0:
e9:50:c5:33:dd:00:4c:ba:71:11:ab:87:60:50:63:76:49:89:
f1:fd:29:ee:17:81:d8:5a:59:9d:71:16:98:26:f1:15:cc:8c:
db:45:3d:b7:30:79:d8:45:3b:e0:ea:12:8f:77:b5:a0:b4:57:
10:51:78:3a:4a:bb:c0:2a:28:46:69:f9:f4:40:b0:57:96:66:
f3:a0:07:2e:d2:9c:87:75:bf:16:27:80:10:8f:4b:1b:7f:32:
06:51:1b:01:b9:81:8d:3f:7c:e4:a0:2f:b8:c2:4b:33:fa:59:
8f:12:8f:21:a5:69:b1:a0:54:98:46:e8:94:80:3b:93:ab:73:
40:71:6c:eb:f8:a2:f8:6c:b8:b0:10:a2:41:07:41:30:75:63:
11:08:a6:28:a3:cf:86:b6:20:68:72:dc:66:fa:47:c8:4d:83:
63:2d:fd:88:4d:24:53:1e:ec:cb:dc:65:01:55:d4:27:33:40:
3b:cf:81:df:c2:6c:44:0d:a2:42:c3:b5:15:e6:05:08:da:7f:
10:d7:87:8e:f3:fd:5b:f3:d7:82:3c:85:09:ac:9e:20:19:56:
5f:85:05:21:da:22:62:df:07:3a:bc:ec:39:fd:ad:c8:3b:0e:
91:03:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:57:41 2025 by rpki-client