Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: TP0H06p1Z36mQHlE60U06HcAF/KCBbeq63GSSNglv5I=
Subject key identifier: A1:13:C3:64:79:FC:75:8E:9E:66:59:5C:8F:52:E4:BF:D6:49:29:60
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 019653EE61C75318141F7499FA211639962E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 120C
Signing time: Sun 20 Apr 2025 16:00:53 +0000
Manifest this update: Sun 20 Apr 2025 16:00:53 +0000
Manifest next update: Mon 21 Apr 2025 16:00:53 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: DrFrUNYer72lgM5E/K6kryvNM0cMbE3Im6JVWfRW5hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:61:c7:53:18:14:1f:74:99:fa:21:16:39:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Apr 20 16:00:53 2025 GMT
Not After : Apr 21 16:00:53 2025 GMT
Subject: CN=a113c36479fc758e9e66595c8f52e4bfd6492960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:6b:48:1b:5f:95:71:f2:ac:90:59:99:c2:
4e:86:79:ca:e1:e1:e1:4c:cc:5b:e0:e2:9e:32:98:
d6:a1:e9:35:cd:eb:2a:f7:e9:43:94:01:59:7a:4c:
76:bf:9e:f3:70:01:a0:e2:2f:dd:4c:d7:96:47:f9:
46:18:b4:9e:fe:16:37:04:e8:a2:a0:63:d8:5f:4b:
e0:11:64:13:18:92:55:20:75:4a:b5:80:b5:09:88:
2b:3d:7b:0b:82:43:ea:aa:f7:28:b2:2a:08:f2:dc:
b1:bc:1d:a6:04:5b:34:9f:26:1c:58:12:1e:d2:ed:
ca:8d:9b:3a:ae:de:67:ae:f9:6b:3b:5d:6a:46:2e:
d8:4e:cf:8c:cf:36:0c:5e:ad:91:3b:02:b0:ce:19:
96:38:b9:86:24:9e:85:9d:e3:38:c6:9a:d1:cc:db:
7b:42:61:79:ad:01:d7:f1:1f:f0:60:99:0e:fb:34:
26:a9:62:97:2a:62:39:44:b9:fc:56:eb:83:c4:85:
e5:12:33:2a:1d:1b:ee:06:95:29:0e:b2:a7:ae:ed:
44:0b:23:ae:e2:f2:80:42:69:7b:47:4e:70:d4:f0:
f5:71:b4:78:20:4f:ca:8c:aa:72:a0:cb:80:80:a6:
1c:21:c0:a8:e5:74:85:97:41:40:8d:3e:6c:72:ea:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:C3:64:79:FC:75:8E:9E:66:59:5C:8F:52:E4:BF:D6:49:29:60
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7a:74:16:ef:c9:24:58:cf:3f:56:83:fb:02:32:7d:8d:08:
b3:30:c1:e2:a8:8e:b7:f6:dd:ab:d5:d2:b1:ba:93:fe:73:e3:
fd:74:4a:a0:7f:0d:25:03:7b:ed:ce:24:d4:00:30:90:77:82:
09:fd:f1:43:91:c3:36:4c:37:08:b3:0a:58:fa:46:e6:97:80:
02:58:e3:bd:6c:53:8f:ff:2d:17:ad:ed:18:6b:ce:02:99:34:
4e:0c:0d:45:f4:29:42:40:3e:08:7d:eb:5e:7a:e1:80:18:df:
ad:a4:36:6a:07:54:e6:66:03:0d:48:df:1d:db:8d:5a:35:66:
d5:98:bb:e1:c4:9b:13:42:18:29:af:a9:17:12:8f:b7:d8:d8:
fa:a9:1f:36:25:67:ec:cc:c2:9f:db:72:9b:0d:93:f9:cb:c9:
cb:44:78:3a:17:ca:a1:b3:e5:5d:e4:ef:a5:22:ed:66:09:89:
dd:85:d1:d0:14:38:9c:52:07:86:de:03:60:47:74:77:7d:94:
54:ab:4d:43:7a:fe:f0:75:1f:d9:ca:05:b4:e6:da:25:1f:0c:
46:b1:7e:98:fd:1b:5b:54:37:24:e7:be:67:db:a9:65:65:46:
93:f4:7d:d3:1b:81:8d:48:8b:ee:62:12:5a:39:f7:a8:09:e7:
51:46:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:47 2025 by rpki-client