Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: 1ckzhGc83FXjQsk1+Kavx5BxEXgtCGFgf7wJsHguyGE=
Subject key identifier: 09:F8:E9:8D:ED:40:3D:F2:DC:E8:3A:C4:A1:AE:60:FC:3C:0A:DF:F7
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 0196556E7EA0AA0A7859FADF5A7EAE559118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 08C0
Signing time: Sun 20 Apr 2025 23:00:26 +0000
Manifest this update: Sun 20 Apr 2025 23:00:26 +0000
Manifest next update: Mon 21 Apr 2025 23:00:26 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: hdJRMtm4/l75b6UADEZtm6ayK7zObLLOPIeSlWULKkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:7e:a0:aa:0a:78:59:fa:df:5a:7e:ae:55:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Apr 20 23:00:26 2025 GMT
Not After : Apr 21 23:00:26 2025 GMT
Subject: CN=09f8e98ded403df2dce83ac4a1ae60fc3c0adff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:dd:1f:35:ed:b7:75:5f:b4:3c:c8:a9:12:
64:c2:34:4e:d7:51:09:1c:57:6c:d8:99:bf:8f:9f:
bb:10:b5:31:fd:37:d7:dd:88:08:85:93:86:d1:31:
d5:c7:13:ed:80:bf:dc:0a:28:ea:f3:fa:34:7d:9f:
63:95:3e:bb:f6:48:d7:56:1f:da:98:77:fe:a7:bb:
11:ea:f3:27:ba:a5:3e:9b:59:8a:d9:d9:21:e1:02:
e7:f0:ca:e3:56:d6:3d:57:eb:98:9c:dc:20:44:76:
9e:12:27:13:c2:63:89:f0:2e:b8:17:70:80:53:13:
21:55:70:d7:54:7b:8b:98:2d:1e:5f:25:ee:f5:87:
cb:b4:17:2c:37:d5:9c:6f:b6:6c:28:9f:a0:00:03:
23:18:6d:1d:5b:6f:4d:b9:a7:9b:ef:7d:63:5e:a3:
65:58:4c:29:2b:02:0d:a5:5b:10:b6:f6:9a:9b:44:
2f:e9:f4:87:cf:be:1b:6b:b5:57:94:8b:de:15:82:
09:7d:1e:27:e0:18:09:73:6b:40:ea:b7:5a:6a:f0:
03:02:68:cb:20:f2:d9:1a:4e:1e:aa:07:b3:bc:b0:
e2:05:d5:71:d2:6d:55:7c:42:81:7a:62:89:ce:45:
06:a6:ff:be:6e:91:6a:83:58:4b:78:c1:9a:88:a6:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:E9:8D:ED:40:3D:F2:DC:E8:3A:C4:A1:AE:60:FC:3C:0A:DF:F7
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:bf:49:a0:a5:ba:7b:82:55:13:7e:50:26:89:4f:de:22:
20:e8:6d:a6:3a:5a:2c:e5:c9:3f:50:13:e0:59:ee:40:51:d8:
55:bc:0c:35:08:73:5f:c6:0c:d2:02:84:44:e4:f2:a5:e6:c2:
6b:33:67:4d:7f:e3:21:5c:82:85:68:7b:f4:12:e7:bf:59:fa:
08:0f:fd:e7:49:e9:55:85:01:7a:99:71:03:ef:bb:74:7f:8b:
9f:7a:15:66:50:d1:5f:d1:54:6b:7a:30:db:90:4e:a5:02:9a:
10:ac:bb:bb:bb:bb:a2:7f:9d:6e:d1:94:a8:4e:dc:e8:86:f8:
86:92:29:3f:33:bd:43:df:f0:43:f4:ad:6c:2c:bc:d0:55:05:
d9:27:83:a0:3f:8f:2e:35:51:cf:bf:90:76:ad:f4:8c:a8:fe:
c1:54:b1:b0:5b:b1:ff:94:ef:12:fc:3b:04:9b:ea:ad:af:03:
c0:78:b2:93:72:31:f6:bf:02:1c:93:09:a4:b3:17:b4:cc:be:
d2:ea:86:f6:75:d9:39:09:00:cf:45:8b:0e:20:a3:85:1a:8a:
af:39:45:5f:75:72:b2:88:97:7d:f4:d2:82:a0:bc:f1:e7:7f:
cc:09:2a:87:5e:cc:b6:4a:c9:63:7c:19:f7:95:90:a0:c8:09:
98:6f:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:16 2025 by rpki-client