Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: A2sFUQSpa9crPIqqsRpCOfFtinEseVgFjvYZCouKUrg=
Subject key identifier: 80:E7:6A:70:AA:F2:C6:19:38:6B:6D:62:B4:31:44:EA:57:E2:B9:7A
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019A4D3D142F547FDA6870FD2962570A7426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0ACE
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: s5clU+UEzqjcpvydkcP0Mfpv/HWG46WYdMeIg8VUMRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:14:2f:54:7f:da:68:70:fd:29:62:57:0a:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=80e76a70aaf2c619386b6d62b43144ea57e2b97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:70:e3:45:1b:20:5c:20:65:db:05:e5:9b:
2a:4f:b1:4a:63:d9:b5:f7:e0:12:ee:c5:f2:ad:f7:
8b:f0:e4:23:95:44:34:79:35:ca:dc:62:ea:13:05:
13:0c:ae:22:73:0d:72:59:27:ce:41:e9:3c:83:48:
28:77:c1:bc:12:a9:31:31:93:cd:cc:67:d1:53:d1:
c9:af:b5:c7:b1:b6:4c:b3:fd:0f:e6:40:2c:b5:fb:
48:73:2c:9e:6e:fc:7f:27:f1:e0:88:b8:c3:3f:7b:
ae:83:2a:07:d1:e1:1d:80:59:f6:5d:09:58:1a:d8:
0c:3f:c7:23:43:78:1d:26:bb:c1:71:6c:9e:0d:65:
4b:56:25:7b:12:18:dc:f8:bc:70:12:cb:ce:56:e6:
e1:d4:ca:72:ee:ac:a8:25:45:31:12:5d:11:d6:8d:
e7:12:b3:cb:43:b4:cf:73:cc:56:55:04:61:c3:83:
db:97:18:d0:3e:19:d3:02:f5:56:d1:0c:0b:dd:f9:
7c:a5:f9:bf:4b:93:f4:c2:f5:e1:ef:8d:8f:a7:a7:
6b:9d:ed:40:82:4b:1f:bd:c8:d3:70:cf:72:c0:25:
07:dc:3d:61:af:67:fa:1a:7f:18:7c:ae:46:39:d2:
39:e9:5b:2a:7b:6b:3a:14:d8:60:e2:69:82:b1:b1:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:6A:70:AA:F2:C6:19:38:6B:6D:62:B4:31:44:EA:57:E2:B9:7A
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:68:a1:e4:ee:71:95:25:68:6e:da:89:89:e9:9f:ae:9f:23:
14:e5:1a:2a:fc:e7:65:65:ea:5f:75:55:c6:14:4d:21:47:61:
17:c0:6d:87:58:1f:62:28:46:00:40:fd:f5:14:74:7c:1c:f7:
93:15:17:88:33:65:85:34:58:a6:3f:bc:a6:85:43:6d:7e:2d:
27:77:e7:41:1d:05:87:62:e7:89:5f:38:69:9f:1d:8c:bb:71:
f8:80:ce:7a:84:96:6a:dd:d3:f4:c4:b3:f4:c7:6d:a1:b1:4c:
d2:b5:f7:43:47:bd:bd:75:08:66:45:6d:8c:61:98:07:f0:ce:
ff:20:00:ef:93:92:3c:a5:67:c7:c6:1c:49:57:9e:94:3a:d0:
dd:7a:b7:bf:29:5b:38:c5:37:ba:44:cf:76:30:36:d4:37:eb:
c3:d1:b6:22:67:46:29:d7:22:5b:7b:0c:23:f9:8b:dd:3d:00:
24:8a:53:8d:82:e9:f6:e0:a8:41:92:45:a2:6c:e7:1e:ba:28:
68:7c:ae:ee:99:5d:e0:65:32:d4:76:aa:3b:58:3e:fe:c1:37:
fc:dc:89:ef:a0:15:4c:75:3e:98:cd:95:7d:50:ef:36:94:e9:
01:e9:0d:41:9b:ba:fd:a6:b2:67:8e:52:33:9a:70:d2:d6:f6:
ba:55:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:07 2025 by rpki-client