Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: rr4F/LNctDrXvJJmT4LZfrBCQsOg8f4QggoSFEfGa2I=
Subject key identifier: 72:1D:F8:97:FD:CF:FB:1E:76:4B:6A:6D:44:78:71:7E:09:8E:88:36
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 01984A09FE52792751F61859EB07A29C5E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 1310
Signing time: Sun 27 Jul 2025 04:00:25 +0000
Manifest this update: Sun 27 Jul 2025 04:00:25 +0000
Manifest next update: Mon 28 Jul 2025 04:00:25 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: 0jYZqNvU8WDEDu/ZEn+/vx1MDNH9GQGJCHuHsNu4r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:fe:52:79:27:51:f6:18:59:eb:07:a2:9c:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Jul 27 04:00:25 2025 GMT
Not After : Jul 28 04:00:25 2025 GMT
Subject: CN=721df897fdcffb1e764b6a6d4478717e098e8836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:80:71:8e:40:8e:2f:03:ff:ab:00:84:08:
25:e3:12:10:ce:7d:4a:0d:09:55:a0:60:77:62:28:
9d:59:ab:e9:cc:19:d8:e1:06:32:8c:e2:d3:26:f5:
b4:06:93:db:72:82:23:e9:ca:7c:88:15:6f:3e:08:
be:a9:35:f7:62:0f:f4:27:bd:6e:66:82:a4:98:da:
31:71:48:d1:f8:f6:24:5a:c4:f9:f8:1a:bc:e2:7d:
d4:8f:0b:c6:63:88:65:09:79:5b:d1:ef:e0:71:5a:
27:32:16:44:bc:ef:3a:18:0e:c3:4d:70:63:f0:97:
48:8c:63:67:cb:1b:49:48:be:ab:4f:f3:f4:7e:d7:
39:6a:dd:b4:bd:d1:6c:81:4f:61:24:3a:74:6e:95:
b0:43:c2:d3:d9:55:69:3c:2a:62:af:69:17:49:b0:
de:e1:1a:5c:01:0e:91:6a:a5:15:17:bb:69:06:c0:
e9:60:00:49:37:57:7f:8c:3a:7e:72:8c:d8:71:1d:
61:0f:3f:9f:6b:77:dd:02:72:d3:a1:b9:0b:91:6a:
63:c4:05:b0:6b:70:29:a8:95:d0:21:d5:3c:96:0e:
56:2c:2f:9a:26:11:83:02:0b:a2:d3:3b:06:f8:56:
81:2b:02:c5:be:62:fa:70:00:d3:65:76:3c:86:3c:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:F8:97:FD:CF:FB:1E:76:4B:6A:6D:44:78:71:7E:09:8E:88:36
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:a0:3e:88:92:82:ca:4c:ed:e7:09:cf:c9:27:05:d6:37:
9f:88:de:82:31:b1:f3:1f:5a:6c:99:93:de:98:82:04:32:e0:
2b:ec:9e:e3:09:5d:ae:cc:4f:3e:27:7a:8a:5b:8f:ce:77:42:
d2:af:e1:3a:4b:ad:68:fa:08:25:70:44:46:2d:8e:6f:31:a5:
f9:c4:b7:57:90:a8:bc:9d:10:ab:97:a6:37:65:87:03:9b:49:
3d:6f:ab:da:9d:42:57:77:71:50:6c:ae:47:2c:c4:4d:c9:26:
bd:78:bf:5b:e2:47:67:21:48:0e:6f:48:1f:1f:94:79:4d:a9:
5c:2f:d6:08:45:1b:b6:04:24:02:b6:bd:b4:d4:3a:9b:1a:7d:
65:07:0d:4a:62:e5:e4:78:44:1d:7d:bc:55:5a:9b:c3:74:29:
fe:43:35:e6:60:ed:1d:d2:bb:4b:a1:1c:33:41:3f:bd:9f:34:
fd:d3:5a:9b:14:9c:60:08:c0:e3:2e:ce:c8:d5:d2:d2:e5:2d:
87:77:26:2d:06:92:92:9f:cd:22:69:43:39:bc:15:44:fc:c2:
f8:1c:cf:20:22:ae:a3:47:51:cc:0c:84:be:da:18:d7:35:97:
58:fa:3c:89:b6:c5:55:c8:e6:f6:2f:c4:d7:44:6d:f8:19:ad:
81:86:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:12 2025 by rpki-client