Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: Jh/OKc/+45ntGBhsS00lZDKtmxylMbrAh/pfFrAMklo=
Subject key identifier: 26:8B:56:A1:2B:D4:A2:39:86:09:27:59:D5:CF:1D:2C:62:47:0D:E0
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 01977151492065776EDE8B2C1D2C3CD00B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0953
Signing time: Sun 15 Jun 2025 02:00:41 +0000
Manifest this update: Sun 15 Jun 2025 02:00:41 +0000
Manifest next update: Mon 16 Jun 2025 02:00:41 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: rsHXRxPL+BQGiqizq8RCyAwLuW0EjgsXidyAGePRPJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:49:20:65:77:6e:de:8b:2c:1d:2c:3c:d0:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jun 15 02:00:41 2025 GMT
Not After : Jun 16 02:00:41 2025 GMT
Subject: CN=268b56a12bd4a23986092759d5cf1d2c62470de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:02:d4:9b:be:ce:10:4c:a7:27:41:77:87:
af:59:d0:b3:cf:bc:83:1e:c7:2d:44:92:b3:67:ca:
23:f4:70:3c:68:f5:22:27:cc:e6:a6:3c:49:82:4e:
a1:0c:40:be:2e:08:b5:08:10:de:7f:2a:43:2c:bc:
e5:eb:5b:c6:17:22:5b:58:dd:05:34:5d:9d:c2:24:
52:3d:f2:e2:98:fe:39:a2:18:f1:84:06:33:17:20:
c7:5c:f5:a2:9c:4c:03:ab:28:48:36:cb:85:f6:12:
0d:ad:9b:be:e0:1d:56:fb:6d:f7:2d:2d:67:08:52:
3a:f6:d6:ab:51:19:fd:5b:c9:cd:c0:99:b8:1e:e5:
1f:ca:a0:43:fe:03:e7:c4:36:de:b4:bf:ab:d5:f5:
85:4d:22:fc:2b:5a:4f:10:75:78:d0:02:93:dc:ae:
13:52:00:43:a6:ea:05:90:19:0c:d4:29:3e:19:14:
0b:3e:86:b2:b2:ed:8b:04:a5:7e:18:e9:8a:94:1d:
7f:d3:e9:0f:8c:fe:a4:8f:e7:7a:80:60:b6:3a:3f:
4f:0c:22:7a:f9:8d:b5:03:ea:7b:7f:4d:2e:58:f8:
fc:c9:38:23:2d:72:51:bb:c5:a8:d2:f6:28:70:e9:
6e:dd:4d:bc:34:c2:d2:a5:b3:f0:4c:be:da:df:3c:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:56:A1:2B:D4:A2:39:86:09:27:59:D5:CF:1D:2C:62:47:0D:E0
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:37:6f:91:71:e1:85:fa:d3:1c:e5:8b:9c:da:ce:85:f7:59:
ca:5b:00:28:14:33:c1:e7:bc:2b:49:af:52:df:2c:47:35:e4:
1c:e0:a4:5f:d9:15:05:5d:a8:17:8d:6a:8c:02:84:8e:e9:71:
cf:ec:4a:2c:c9:b4:54:e6:53:5b:14:07:24:7d:4a:42:68:31:
ee:02:9d:cd:33:b8:f4:aa:25:32:13:3b:83:18:fd:f0:35:d2:
a2:fc:a1:bb:6b:f0:db:f6:96:63:2e:ee:f8:63:03:a0:ea:b5:
e9:a7:10:1c:46:f7:e8:38:fd:f7:c8:bf:99:92:af:c4:00:5f:
48:b5:e3:fb:61:18:79:e5:59:ec:18:3b:d7:dd:9a:fb:a6:46:
ee:52:5c:ba:96:95:42:3c:b1:4f:3a:6a:c6:e5:93:73:87:76:
3e:a9:06:63:5d:9d:c0:de:89:e1:64:ef:54:78:ed:cc:40:12:
b9:b9:d1:0f:84:77:37:ad:b1:2a:0e:f4:a8:49:9e:68:c4:92:
27:91:34:84:69:1b:16:3c:33:be:18:af:e6:f3:79:8a:ac:5d:
10:01:af:bc:e4:34:4b:49:46:00:19:bb:c1:17:72:36:60:b5:
6e:ee:2c:12:f2:ed:11:62:87:b0:7d:ea:6f:21:4e:33:d9:a1:
92:a9:8f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUUkgZXdu3ossHSw80AtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1
ZDRmOTIwHhcNMjUwNjE1MDIwMDQxWhcNMjUwNjE2MDIwMDQxWjAzMTEwLwYDVQQD
EygyNjhiNTZhMTJiZDRhMjM5ODYwOTI3NTlkNWNmMWQyYzYyNDcwZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aEC1Ju+zhBMpydBd4evWdCzz7yD
HsctRJKzZ8oj9HA8aPUiJ8zmpjxJgk6hDEC+Lgi1CBDefypDLLzl61vGFyJbWN0F
NF2dwiRSPfLimP45ohjxhAYzFyDHXPWinEwDqyhINsuF9hINrZu+4B1W+233LS1n
CFI69tarURn9W8nNwJm4HuUfyqBD/gPnxDbetL+r1fWFTSL8K1pPEHV40AKT3K4T
UgBDpuoFkBkM1Ck+GRQLPoaysu2LBKV+GOmKlB1/0+kPjP6kj+d6gGC2Oj9PDCJ6
+Y21A+p7f00uWPj8yTgjLXJRu8Wo0vYocOlu3U28NMLSpbPwTL7a3zyv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaLVqEr1KI5hgknWdXPHSxiRw3gMB8GA1UdIwQY
MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt
ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi
LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzdvkXHh
hfrTHOWLnNrOhfdZylsAKBQzwee8K0mvUt8sRzXkHOCkX9kVBV2oF41qjAKEjulx
z+xKLMm0VOZTWxQHJH1KQmgx7gKdzTO49KolMhM7gxj98DXSovyhu2vw2/aWYy7u
+GMDoOq16acQHEb36Dj998i/mZKvxABfSLXj+2EYeeVZ7Bg7192a+6ZG7lJcupaV
QjyxTzpqxuWTc4d2PqkGY12dwN6J4WTvVHjtzEASubnRD4R3N62xKg70qEmeaMSS
J5E0hGkbFjwzvhiv5vN5iqxdEAGvvOQ0S0lGABm7wRdyNmC1bu4sEvLtEWKHsH3q
byFOM9mhkqmPRw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:42 2025 by rpki-client