Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: 8rH05NUEImf/bIUEat5qU02Ebw8q7JVdhDBbWNcweOk=
Subject key identifier: 81:E1:E3:98:01:A2:53:0D:1D:2A:8E:6A:E4:6E:DF:8B:D1:9B:6F:31
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 0196B47D58995152DE7B9A305319AB0BC535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 123E
Signing time: Fri 09 May 2025 10:00:35 +0000
Manifest this update: Fri 09 May 2025 10:00:35 +0000
Manifest next update: Sat 10 May 2025 10:00:35 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: aKTlh1X2K5yyQHWN3+myMS082p8JC97DWQIDhaQN5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:58:99:51:52:de:7b:9a:30:53:19:ab:0b:c5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: May 9 10:00:35 2025 GMT
Not After : May 10 10:00:35 2025 GMT
Subject: CN=81e1e39801a2530d1d2a8e6ae46edf8bd19b6f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:5b:5f:c7:38:20:0a:7d:0c:29:ed:a2:73:
1a:bf:26:1a:5b:7e:77:83:98:bf:6c:cf:f2:cb:28:
81:40:c8:61:1d:62:46:c8:61:4d:1c:08:4f:33:5f:
ed:56:49:69:66:36:df:5a:86:18:82:31:5b:8d:b5:
4b:a1:0d:41:d3:78:1e:f3:57:5a:45:47:82:c7:63:
0a:ca:51:6e:2e:1f:46:9e:07:42:b4:6d:05:2b:fe:
06:c3:b3:5a:b5:f7:4b:fc:8e:e3:6e:41:38:b8:02:
99:82:a8:e1:46:a3:15:0f:4e:8e:a5:31:cc:0b:a1:
a1:ae:3d:16:42:0b:95:9b:67:db:de:25:de:5f:1c:
78:b0:84:e7:e7:de:f7:30:2d:32:40:31:d8:e4:9e:
56:b3:f0:23:e1:a6:5f:1a:f3:5c:a7:ca:d2:e0:56:
ea:e8:7c:1e:b1:02:6e:f4:80:f3:65:0f:12:2b:4e:
a9:bd:96:ea:60:80:0b:5b:27:d7:44:f3:ed:f9:d1:
6b:db:ba:2d:5a:bd:3c:9d:27:80:0a:c9:e1:b6:67:
f9:b3:86:5e:2b:22:93:a6:91:55:2e:ef:70:29:02:
18:8c:13:76:6f:c6:fe:6d:47:43:8c:c8:71:c5:e5:
a7:b8:0c:2b:36:db:17:eb:b2:95:f8:3e:31:9f:97:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:E3:98:01:A2:53:0D:1D:2A:8E:6A:E4:6E:DF:8B:D1:9B:6F:31
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:44:b2:07:5a:6d:ad:44:14:a1:52:f5:95:d6:b4:ea:ef:80:
d0:e6:63:7a:b7:1e:69:fe:06:3f:25:9d:63:a0:66:94:05:42:
62:ba:96:b3:8f:f1:bb:75:bd:c9:1f:4a:b3:d4:29:66:d0:83:
eb:11:d9:42:f0:34:cf:fd:5f:c4:68:17:6b:f9:b2:37:7c:f7:
f9:5c:5e:5b:86:ff:b1:67:9a:22:ec:49:fc:67:f5:26:e6:45:
1e:35:df:6b:e3:79:00:1e:80:f6:0c:8f:95:55:c1:8d:61:49:
ee:f5:b6:c1:20:40:a3:a7:2e:c2:0a:aa:39:a5:ec:5a:43:d1:
24:ab:c7:cf:6c:ec:0d:4d:fd:1f:b7:74:95:cb:7b:ec:0f:0b:
01:36:12:f7:aa:59:e7:d4:01:de:3c:49:ef:98:43:7c:aa:e2:
1e:0a:67:4d:c3:fa:8a:47:41:7f:e3:59:1d:d9:02:6e:d0:00:
0c:a4:f8:38:61:f7:c5:a2:b9:1e:d7:bd:3a:22:b1:ce:71:ae:
d9:5e:ae:ab:95:7f:a7:0f:ce:05:7a:ab:87:a6:6b:ee:a3:c9:
4e:d1:3c:33:ab:61:6e:df:cb:e5:cc:cf:39:60:da:88:63:ad:
f7:90:97:84:3c:87:f7:88:9a:6f:f7:5f:7a:28:6c:89:97:bf:
23:14:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:35:19 2025 by rpki-client