Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: eOhOPQs/KDblTg2mWrI16PcfAjmyOR7WlxjCqdix92o=
Subject key identifier: D1:DC:4B:97:72:95:8D:42:9B:AB:5B:A7:6B:8C:DC:97:ED:20:A6:4C
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 0196760C17A346D9DB6301C67C1A32E00A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 11FD
Signing time: Sun 27 Apr 2025 07:00:26 +0000
Manifest this update: Sun 27 Apr 2025 07:00:26 +0000
Manifest next update: Mon 28 Apr 2025 07:00:26 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: Tpb1aLFMOfhKVmHOmDbrc/pREGzFa9SGGQFWqtHSl9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:17:a3:46:d9:db:63:01:c6:7c:1a:32:e0:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Apr 27 07:00:26 2025 GMT
Not After : Apr 28 07:00:26 2025 GMT
Subject: CN=d1dc4b9772958d429bab5ba76b8cdc97ed20a64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:86:83:51:0c:27:a5:4d:7a:69:20:1b:eb:
91:57:0a:44:56:24:85:4e:60:be:3f:de:68:65:4c:
5d:64:a5:a0:2d:47:32:3d:03:8b:26:cc:a0:cb:37:
bc:d6:ce:e7:e8:e2:17:4d:57:54:26:d9:d0:68:5a:
93:c6:41:b2:85:c1:4e:65:bc:85:93:9e:45:54:af:
4f:29:fb:c1:cd:3d:60:88:e6:24:2c:cf:ba:ed:c6:
49:bd:8f:8c:3a:85:9d:5f:e2:aa:ad:c7:92:e2:b0:
55:47:ed:79:33:1a:35:e8:61:f9:1e:81:35:9b:49:
62:b0:99:0e:44:1c:89:57:d8:55:bf:fc:b9:f1:5f:
99:15:2c:93:8c:20:cc:0d:a3:c2:66:aa:97:7c:3c:
43:83:4a:2b:82:b2:f8:4e:8f:3b:b0:ea:aa:89:c5:
6b:f3:a6:d2:c5:40:47:23:cb:93:ac:62:7d:88:39:
f6:c8:1b:46:54:c3:d0:1e:fc:7e:77:c0:b2:e4:ce:
56:9b:22:52:38:29:dd:47:e1:86:c5:ed:b9:3d:9a:
ca:34:a6:17:6d:6a:c3:30:8b:b7:4c:59:13:b4:bc:
f2:e7:0b:8b:f7:13:67:1d:f7:34:44:ea:4f:ca:9a:
cc:ac:35:37:64:1a:28:eb:25:38:45:88:12:29:4f:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:4B:97:72:95:8D:42:9B:AB:5B:A7:6B:8C:DC:97:ED:20:A6:4C
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:fc:fb:45:68:87:50:80:32:74:39:28:0f:e8:06:b6:ed:
84:d5:16:fe:d1:0e:4c:81:93:48:3a:fb:a1:83:bc:ca:7d:01:
fb:df:d2:86:f9:e2:8e:94:46:18:90:27:6d:ac:06:5f:d2:e2:
d8:38:ab:74:64:c1:de:30:64:06:89:f3:2b:d6:ac:97:ac:02:
c1:96:38:e1:b9:d7:35:b1:4c:ef:74:83:9f:a1:91:19:58:b7:
ca:b9:c3:2a:26:99:73:ff:36:a9:91:61:32:5f:9a:7c:63:19:
b3:55:4b:5b:75:01:68:bb:98:bc:68:b1:32:52:c0:48:9f:22:
80:e5:3b:11:75:f0:9c:d4:db:13:4a:e7:f1:79:87:8e:9c:00:
a0:5d:6a:cd:89:dd:a1:96:e2:48:c5:70:fd:88:9b:2f:bf:86:
97:6f:26:ca:00:94:1d:b0:c1:64:64:2d:75:bb:5f:72:57:03:
57:7c:6a:c0:ca:c0:dc:61:40:b9:4f:b2:ef:63:70:d6:c9:db:
68:75:b4:21:ff:45:fe:29:3c:e1:29:d0:46:60:ec:4b:8e:bf:
d7:15:ba:92:c7:ba:5a:1b:7f:11:dd:c5:72:be:25:5c:af:5b:
d4:be:1a:56:0b:af:de:87:4b:eb:f3:13:8e:31:92:41:6b:e1:
af:09:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:31 2025 by rpki-client