Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: jFm9S8EAAoUQuhCpCx1pyips1IKPqhbwgNKgBZ3MvMM=
Subject key identifier: B9:41:68:14:E8:3C:38:C7:A4:85:BE:0E:6D:2D:CE:19:2A:08:C9:91
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 0196789F1BB559D7D36F84503C0495AEC48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0CAA
Signing time: Sun 27 Apr 2025 19:00:15 +0000
Manifest this update: Sun 27 Apr 2025 19:00:15 +0000
Manifest next update: Mon 28 Apr 2025 19:00:15 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: qYXU60HREhI+Mmp37rUrOmyjY11HrHP22Idj2JfxHjo=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:1b:b5:59:d7:d3:6f:84:50:3c:04:95:ae:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Apr 27 19:00:15 2025 GMT
Not After : Apr 28 19:00:15 2025 GMT
Subject: CN=b9416814e83c38c7a485be0e6d2dce192a08c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:db:57:d5:22:79:f6:28:db:ce:5b:37:0f:
0e:9a:08:06:25:5f:ce:0e:e7:9b:5a:0d:a5:07:5c:
2f:26:11:45:28:5d:9a:d8:21:43:79:a8:89:d6:97:
d8:c0:9d:10:5d:fb:f1:07:21:0e:45:5c:43:14:af:
e6:b1:e7:92:ed:f8:c9:3b:2b:cf:10:54:e4:61:2e:
9d:8e:66:8f:01:79:02:00:1a:a2:e5:76:9d:53:37:
a1:12:5b:b2:d7:0d:02:7d:4e:8f:63:1a:59:57:ab:
0e:1a:60:eb:15:ee:6c:27:c1:57:6d:0e:61:8e:1f:
64:1d:42:6a:b4:6d:09:55:3b:d2:55:dc:a9:91:f3:
8b:68:f5:21:b0:04:c8:6d:61:e0:27:82:f2:ec:0b:
20:3e:14:3d:fa:d9:28:0f:50:5a:db:d6:dc:cb:41:
f6:50:c1:b7:7d:f9:7e:62:f8:11:90:58:fb:a6:e7:
bf:79:dc:44:46:34:80:03:79:88:51:62:b4:fe:de:
65:a5:5f:d2:a6:75:c2:36:98:a7:c2:ee:9c:18:bd:
20:c0:32:5d:5e:8e:58:47:82:a8:91:f7:ab:db:43:
55:96:b2:80:50:1f:c3:62:53:37:f5:57:53:01:c3:
08:52:57:48:63:18:e8:02:04:e5:03:92:13:49:15:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:68:14:E8:3C:38:C7:A4:85:BE:0E:6D:2D:CE:19:2A:08:C9:91
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:1e:fc:70:f3:18:a9:5b:07:5f:a6:06:fb:7d:23:db:0a:
66:9d:6b:87:e8:64:c4:54:f1:3a:d4:7a:9e:38:df:0d:e1:68:
3c:e0:5b:5c:51:ba:cf:31:46:f6:41:28:b5:cd:11:92:28:1f:
53:ee:de:77:c0:9b:6e:3c:3a:9e:58:60:e3:f1:df:a5:8f:31:
f9:18:8f:45:02:42:f8:ca:f2:ac:2f:82:5c:3a:4f:75:d8:5c:
cd:28:2d:97:89:96:d7:d7:ce:b6:db:66:78:1f:dd:86:92:b4:
6a:b7:88:95:6a:b1:cb:7f:23:dd:ac:02:c4:70:7b:ba:38:b8:
30:d9:ca:83:da:76:b7:3f:98:e3:66:ac:72:71:de:27:d1:fc:
f0:8e:0d:d4:8f:e3:c1:64:20:52:56:bc:4c:39:01:d8:fc:05:
3e:3a:45:1b:35:b9:96:2c:51:5c:3a:30:11:4b:f5:62:f0:01:
77:72:bb:78:96:f0:e9:66:7a:ca:d9:dc:73:f4:30:3d:dc:cb:
6e:fa:d7:40:b0:72:35:03:df:be:44:1d:3d:e3:0c:82:59:c5:
0e:14:ab:04:80:8f:61:9b:2b:c2:e2:f4:3d:0a:a5:5f:64:aa:
d7:a0:c1:71:b3:ca:d3:24:c9:4a:7f:b1:a6:91:b0:fa:fa:8e:
af:a4:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:12 2025 by rpki-client