Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: V+A5AdExw/kD4DTxEISJBhCa8Mu3rE1ysV8UFxDB/vw=
Subject key identifier: 6A:4C:4F:ED:14:4F:A2:C2:DB:C2:E4:9E:36:33:54:B0:1E:BC:28:12
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 0197BB222722C14319BA8257D549D717EBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 12C6
Signing time: Sun 29 Jun 2025 10:01:06 +0000
Manifest this update: Sun 29 Jun 2025 10:01:06 +0000
Manifest next update: Mon 30 Jun 2025 10:01:06 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: b12s0u+HZnwB9fcJbP6EFUA6KqrOcstcyKWBBpKzEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:27:22:c1:43:19:ba:82:57:d5:49:d7:17:eb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Jun 29 10:01:06 2025 GMT
Not After : Jun 30 10:01:06 2025 GMT
Subject: CN=6a4c4fed144fa2c2dbc2e49e363354b01ebc2812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:9f:8f:78:1a:4f:a2:28:7c:6f:e5:5d:15:
ec:1a:bf:f0:27:ba:f5:3d:96:62:7d:1a:46:5b:c2:
64:a9:ab:c3:d9:40:69:50:cd:a2:9e:5c:d2:54:f3:
71:ab:ef:7c:eb:7a:36:98:e8:18:a9:bf:7f:4b:95:
28:51:9a:36:83:79:d9:82:84:7e:b3:b4:c9:13:c6:
e5:10:8d:6d:ce:1f:a5:87:b5:f9:3b:fc:f6:66:ff:
0f:80:9e:3f:9e:17:f7:15:5b:56:7d:4b:15:88:9a:
f7:e6:f8:2e:f6:02:4d:69:25:1d:a4:85:bd:63:b6:
fd:04:9f:05:30:4c:99:a5:e7:10:c2:a0:88:9d:8b:
2c:03:13:c7:81:f1:41:3e:84:a5:36:a7:61:50:f0:
e4:a7:39:f5:cc:da:3a:96:33:8a:e6:ba:95:77:3d:
df:68:79:d5:27:66:62:c0:e4:32:f4:40:f6:bc:0a:
f6:fc:57:1c:7a:38:84:12:ef:b2:96:7f:73:06:2f:
a8:dd:4d:5c:bf:76:7a:30:e7:cd:74:be:66:02:2e:
24:2c:50:ae:ad:c3:7e:08:c9:25:ea:e1:29:e8:79:
32:60:07:1a:e1:39:4a:7a:71:5f:bf:32:35:76:44:
c0:92:d3:d2:87:d7:9e:8a:c5:a0:06:2c:97:2a:5c:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:4F:ED:14:4F:A2:C2:DB:C2:E4:9E:36:33:54:B0:1E:BC:28:12
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:24:4e:eb:a6:27:de:f9:fb:e2:2f:7b:88:05:87:d6:3e:
93:d8:48:c0:53:b5:d2:9f:31:c9:0b:00:e4:92:8a:c4:db:79:
e8:d9:64:3c:50:a3:d0:23:f8:33:58:e9:22:7c:7c:3c:71:94:
b5:01:9c:e6:a1:17:4e:4a:4f:af:70:d6:d5:2e:2f:92:c7:df:
d3:56:8f:dd:b2:aa:33:87:80:6b:5b:c1:43:1f:15:00:ac:66:
e4:5f:36:10:54:aa:d6:70:78:dc:09:93:d1:91:9c:e6:b9:51:
70:c4:f3:fd:2b:45:97:ce:f2:39:6d:85:d0:b4:6e:d6:d3:08:
92:dd:b7:b1:26:63:24:1b:23:c9:99:6e:74:52:fa:e1:ac:a5:
2d:35:fb:ea:27:5e:97:a4:6c:d9:22:63:d2:d5:b5:58:ec:cc:
0d:56:b1:86:cf:9a:9e:d7:c2:d3:ab:61:6f:ba:53:e2:ec:f3:
aa:10:41:bf:78:ff:62:5f:cd:9f:90:b0:65:20:8c:50:cb:db:
76:b6:36:84:5a:32:91:6c:3f:ce:71:cf:4f:75:45:9b:03:ed:
c2:b0:b7:40:3d:19:6c:37:59:b0:d7:31:23:24:0f:0f:db:9f:
b8:be:87:02:66:93:78:74:f3:3a:d8:7e:4d:9b:1f:7f:cc:e6:
2b:02:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:31 2025 by rpki-client