Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: YVIrOvMrDRHda97aUDN3u022NAIgdq4Mhu/QKCEN82A=
Subject key identifier: F7:A7:98:6F:E6:EA:16:18:D0:AE:3B:61:6C:0D:25:FA:2A:9E:97:FD
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 019689254675887C3BE2B92B214A8C86C464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0D28
Signing time: Thu 01 May 2025 00:00:43 +0000
Manifest this update: Thu 01 May 2025 00:00:43 +0000
Manifest next update: Fri 02 May 2025 00:00:43 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: AYe3lx9rHXU2v1Dicdvrcp045ojwLfOmgzkUjlmjX3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:46:75:88:7c:3b:e2:b9:2b:21:4a:8c:86:c4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: May 1 00:00:43 2025 GMT
Not After : May 2 00:00:43 2025 GMT
Subject: CN=f7a7986fe6ea1618d0ae3b616c0d25fa2a9e97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:06:44:1b:19:c2:d5:19:ba:c4:91:87:86:
51:4b:a0:3d:99:2f:39:35:24:48:1f:3b:6c:a9:fc:
14:fe:a1:44:63:14:60:eb:ed:49:ba:3c:0a:d2:d6:
53:c4:cb:88:1e:5f:34:bd:fe:c1:f3:70:3f:9a:31:
a7:77:15:f3:ca:0f:93:c2:27:31:f2:5b:6a:4c:4e:
73:79:8e:bb:3a:82:b6:d3:f3:b9:f0:be:bb:e6:f1:
59:39:df:ca:16:a8:2e:79:67:66:12:54:c8:5f:98:
28:74:39:2e:6e:40:29:9a:29:d3:55:cd:97:4a:50:
9d:96:19:4d:95:47:14:77:36:9f:6d:04:f2:3f:00:
7b:18:81:dc:6e:19:50:06:d3:41:c5:4d:2f:89:35:
57:94:c9:f7:ac:2f:e0:e7:f8:99:47:5c:c0:d8:cd:
a7:a1:77:2f:c9:f2:71:3d:de:29:30:29:6e:f8:3a:
8d:c5:6b:73:e6:d9:92:aa:8b:f4:15:ff:cd:bd:ff:
89:de:33:6e:04:9f:f4:d9:5f:87:8c:10:3e:db:e0:
15:6d:da:44:fe:4b:c9:40:9d:54:2d:0c:5c:30:60:
e1:a2:63:87:73:70:bc:66:55:ce:0d:29:54:f2:e5:
de:8f:44:72:4f:51:33:d5:a1:11:7e:1e:ff:ac:7f:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:98:6F:E6:EA:16:18:D0:AE:3B:61:6C:0D:25:FA:2A:9E:97:FD
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:ae:80:4d:56:3f:e4:9b:57:71:35:e6:fd:0f:04:3d:33:
85:b0:14:b4:d8:35:7f:35:9b:cb:be:ad:ea:f2:7a:67:b3:49:
6d:f4:44:ed:25:83:cc:ee:4e:df:84:90:36:96:64:95:c8:89:
c3:bc:a0:e6:47:7c:4b:a8:c7:61:79:df:81:1b:02:a8:19:96:
78:f4:06:b5:1f:9f:f9:28:f3:11:cb:a6:ac:aa:ac:c8:66:99:
a7:5c:96:0a:81:9c:a5:1e:e6:72:df:a9:66:ee:4c:b1:8f:a4:
6d:fb:b6:b3:a1:d6:fb:58:d7:9f:05:8b:33:b0:aa:5c:d7:29:
5e:6c:c5:55:f4:27:34:f6:00:f0:9b:6f:df:21:fd:7c:46:86:
5d:a7:da:e0:87:49:e6:45:a1:1a:4e:ff:cb:02:b0:c5:43:21:
fa:5d:05:99:00:ea:15:20:a6:ae:cd:e8:05:37:41:b0:11:ea:
69:7c:37:45:4b:4b:54:29:d8:56:39:a5:90:5a:45:b4:28:a8:
75:dd:4d:48:10:98:40:05:29:53:7d:e3:74:16:02:d0:d4:08:
12:c7:44:ce:a1:1d:4a:54:9a:ba:5a:28:6e:73:0c:21:a5:91:
5e:ab:32:b8:08:c7:d2:a1:94:12:ac:b5:77:da:67:0e:dd:a6:
cb:4a:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:11:05 2025 by rpki-client