Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: YPBzpsF4WJ6mrd8B3n23VAua5b/rjfjHDefhbUDa+II=
Subject key identifier: 1C:C4:A9:31:38:BC:DF:92:3F:A6:05:D3:2E:3A:AF:14:5C:67:F6:BE
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 01974C31DD96F57673539EF584C65FD7606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:25 +0000
Manifest this update: Sat 07 Jun 2025 21:00:25 +0000
Manifest next update: Sun 08 Jun 2025 21:00:25 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: qhqO/s/tB/lixjKp6E/DwLHlOqkIT8oa/AgmkbE0GaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:dd:96:f5:76:73:53:9e:f5:84:c6:5f:d7:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Jun 7 21:00:25 2025 GMT
Not After : Jun 8 21:00:25 2025 GMT
Subject: CN=1cc4a93138bcdf923fa605d32e3aaf145c67f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:f3:6d:2b:68:14:85:e7:fe:34:c3:02:b3:
e5:bb:4e:bc:e0:b3:cd:52:8e:c9:24:f2:df:49:b1:
d0:43:05:af:18:0e:9e:8a:a2:0b:ab:85:14:5e:56:
e1:40:d0:1b:ff:bf:61:07:58:32:ca:e4:7d:cb:57:
d7:47:8a:c8:97:11:55:4e:4a:dc:bc:65:3f:af:70:
c6:f3:9c:58:b8:ed:39:f7:4e:5c:fd:bb:8b:af:7b:
ce:2e:2b:09:39:10:8e:ee:82:73:ce:12:ed:5e:7a:
fe:02:bb:a2:f9:6c:64:ec:a2:4f:a7:de:42:75:38:
c5:45:2c:8e:f7:c6:8c:4b:71:04:84:79:80:a7:39:
a9:9f:60:59:c3:5f:3b:66:7b:b9:bf:0e:c1:07:46:
e2:ac:ef:e9:2e:66:62:c5:ff:ee:8e:da:74:a6:06:
3e:9f:e3:71:26:42:39:96:0c:d3:9a:9a:88:99:6b:
a8:1e:38:56:67:8e:ed:9a:43:8e:cd:ca:d7:b9:e9:
b8:8e:1e:e8:d9:2e:63:99:27:64:bf:0e:eb:08:24:
7e:fb:80:f6:b0:00:17:81:f6:d0:c4:0e:28:0c:c0:
79:1c:cf:52:0d:2e:ee:46:92:3c:ce:72:fe:40:a8:
c5:b5:ee:72:a8:2a:c5:6b:0f:ec:4c:60:fd:ca:f8:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:A9:31:38:BC:DF:92:3F:A6:05:D3:2E:3A:AF:14:5C:67:F6:BE
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:bd:a8:01:d9:50:dd:ab:22:0c:79:f4:8f:70:c0:ed:29:
a6:37:ef:7e:c4:22:88:85:b8:b5:41:2e:52:c7:51:ec:f3:75:
83:f4:77:3c:7c:c2:b6:1d:66:80:a7:6e:d7:6d:7f:8a:bc:5b:
46:60:c2:c1:d2:66:8d:af:e3:d8:e9:45:a7:73:8c:1e:d5:2b:
1c:98:0c:42:1b:4c:97:72:5b:18:96:f4:a7:b3:76:1c:dc:1c:
47:2c:26:5e:a1:76:0f:2b:88:68:6e:7d:f7:80:6d:8e:d4:02:
23:0f:ea:e2:1b:7f:3c:17:8f:72:78:6d:eb:10:9d:4a:a0:f4:
a4:c8:55:87:77:f9:15:a7:e6:0f:7a:36:36:30:6a:b2:02:5e:
67:20:86:59:cc:e4:6a:6a:ce:7b:07:58:20:d0:2d:fa:d0:40:
9a:93:69:fb:53:2b:6a:f2:f6:33:21:b2:ed:67:8a:90:dc:63:
fa:7d:b5:04:1c:2b:5e:e5:c8:46:28:dd:51:b8:7a:ae:50:4f:
f9:2a:00:61:e6:3a:03:d9:ef:46:b5:a7:34:d2:19:bf:e9:54:
0f:05:67:49:7b:15:89:11:c4:85:dc:f6:15:75:d1:80:09:1f:
fa:44:73:93:52:44:9b:e7:2e:fd:fe:e4:a5:b1:64:fc:29:3e:
15:52:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:46:08 2025 by rpki-client