Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: kDXgk39WZMI7M39TvgxjijndjUpBnK96+q7tFxlBzdM=
Subject key identifier: 31:67:4E:4F:3C:9F:4F:04:62:23:C5:68:F2:C4:15:40:33:91:02:D3
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 0196839109FCF569887E11AEDB238AD05A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0A83
Signing time: Tue 29 Apr 2025 22:00:42 +0000
Manifest this update: Tue 29 Apr 2025 22:00:42 +0000
Manifest next update: Wed 30 Apr 2025 22:00:42 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: VMyVlndV1HQbTJ9/1rMEemlJ4HkBw7nCCxUFESR69kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:09:fc:f5:69:88:7e:11:ae:db:23:8a:d0:5a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Apr 29 22:00:42 2025 GMT
Not After : Apr 30 22:00:42 2025 GMT
Subject: CN=31674e4f3c9f4f046223c568f2c41540339102d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:89:d2:8f:0d:7d:5c:83:d4:77:d7:9a:ba:
ba:d3:2e:94:af:56:32:89:68:dc:e2:3d:46:b8:76:
35:cb:c0:d9:d0:fa:47:89:60:58:28:0e:d0:9b:1a:
7e:5b:74:8e:38:29:bb:a9:1e:b8:65:db:3d:5b:72:
9a:62:08:75:4d:c2:c8:71:84:4a:17:a5:66:d6:59:
1b:85:00:0c:a0:3b:2d:04:1f:16:59:39:3e:c9:ac:
70:8e:cc:06:31:19:71:17:60:64:6d:d9:b5:ad:e6:
00:ce:ff:91:b8:71:86:7a:5d:b7:7e:38:50:84:4a:
f2:15:05:86:6a:5e:9f:e6:7f:93:83:5a:5f:e0:7e:
1c:6c:60:f5:ec:e2:ea:51:02:b5:94:66:a2:6d:7e:
f7:33:88:06:61:b8:1c:4e:d1:90:de:14:df:15:e3:
65:c2:ec:d7:63:fc:de:07:43:39:44:b2:ca:04:6c:
43:90:9b:91:d1:1b:81:80:f4:49:82:01:f3:f1:2e:
30:7a:a1:7e:76:07:6d:df:a5:e4:b8:f6:8e:b3:cb:
3c:5c:df:ea:45:27:e1:7f:2f:f5:78:57:f6:57:0a:
89:ad:82:21:ad:4f:df:8d:b8:93:4f:8d:ce:3c:40:
c8:f7:32:11:5a:ac:8c:ff:8c:74:84:f8:46:04:e7:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:4E:4F:3C:9F:4F:04:62:23:C5:68:F2:C4:15:40:33:91:02:D3
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:5e:c4:a1:63:e1:9e:61:57:36:a7:eb:5d:36:a3:0a:0c:
90:39:49:e1:b0:8f:d3:fb:46:f3:52:3c:6b:ae:94:18:45:5d:
8a:02:df:f2:2c:3c:79:78:12:19:96:a6:69:9c:f5:b6:57:a7:
59:46:4b:93:91:0c:f2:c0:e4:90:94:66:93:ef:76:fe:10:39:
0f:da:56:81:01:70:6a:dc:d9:27:f8:5f:94:80:b4:a9:d0:93:
14:9b:f5:e5:68:15:bb:0d:d7:56:51:ea:b7:6d:91:4a:04:bd:
0f:e2:9b:c3:f7:ab:04:4f:9a:ba:9e:1a:06:8c:64:5b:5e:d1:
e9:e2:a6:19:4f:e0:17:67:43:6e:98:7f:e9:1d:e0:31:66:34:
89:6d:d2:45:84:27:2c:da:ab:b0:91:fe:23:66:46:f9:2d:bc:
d9:b5:70:82:00:5b:6c:6f:8c:a8:ec:0e:45:80:f5:4c:32:cf:
ca:bc:2e:5e:d5:09:73:bb:24:a4:89:30:da:de:9c:08:6c:8c:
72:62:66:c3:46:e5:26:5b:6e:0b:93:fa:5e:3c:65:3a:4f:87:
a4:e7:2c:a5:5b:60:15:82:73:76:97:00:e5:0f:a8:18:7f:ea:
9e:16:ad:56:de:d2:74:f8:9b:f0:93:33:09:2d:f7:88:83:73:
1d:f0:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:29:12 2025 by rpki-client