Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: Dkhkh34m8AxiqFueCeisfcsoRgATXsW+LsQheWzbZMg=
Subject key identifier: 27:46:C2:34:91:D0:69:62:26:9E:DE:8D:B0:90:E3:CC:AA:F2:2F:D4
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 01976F2C0782B2F4153C383CEF6C7A37B544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 16:00:45 +0000
Manifest this update: Sat 14 Jun 2025 16:00:45 +0000
Manifest next update: Sun 15 Jun 2025 16:00:45 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: vbnJjsP0rTctgB7vecpcxF5mIOHwYSsR4wLgZfy4fak=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:07:82:b2:f4:15:3c:38:3c:ef:6c:7a:37:b5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jun 14 16:00:45 2025 GMT
Not After : Jun 15 16:00:45 2025 GMT
Subject: CN=2746c23491d06962269ede8db090e3ccaaf22fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:82:5d:50:f7:81:a7:cb:ad:46:e7:98:68:
8d:a7:27:19:97:26:40:75:aa:70:60:98:93:a6:3e:
d7:9b:0b:c5:87:40:b0:e1:f7:d9:ca:68:5e:57:5c:
aa:4d:ae:46:5f:6e:76:e0:0a:7c:63:35:0e:09:14:
14:ac:cb:ac:c9:bb:d4:7b:6d:b4:dd:b4:ae:d5:c6:
84:b2:26:3b:71:e4:fa:85:81:57:1b:16:f9:46:19:
11:be:16:61:cc:69:8d:5e:ab:3f:ec:dc:dd:22:ff:
e0:a8:d8:4e:aa:f3:b2:73:3c:58:a4:02:7e:65:2b:
df:a2:de:35:4d:79:d2:30:96:ad:0c:c6:a1:1c:f4:
53:e2:2f:a6:ed:15:c4:e1:12:e7:84:ed:15:e2:7e:
2d:93:85:39:45:a1:89:5d:07:b0:4f:72:7a:f2:6a:
7e:79:27:4e:b9:04:7f:5d:41:65:25:f9:f9:8e:b6:
f8:04:f4:00:80:65:d6:e8:62:e0:e9:2e:1b:b2:8c:
f9:e0:af:08:60:73:93:ca:8e:b3:28:79:db:63:2e:
96:5a:6b:25:24:bd:74:d9:9d:65:73:10:9b:53:a9:
81:66:23:26:3e:c1:53:8b:fa:eb:81:4d:9f:14:fd:
c6:c4:cd:70:6e:77:77:c5:bd:b3:a4:1e:22:b4:ea:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:C2:34:91:D0:69:62:26:9E:DE:8D:B0:90:E3:CC:AA:F2:2F:D4
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:b9:1d:5d:6a:72:ab:7f:24:59:83:78:8b:b2:e4:16:d8:
47:42:fe:bb:90:ed:01:6b:b2:2c:b3:fa:a7:cc:db:c1:4a:3f:
d9:f0:9f:13:12:9e:62:e6:c0:12:2a:df:00:91:63:8a:6d:f3:
b5:8f:56:bb:da:0a:ed:42:6f:e2:1b:3c:5c:ea:86:93:27:ef:
b9:3b:c0:4d:71:35:ad:20:43:94:1c:6d:7e:de:9b:a4:56:c6:
21:7e:dc:9a:32:8d:8c:b8:70:da:3d:f6:31:96:cd:06:0b:09:
b7:1f:8d:07:b1:ee:8e:af:50:dd:57:2b:21:38:a6:9c:14:cb:
69:55:80:71:60:d3:76:98:64:bb:18:c1:47:e1:bf:d6:bd:0a:
aa:56:5b:09:7f:e2:20:e4:f1:4d:9c:31:53:db:22:d1:ef:fc:
d2:31:93:09:fa:13:09:19:e4:fd:7b:a8:85:37:4a:62:9d:28:
31:53:53:0b:b6:47:33:10:7e:f0:ec:29:0a:48:53:75:48:e5:
c1:29:4d:42:5c:30:3b:71:dd:f9:5c:0b:92:57:a3:21:b7:d5:
86:5e:24:b0:2c:3f:24:b2:1d:26:2b:1f:28:6d:5c:6a:72:74:
69:3f:fd:a0:e8:66:32:ee:53:f5:79:b7:46:90:a1:e6:90:8e:
61:5f:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:21:17 2025 by rpki-client