Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: w9LbEp4WXaSvm6pmO7oSJk54CZjGXre9LdAjf9U2tn8=
Subject key identifier: 96:2F:BE:0B:DF:57:3D:0E:8B:FD:C6:4A:1F:E7:6D:36:BB:57:1F:3E
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 0198D7058BE98A6444FC7810D9DCDACAD981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: NIBbgFCqb7U0EYMLLsvLKzd0Aq7icyzzX4hTNjkXWKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8b:e9:8a:64:44:fc:78:10:d9:dc:da:ca:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=962fbe0bdf573d0e8bfdc64a1fe76d36bb571f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:c0:a7:a7:6e:4c:51:27:30:52:e1:53:8b:
17:d3:9f:81:80:df:03:a0:1f:9f:6f:04:e4:ce:65:
a9:d9:ed:84:06:f6:4d:b9:ed:b9:e1:d4:c0:3d:cd:
00:9d:00:8d:32:ba:1c:c5:aa:be:f8:6c:44:b9:cc:
b9:29:8e:b2:d9:ea:fc:54:7d:fd:a6:c3:3b:07:63:
14:8a:f4:e6:c3:6c:c7:2a:7a:b3:c3:c8:ba:1c:27:
44:77:10:a2:f3:9e:21:d7:ab:59:d9:e1:c1:9a:c1:
d1:03:72:56:72:03:f1:43:c7:72:7d:e1:33:1d:1d:
52:61:3f:93:9e:69:45:c0:d4:da:88:88:9d:78:89:
ab:db:be:25:87:ad:d7:ce:67:9d:6f:99:8f:e7:6d:
b3:e9:b0:23:cb:dd:10:61:a1:00:b4:ef:6c:ed:b1:
af:64:61:af:b2:ae:7d:bb:94:f3:ff:43:8d:44:83:
11:6e:a7:83:fe:1e:0e:54:76:8d:42:61:4b:7f:af:
86:dd:69:62:2c:b9:33:b6:cc:4c:5a:76:90:d2:a3:
8c:52:9c:d6:fc:eb:a5:a5:26:f3:06:c7:9a:21:eb:
a6:4e:00:87:a9:2e:4b:a4:ed:52:44:e8:db:46:1c:
49:1e:f6:7b:af:e0:53:b7:85:fe:60:40:36:fc:ab:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:BE:0B:DF:57:3D:0E:8B:FD:C6:4A:1F:E7:6D:36:BB:57:1F:3E
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:b2:f3:68:8e:93:e7:b2:a9:f4:01:7c:00:b3:f1:04:04:
8b:95:44:1c:4c:29:e4:f3:9e:0f:ff:37:0d:2d:ac:7c:47:f5:
90:f1:10:00:d3:fb:90:04:2e:51:21:a4:72:2f:45:44:75:0e:
18:04:42:89:e7:77:bc:bf:4f:00:35:9d:06:b6:69:80:81:11:
e2:bf:a9:27:b1:4c:6c:fe:74:d7:9b:8b:62:0a:90:41:3c:45:
ba:49:6e:2a:54:29:3d:ad:8a:86:4b:dd:ea:2c:57:a8:7b:6b:
17:5d:5e:94:b3:8c:b2:3f:1c:c3:2a:14:0b:b0:cf:1f:24:a3:
5c:b2:64:8c:c5:87:59:6d:3e:60:c2:a3:28:c4:03:f1:f2:26:
65:dc:54:be:34:b3:82:fa:28:79:70:95:e2:58:92:8b:f7:cf:
73:c9:a2:98:0f:ec:7b:04:2d:f6:ef:69:ea:40:a8:08:14:c5:
91:64:31:2b:1a:28:33:dc:50:3e:81:ff:0c:fb:84:66:f5:d2:
a9:f6:1d:2b:5f:52:28:82:6b:43:9c:8f:7b:05:e5:85:96:a6:
45:da:74:8f:a0:c7:e3:8b:20:22:a5:75:2e:75:2c:d7:14:1e:
51:0a:c6:5c:75:12:7e:de:2d:15:15:fd:30:48:a0:50:28:08:
e6:f5:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:13 2025 by rpki-client