Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: qbiRfdki+W/sHtIZiowqMyBm/GYn1gQDP7KKctsuiK4=
Subject key identifier: ED:C3:E4:D7:9F:56:2A:53:99:64:A5:AE:CC:C8:BB:C0:87:A4:C6:47
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019674C2DC23ADE1C217DF5018298F528BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1239
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: aVnwflWuqGlJ0hCDpWfaKL3QFSds/nSuGejYqd2+jGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:dc:23:ad:e1:c2:17:df:50:18:29:8f:52:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=edc3e4d79f562a539964a5aeccc8bbc087a4c647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:9d:c1:e6:e5:20:76:3b:81:d5:54:3a:9f:
32:ff:b9:4f:19:f5:c7:29:45:ab:8d:38:e7:9d:79:
4a:e0:2b:31:78:2c:b9:37:fb:f4:4e:8f:bb:19:f1:
47:9d:9d:cb:26:ca:47:31:26:01:2e:7e:f2:be:e3:
8e:0c:af:ff:74:4a:fd:09:a4:19:79:57:81:55:97:
17:32:2e:b7:17:a8:66:85:54:bf:28:84:91:b6:ad:
ac:db:ee:89:80:08:0f:ba:31:fe:83:d7:36:54:dd:
b8:74:26:cb:0b:13:b3:0e:62:e4:87:87:48:c2:54:
db:54:e7:3a:75:f7:7d:d8:8a:62:c2:06:9a:05:1f:
52:55:ed:10:75:36:a4:b0:0a:e3:50:20:ec:b0:76:
32:73:2f:41:dd:57:74:37:cf:ae:cc:cb:65:d4:50:
cc:77:3f:43:c3:e3:e5:71:35:b4:d7:0c:0d:bf:b8:
2b:a7:be:a2:f2:8a:2f:3b:46:07:b5:42:6c:98:bd:
bd:46:52:cf:2e:ab:e3:4e:84:66:8d:28:1d:92:b3:
72:9a:42:16:db:d7:ef:e7:23:47:33:98:7e:78:cf:
bc:18:4c:f9:8b:7e:19:25:40:dc:6f:9b:2d:d3:da:
33:bd:59:4c:7c:3f:ae:92:7f:da:88:2a:9e:e3:a6:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:E4:D7:9F:56:2A:53:99:64:A5:AE:CC:C8:BB:C0:87:A4:C6:47
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:62:92:60:94:42:fb:df:9e:af:13:a7:0d:c1:35:40:89:9f:
be:a4:e1:59:cb:15:4e:34:96:cf:93:43:a2:c5:33:17:01:ec:
82:50:e9:e7:3a:ac:92:3d:88:16:3a:7c:92:91:0a:12:9e:64:
76:bc:ad:70:03:33:52:27:d5:25:e4:ed:1b:d0:78:d9:e4:d4:
ab:18:a4:3a:26:65:59:7b:01:a2:98:56:9d:2f:e7:53:30:97:
f9:3a:cd:d1:84:ed:35:eb:9b:59:56:c8:24:32:47:02:2e:15:
2d:32:38:91:cd:77:36:fd:8e:82:bc:cc:40:30:12:ea:f5:4b:
c0:0b:da:c2:18:e8:31:e5:b0:30:b0:20:b8:df:da:f0:0a:91:
e9:6f:41:b5:cf:23:33:c4:58:35:82:cc:53:dc:32:91:f7:e6:
73:89:ec:78:79:6c:11:fa:bb:d7:c8:4b:f1:db:aa:e6:69:02:
00:3c:bb:6b:e3:fe:d9:97:10:06:01:99:21:88:ac:82:98:04:
f8:66:76:c8:42:d4:b5:cf:98:06:ef:d3:8d:aa:68:f9:76:10:
61:cb:63:3e:53:64:7b:b7:f4:95:14:82:ad:58:e5:8f:15:17:
86:8d:e1:b6:39:ae:54:c9:95:f5:82:4c:b7:09:1e:e7:5b:21:
91:ef:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:02 2025 by rpki-client