Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: MI0zKuAEvAKjXtWjH3cAK9tuHr9LPw3eDvJ19KvPoxE=
Subject key identifier: 8A:E3:D1:1E:FB:A1:76:08:BB:CE:28:7B:05:47:50:8D:01:74:8B:CA
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019876072567C0EBAF91F055B92DFB54B567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 09DA
Signing time: Mon 04 Aug 2025 17:00:36 +0000
Manifest this update: Mon 04 Aug 2025 17:00:36 +0000
Manifest next update: Tue 05 Aug 2025 17:00:36 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: pQAUKakYbsnlgMWU0/hXYt4pEDe0gN1mgebLwpMEP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:07:25:67:c0:eb:af:91:f0:55:b9:2d:fb:54:b5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Aug 4 17:00:36 2025 GMT
Not After : Aug 5 17:00:36 2025 GMT
Subject: CN=8ae3d11efba17608bbce287b0547508d01748bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:d0:dd:ea:eb:36:68:d7:ed:59:e5:8d:db:
4c:e2:74:f5:e4:e4:8b:b6:62:4a:da:5a:be:7e:26:
70:08:ed:57:b2:0b:d6:35:b4:f6:25:d8:24:ad:1a:
36:ae:51:7e:9d:06:6c:20:c1:24:51:17:33:b1:15:
53:dc:62:2a:3d:17:40:39:20:90:87:16:13:95:0b:
e4:4b:77:b4:1a:18:3e:a2:85:97:ad:7c:d9:aa:cc:
20:4a:6c:40:12:f6:5e:e4:e8:6f:22:c3:41:e0:a4:
0b:99:11:ef:c8:c0:bc:48:56:e9:bf:79:24:48:60:
7d:a9:85:11:09:3c:71:54:32:75:74:e2:f9:7b:f7:
58:6c:8a:57:80:6c:48:c2:86:58:22:85:ac:40:70:
c1:14:44:84:ac:71:09:a3:e0:d6:6e:f7:d0:f8:c3:
7e:df:c5:33:d2:0c:b3:eb:ba:9d:f5:2b:b8:e8:a1:
08:30:ba:61:d3:e1:88:62:b0:90:5f:9c:c4:ce:c8:
c3:c7:b2:7d:37:4e:9c:18:1c:00:83:38:c5:d9:e5:
12:46:57:ad:c7:07:19:78:25:3b:c9:82:0b:34:09:
a2:b7:fc:00:e5:f0:4b:81:41:c0:d1:93:71:2c:d3:
00:b7:47:80:01:86:06:71:5c:84:51:48:10:8e:30:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:D1:1E:FB:A1:76:08:BB:CE:28:7B:05:47:50:8D:01:74:8B:CA
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ce:2e:16:d7:d6:de:e3:c1:53:99:e8:8e:26:51:69:f2:ad:
5d:1b:3e:21:c4:24:cc:0a:c3:cb:d0:b1:22:5e:0d:ce:ba:44:
4d:1b:a3:67:90:bb:47:eb:4b:a7:03:7e:a1:3f:c7:f4:cf:ed:
a2:20:34:5a:16:0e:c4:12:b9:74:37:21:b4:29:dc:8b:2f:a7:
84:b3:4a:87:36:85:4f:ef:ab:1c:35:c2:f9:54:24:1f:09:ea:
09:70:28:09:ea:5a:16:fa:41:58:ea:72:bc:f3:1e:9a:69:01:
06:4e:f9:29:26:dd:60:51:d8:f0:d5:ef:b0:1b:1f:78:98:3d:
bd:00:f9:15:86:a7:92:ba:e5:36:e0:94:cf:70:99:88:27:99:
8d:80:4b:fa:81:7b:4c:db:dd:4b:ff:1b:85:7e:65:f7:2e:cb:
5b:79:0e:d1:29:cb:ea:9b:05:fa:4f:5b:53:23:3b:2f:8b:eb:
a1:12:46:43:11:ad:af:f7:bb:4e:57:4a:94:87:7a:13:d9:6d:
2d:ee:c7:c1:64:76:a1:7d:34:4a:21:70:0a:be:62:ee:46:ba:
b7:74:1c:eb:a1:2e:b0:dd:69:43:3a:d8:41:d0:76:5e:3e:0d:
3f:c2:3f:07:63:1b:9a:78:1a:f5:cf:59:31:08:36:82:43:48:
c9:92:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:58 2025 by rpki-client