Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: O6aDEa6tRy203ra1NuCaCanXy1bB8V1uG0afIPy/VEo=
Subject key identifier: 47:EB:E6:0A:34:8F:E7:43:3C:4A:22:73:46:24:27:9A:8F:28:B6:CD
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 01967530842D89B87D58F75A26E1BB607A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 05D4
Signing time: Sun 27 Apr 2025 03:00:35 +0000
Manifest this update: Sun 27 Apr 2025 03:00:35 +0000
Manifest next update: Mon 28 Apr 2025 03:00:35 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: LmSwhslVX2ZCMhiJGpExez4c6MYFcqDdSzAvapdu2PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:84:2d:89:b8:7d:58:f7:5a:26:e1:bb:60:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Apr 27 03:00:35 2025 GMT
Not After : Apr 28 03:00:35 2025 GMT
Subject: CN=47ebe60a348fe7433c4a22734624279a8f28b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:26:2e:a4:d1:93:37:f1:82:8b:90:3f:0e:
d8:09:d0:c6:23:fe:6a:a2:46:5d:94:49:e7:d1:9d:
e2:5b:51:30:8b:45:9d:86:b1:96:12:d7:ec:7f:49:
62:8b:3f:06:8f:e0:07:88:16:0e:3d:12:29:66:4b:
44:33:95:5e:7a:4f:c3:48:1e:2c:2a:42:2a:02:bc:
cc:03:c9:a0:a1:a4:36:c7:b8:54:ae:d8:27:9a:f5:
be:ca:ca:bc:fe:c1:f9:58:ca:a6:60:cd:82:69:b7:
41:f4:6f:c0:8f:bd:da:8c:cd:f3:12:68:50:69:a3:
3d:32:e2:b5:b3:93:85:79:99:c6:62:42:e0:61:3d:
5c:f1:50:db:8d:cc:cb:fb:e4:2d:65:89:01:2b:98:
61:14:1c:f0:23:44:3a:93:e8:66:f7:c3:85:ff:66:
5f:32:09:b8:5d:cb:74:65:42:22:73:29:a5:58:70:
8f:d4:9d:d9:6b:3c:94:85:1f:00:d7:09:4d:f2:bd:
43:83:18:60:2a:c5:96:7f:f4:75:c4:23:92:13:04:
75:8b:a0:ad:b7:9c:c7:5c:4d:d2:f8:0a:20:80:2a:
d0:91:5b:d9:ff:42:ab:00:fb:f6:42:2b:f2:2b:ef:
40:30:a4:3f:e9:3c:87:11:4c:2f:3d:d8:92:22:b4:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:E6:0A:34:8F:E7:43:3C:4A:22:73:46:24:27:9A:8F:28:B6:CD
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:50:a4:ca:89:62:74:67:17:5d:0e:ce:da:1d:a1:7a:d3:
31:4d:9e:34:30:c7:1d:8f:17:5b:ce:c4:2b:ab:02:b0:d0:0c:
5f:b4:20:37:51:26:c0:00:f2:d1:1d:ea:bd:b8:67:a3:55:8f:
97:73:03:43:a1:0d:f4:9d:d2:b7:b8:e7:94:82:4a:5e:82:f5:
09:73:7c:87:2b:07:30:d0:e6:8a:b0:5d:ca:e8:27:db:30:0e:
8e:5e:86:f5:2e:36:fd:73:e2:63:c7:92:05:aa:9f:7f:6c:ad:
ff:44:47:64:0a:4f:5f:f2:01:c3:45:ec:39:c7:18:9d:41:be:
e4:5d:3d:20:7e:9c:79:2a:3e:68:ba:b1:30:66:3b:78:c4:22:
74:e3:96:88:00:f2:5b:c1:1c:f1:5e:1f:5b:ae:fa:4a:d3:4e:
48:df:ac:5f:36:02:cd:25:56:55:7e:d0:ac:1e:04:7f:57:e6:
b9:bc:4a:1e:c5:eb:91:64:a8:71:e4:1a:19:a1:ad:8e:27:ee:
02:f7:3f:32:6e:62:99:6e:a8:bc:73:77:94:16:8f:0a:30:b9:
cb:66:0d:3a:4a:34:2c:52:be:56:82:eb:03:02:52:3a:ec:20:
6d:94:18:5f:cf:bc:ec:74:84:a8:70:cd:b8:2f:29:16:51:9a:
74:ee:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:44:37 2025 by rpki-client