Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier: u7Em1mVrFQ4bfQVh5naZ0r//rovToWoCpxtozKGDn8s=
Subject key identifier: A6:5C:01:68:E1:F1:7E:9E:01:E0:56:BB:99:67:E4:4D:81:F9:E0:22
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial: 0194C3509C00938C33657910E8045DB42086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:27 +0000
Manifest this update: Sat 01 Feb 2025 21:00:27 +0000
Manifest next update: Sun 02 Feb 2025 21:00:27 +0000
Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=)
2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: ZyRUg5Qbh0lhIDLZcBo0d2qt5K9SnN+Za4F7xNFAkWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:9c:00:93:8c:33:65:79:10:e8:04:5d:b4:20:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Validity
Not Before: Feb 1 21:00:27 2025 GMT
Not After : Feb 2 21:00:27 2025 GMT
Subject: CN=a65c0168e1f17e9e01e056bb9967e44d81f9e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:7c:39:92:d9:a4:e9:5b:74:40:fc:8c:59:
b2:93:c6:a0:ea:d2:b8:66:35:78:74:fd:91:3e:20:
fa:32:22:0d:e8:6f:74:a2:85:a2:08:96:a3:59:ef:
aa:6c:c3:70:e2:57:2b:b6:ab:af:a0:22:dc:df:69:
16:ff:51:56:cb:fa:4d:48:85:d2:c3:39:fd:6e:bc:
21:30:e6:2f:e7:17:70:de:45:f1:4f:e5:f1:8a:91:
d8:95:d1:a9:76:64:63:35:e9:57:2d:58:02:96:cf:
47:49:9f:ac:c1:96:c9:8f:07:ea:94:28:34:11:ec:
ed:6d:3b:31:71:3e:d5:ac:32:ed:65:52:19:03:92:
ef:a9:fa:e0:10:a1:43:24:38:4d:8e:6f:86:14:26:
e7:63:95:6a:d0:b2:55:50:59:e9:7d:50:ee:20:8d:
8f:16:1e:a4:fc:5f:69:55:1c:c4:03:fb:09:bb:fd:
41:de:8e:66:67:89:2c:1c:0e:5e:17:0f:d3:e3:e3:
7c:84:5f:aa:91:54:e6:c8:3c:93:af:ce:0d:12:3c:
4c:b0:62:ed:d2:a7:75:84:26:6b:23:1b:60:d5:57:
d0:f3:dd:05:9e:85:02:35:bd:b1:f5:74:c4:f0:37:
da:9a:11:70:b3:8a:67:6f:46:e3:41:53:d2:b5:3b:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:01:68:E1:F1:7E:9E:01:E0:56:BB:99:67:E4:4D:81:F9:E0:22
X509v3 Authority Key Identifier:
keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8c:c1:13:e2:c1:f1:16:92:6c:dc:ee:8e:3f:20:cd:f2:ff:
5a:2e:95:fe:80:da:5f:a8:03:5a:7a:6d:73:65:83:13:21:67:
df:73:da:0a:20:c5:bf:b9:4e:6a:2b:20:e7:01:5d:f6:53:3c:
e9:96:3c:94:53:33:85:a4:d2:eb:61:57:9f:81:39:5a:4e:23:
84:8b:44:99:0b:55:66:7c:31:dd:21:2e:d5:9e:13:a5:a2:e0:
5c:65:0f:32:ed:bd:a0:37:3b:6e:47:2b:32:a8:83:ec:7e:51:
53:e6:08:28:23:73:55:18:dc:27:5d:e9:de:c7:a2:19:32:7c:
fe:55:c1:13:ee:5f:10:59:6d:da:65:88:71:40:a0:5b:7a:06:
4e:d4:92:2b:9d:1f:f6:67:ff:76:bf:76:95:87:91:e2:e8:c3:
04:b3:40:c7:e6:47:46:b7:cc:bc:a3:82:a0:0c:5a:ea:53:c7:
1a:a3:ef:21:82:5f:e3:7d:09:50:03:7d:77:41:32:09:f6:6a:
b8:aa:3d:69:db:fa:c6:56:ec:d1:56:fb:80:3e:46:2c:b1:1a:
52:6a:a9:10:ad:de:85:95:29:7c:4b:e1:aa:14:dc:ed:90:f2:
08:f6:40:50:78:cb:24:4d:fb:62:38:8d:6e:3f:af:5c:c2:5b:
79:96:ba:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUJwAk4wzZXkQ6ARdtCCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy
NGI5NjYwHhcNMjUwMjAxMjEwMDI3WhcNMjUwMjAyMjEwMDI3WjAzMTEwLwYDVQQD
EyhhNjVjMDE2OGUxZjE3ZTllMDFlMDU2YmI5OTY3ZTQ0ZDgxZjllMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4518OZLZpOlbdED8jFmyk8ag6tK4
ZjV4dP2RPiD6MiIN6G90ooWiCJajWe+qbMNw4lcrtquvoCLc32kW/1FWy/pNSIXS
wzn9brwhMOYv5xdw3kXxT+XxipHYldGpdmRjNelXLVgCls9HSZ+swZbJjwfqlCg0
EeztbTsxcT7VrDLtZVIZA5LvqfrgEKFDJDhNjm+GFCbnY5Vq0LJVUFnpfVDuII2P
Fh6k/F9pVRzEA/sJu/1B3o5mZ4ksHA5eFw/T4+N8hF+qkVTmyDyTr84NEjxMsGLt
0qd1hCZrIxtg1VfQ890FnoUCNb2x9XTE8DfamhFws4pnb0bjQVPStTvuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZcAWjh8X6eAeBWu5ln5E2B+eAiMB8GA1UdIwQY
MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt
OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0
LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4zBE+LB
8RaSbNzujj8gzfL/Wi6V/oDaX6gDWnptc2WDEyFn33PaCiDFv7lOaisg5wFd9lM8
6ZY8lFMzhaTS62FXn4E5Wk4jhItEmQtVZnwx3SEu1Z4TpaLgXGUPMu29oDc7bkcr
MqiD7H5RU+YIKCNzVRjcJ13p3seiGTJ8/lXBE+5fEFlt2mWIcUCgW3oGTtSSK50f
9mf/dr92lYeR4ujDBLNAx+ZHRrfMvKOCoAxa6lPHGqPvIYJf430JUAN9d0EyCfZq
uKo9adv6xlbs0Vb7gD5GLLEaUmqpEK3ehZUpfEvhqhTc7ZDyCPZAUHjLJE37YjiN
bj+vXMJbeZa6Gw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:25 2025 by rpki-client