Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: lmggyOQqwvhcluZYyjWd+BwdnZGxBMubharnWfytlcg=
Subject key identifier: 97:90:01:9D:8D:B4:B2:93:E0:B6:74:04:8C:31:11:C0:2B:48:91:B6
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 01987D8A68C670B8D3280FD5646C11C2FB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:19 +0000
Manifest this update: Wed 06 Aug 2025 04:01:19 +0000
Manifest next update: Thu 07 Aug 2025 04:01:19 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: Z7ApfA8T1qVvgayPnbF0UDiTSdpopVby5M1RtDDR/mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:68:c6:70:b8:d3:28:0f:d5:64:6c:11:c2:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Aug 6 04:01:19 2025 GMT
Not After : Aug 7 04:01:19 2025 GMT
Subject: CN=9790019d8db4b293e0b674048c3111c02b4891b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:a7:3d:14:4d:f2:8a:24:4c:a8:a4:68:4d:
0d:aa:87:d0:12:7c:bf:4e:c4:b1:53:53:7d:50:0d:
97:04:fc:d9:d0:b6:8f:1d:b7:23:5c:32:46:ab:f7:
c1:19:8a:4e:e5:88:b7:06:e8:9c:d4:7b:30:de:44:
e1:12:2e:f7:ff:6c:b6:0f:5c:a6:07:ec:e2:c5:fb:
7e:1f:14:66:49:63:95:3d:00:76:36:dc:af:95:69:
52:b0:9c:c2:98:41:e6:66:db:8c:b4:7a:ef:e9:9e:
4d:cf:20:ba:5d:6e:ad:51:c6:f5:f2:e2:ef:11:75:
94:87:ed:b1:a4:4d:ae:bb:b5:ba:bb:69:d8:f7:e3:
db:f4:24:2d:e7:72:ad:b7:21:5e:f5:a0:a8:86:dc:
30:85:51:04:f3:a5:41:b2:b7:d7:a7:a8:fe:5f:71:
76:20:04:cc:f7:9c:fc:bb:ad:c4:55:74:f6:32:e3:
76:08:fc:19:e7:4f:c7:ba:23:ca:a2:7e:95:be:66:
8c:68:8e:05:a6:86:cc:38:b7:c7:be:70:9b:5b:91:
b5:d0:4c:ea:31:42:8b:cd:da:e4:db:16:94:7f:7b:
98:21:ad:48:a8:e7:cb:f5:88:e3:a8:af:48:f0:70:
0d:4d:88:ed:49:f3:13:82:81:d4:2c:37:85:a5:84:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:90:01:9D:8D:B4:B2:93:E0:B6:74:04:8C:31:11:C0:2B:48:91:B6
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:3d:ed:be:7c:81:68:cf:3e:e7:0b:3c:03:08:0d:1d:1e:
b3:86:d6:ff:0d:ef:76:d1:26:6b:1e:33:68:03:d6:64:59:b8:
05:e5:6a:7b:64:d3:78:97:09:ee:69:e4:38:d0:14:bf:f2:2a:
57:8d:9f:f9:b9:25:c9:d9:0c:f8:9d:cf:86:6e:33:0f:08:8a:
ad:81:aa:c1:ad:16:98:51:dc:ad:a8:91:62:fa:aa:8f:ed:9a:
27:d2:43:0d:58:25:4a:51:7f:12:a5:a3:bf:36:f2:7c:a9:10:
3d:4d:ef:25:b8:fc:91:de:cb:fb:76:5b:ce:d4:65:49:59:9a:
80:ce:30:ba:ff:a7:40:ed:00:24:ff:1f:85:61:49:0e:5a:77:
58:c2:2b:12:32:c7:2f:95:b3:29:3a:9e:06:e1:d7:0b:30:61:
a1:a9:55:03:b3:d2:11:d9:60:11:61:5e:f2:d0:25:1e:1f:04:
f4:0f:f8:68:c9:ee:b6:4d:d7:07:84:16:8c:0e:31:99:81:1f:
69:b1:15:81:0e:f6:0a:3c:62:6a:8d:ee:2c:c3:04:44:f0:46:
a0:d8:00:e4:9d:ea:3c:3e:99:3b:c5:15:6a:66:c2:a2:db:de:
cf:f0:ff:1f:d8:f2:6f:7c:60:04:82:91:05:b2:75:47:97:dc:
13:2d:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:28 2025 by rpki-client