Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: dPH0fYlJV7kz/WaChQh10ajVeGPKIy/pK3+A1jUSSsI=
Subject key identifier: 0B:08:AB:60:93:AC:C9:67:E6:38:17:91:0D:06:8E:1C:B3:58:1A:15
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 019921B24BA368D9759C6EA99194CECEB809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:36 +0000
Manifest this update: Sun 07 Sep 2025 01:02:36 +0000
Manifest next update: Mon 08 Sep 2025 01:02:36 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: +rIG+5Bf4wux1zetik88AwqZR8hB3Jv2fnul3SrvAHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4b:a3:68:d9:75:9c:6e:a9:91:94:ce:ce:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Sep 7 01:02:36 2025 GMT
Not After : Sep 8 01:02:36 2025 GMT
Subject: CN=0b08ab6093acc967e63817910d068e1cb3581a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:c6:3b:9d:70:cd:c3:d6:6f:2e:6f:a2:0a:
d7:3c:24:20:80:5e:5e:bc:c9:f9:f3:07:a1:a2:a5:
9a:cb:bb:ba:1c:e2:21:76:92:ee:d0:c5:4e:6b:5a:
6e:ab:a6:83:f9:3f:83:fb:71:c7:0d:8b:e3:5a:53:
60:11:9a:08:43:3f:86:fa:78:33:83:2e:6e:a8:13:
f1:05:70:ce:90:af:48:f6:9a:6a:fc:be:6c:25:25:
40:17:6c:01:de:13:ff:6b:ea:92:17:f7:16:00:73:
3e:7f:29:86:3d:29:1e:1a:f4:06:f0:5e:81:ca:e5:
04:c6:e9:32:04:ec:d1:07:af:9c:7a:56:b0:8e:67:
00:f0:f2:23:6f:1e:07:96:fd:5c:51:d7:7a:1d:b3:
06:12:7c:14:55:78:41:ed:09:32:41:0d:88:90:af:
90:9d:52:ae:61:e7:b1:cf:c1:22:5a:d6:40:bb:f3:
af:d0:7c:0d:07:3e:76:80:ed:84:48:86:16:17:8b:
75:71:10:56:5e:ff:34:2f:67:f8:f8:5c:6d:ea:98:
5e:59:3f:f1:20:47:d7:e9:66:d8:7a:3f:af:60:ac:
e6:d5:e8:54:d4:a9:a3:a3:dc:e6:c0:4f:f7:51:e6:
14:2e:6e:49:8b:03:47:08:08:ca:27:b1:5f:ed:4d:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:AB:60:93:AC:C9:67:E6:38:17:91:0D:06:8E:1C:B3:58:1A:15
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:4d:24:fc:6f:f3:13:99:35:2b:42:a2:e2:8a:c3:f2:ff:
07:12:54:74:e2:65:e7:d7:73:36:0e:d4:5e:bb:4e:9c:53:df:
ca:06:c3:27:d0:b7:eb:21:e3:2f:4b:58:da:43:87:59:bc:44:
c3:3d:a4:52:42:bf:5f:4f:04:c7:99:3b:47:b8:ce:59:1e:ef:
80:66:05:72:8c:fd:39:8a:12:55:f2:3d:70:1f:51:2b:84:ac:
32:07:0a:79:c0:b0:03:90:9f:1a:77:81:52:1e:4c:57:27:4e:
f5:18:ee:4d:5c:19:b1:07:66:c3:44:f7:43:73:3e:2c:db:3a:
34:ad:4b:a9:d3:17:77:57:48:fe:3c:e4:d7:fa:f8:7f:ed:21:
b7:08:35:d3:2b:e6:7c:d5:aa:5d:d9:cd:d0:71:ed:ef:0b:10:
e3:55:93:c8:2b:99:f0:b2:56:99:a9:e0:b5:c9:51:41:9c:df:
68:7c:2d:fe:f5:f1:15:cc:0d:b6:d2:f4:1f:5d:0d:bd:b7:87:
71:f2:37:0b:59:e4:f5:41:9c:aa:4d:71:f5:ea:ce:4c:e0:78:
91:e6:42:de:07:f8:78:eb:52:b7:c2:31:48:9b:11:ba:d8:48:
78:2d:20:98:ac:30:e1:09:56:aa:f0:5a:b2:91:b4:6b:03:8d:
3e:3d:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client