Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: +JS/NNvfVAHmeBkGGrzj/QYzUjUzBDiShE8KLah7Lyg=
Subject key identifier: 04:30:2E:E8:F8:13:07:DD:EE:70:DC:5A:15:5C:FE:8E:F1:30:AF:1F
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 019681D93FEA88E27884B767D399961FC8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0614
Signing time: Tue 29 Apr 2025 14:00:20 +0000
Manifest this update: Tue 29 Apr 2025 14:00:20 +0000
Manifest next update: Wed 30 Apr 2025 14:00:20 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: SSnDxvg+Yc1FPxx3C1fiG6xOL3xtFYd2A28ZuhuzBdI=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:3f:ea:88:e2:78:84:b7:67:d3:99:96:1f:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Apr 29 14:00:20 2025 GMT
Not After : Apr 30 14:00:20 2025 GMT
Subject: CN=04302ee8f81307ddee70dc5a155cfe8ef130af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:d7:f3:07:fe:e3:0f:3c:24:e6:a9:27:05:
4b:62:13:d7:fb:66:75:3b:d4:6d:90:a7:03:c4:5e:
e7:20:d9:f2:f5:8a:d4:8a:f1:1b:cb:e2:a6:3c:e8:
42:eb:67:63:60:9c:a6:1c:62:5d:95:d7:2f:3c:ed:
4c:83:c0:e1:40:ab:a6:e0:e2:68:8c:34:c5:b6:e0:
10:cd:a6:2a:db:09:ea:ec:b0:3c:19:1e:de:1d:d0:
45:e6:4f:68:56:c3:33:c9:58:f0:71:be:8c:ab:c7:
47:80:c9:63:43:71:20:19:f1:d0:68:da:0e:8d:50:
06:76:ed:cb:63:fa:8e:8a:19:7f:d0:5d:84:a9:f0:
c2:b1:03:71:ce:16:3d:a7:7f:96:06:b2:45:59:b6:
2c:e4:e9:de:3c:0d:74:0e:d9:39:86:23:3d:74:fd:
b6:b3:84:89:b7:26:14:11:39:e5:8f:25:fe:69:01:
87:2e:74:b8:33:ed:fc:1b:40:9e:f5:70:42:cf:f5:
46:7d:74:a1:62:fb:3f:c5:ad:c6:d6:e8:d0:4c:f8:
26:98:b5:1d:4d:c5:39:74:4b:c9:cb:87:2f:63:49:
fd:fd:4d:cd:3a:69:fa:86:5b:7b:ee:1f:7f:94:71:
b6:e8:d8:0e:64:4a:05:58:02:27:0e:58:aa:7f:b2:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:2E:E8:F8:13:07:DD:EE:70:DC:5A:15:5C:FE:8E:F1:30:AF:1F
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:79:f5:1f:d9:73:0f:57:7e:f4:fd:05:e4:3d:4d:a7:50:a1:
23:2d:4d:2d:fe:9e:bb:04:9e:89:2f:af:19:3a:2a:9e:52:51:
7b:1e:b3:96:6a:8c:03:91:2d:6e:7b:75:b2:b1:da:39:01:42:
8b:62:3c:38:52:c6:ea:62:39:15:24:cf:9f:7a:5a:1c:66:0a:
7a:5e:0d:8d:69:6e:55:8c:54:7a:f6:29:65:9c:c5:85:e9:e2:
27:16:de:cd:a4:40:4d:e3:37:87:f4:a2:65:7e:40:b2:f2:4c:
b0:d1:ef:e3:72:df:c5:37:c1:23:2e:e5:73:d0:bb:34:de:12:
4b:42:b6:30:ae:1b:be:a5:db:88:1d:c5:23:5a:8a:50:26:19:
80:a8:33:dd:09:c5:00:92:ae:06:f4:d9:39:23:3a:5a:c1:82:
5d:c4:bf:d1:6d:f7:21:06:ad:74:4a:24:f7:3c:83:90:a1:b9:
af:f1:01:73:b3:6f:72:a4:be:58:c2:8d:63:31:60:ba:97:39:
13:3c:46:45:64:20:1d:34:4d:46:77:2f:a4:57:61:04:2d:eb:
2f:7d:d5:96:e4:1f:7c:e7:9b:74:41:7d:c1:7c:8b:f6:e1:75:
e8:c5:1a:64:ad:01:f4:13:3b:fa:be:c7:c1:c3:12:ec:4a:29:
cc:db:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:08 2025 by rpki-client