Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: CX4mR3zgA4brxCcNShtKOiy2LFvqciJz4jRmtSCgz08=
Subject key identifier: 39:E1:E8:A5:63:04:07:2B:15:BE:15:51:5F:D9:98:54:B4:C1:FA:BC
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019673421A6558F9954284B9D77DAA638058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 5C
Signing time: Sat 26 Apr 2025 18:00:34 +0000
Manifest this update: Sat 26 Apr 2025 18:00:34 +0000
Manifest next update: Sun 27 Apr 2025 18:00:34 +0000
Files and hashes: 1: 4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa (hash: 2vq5lY7p3QV26YVrvW4JIsT+fBab01wVcEMyf7CWXAA=)
2: gNGKUpZCXd8q1DoJLImZ6jAcs7E.roa (hash: sSxxOvPgg252LzRC1H4oHyqsDh65DNBimoIxyS9qxFo=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: ROHRAiFk5XxmY7cXYhbD6jwb5Ry8wfEEf3MRNBPi3Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:1a:65:58:f9:95:42:84:b9:d7:7d:aa:63:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Apr 26 18:00:34 2025 GMT
Not After : Apr 27 18:00:34 2025 GMT
Subject: CN=39e1e8a56304072b15be15515fd99854b4c1fabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:0a:a1:85:dd:3c:35:62:e8:e5:b7:96:6b:
c5:0d:76:78:c7:77:c8:a2:42:b4:da:9d:b7:30:8e:
ec:5b:08:3a:53:9f:6a:24:ee:80:da:d4:59:42:8b:
5c:ea:42:37:04:28:83:d8:b0:17:3f:ab:61:46:3c:
f9:fb:90:fc:1e:ad:a9:5b:97:cd:cf:8c:26:e6:be:
a2:90:6e:36:6c:25:c6:89:40:6a:fc:9b:29:f7:cd:
fd:ce:ab:07:a2:f0:83:08:15:56:6c:65:e1:aa:6c:
97:71:82:7e:80:49:bb:82:8b:69:ad:83:2c:b6:08:
7e:15:7b:9d:70:5b:63:06:62:90:7a:84:6d:34:1e:
2e:cf:da:85:2e:d7:14:24:7c:dc:fc:0a:3b:a9:ea:
e6:f2:e9:88:31:55:bb:1e:b4:66:09:bf:42:15:bd:
bd:01:69:22:32:5c:1e:cc:2b:36:38:28:1d:ab:40:
d6:41:f5:55:33:f3:0c:63:7c:8c:b6:8f:13:86:0b:
d9:d4:22:26:2c:37:ed:02:4a:06:8e:0a:36:5b:3a:
37:22:d6:69:a9:68:5c:1e:c5:f3:69:06:54:c6:13:
46:a3:10:cd:74:2e:aa:5a:be:97:21:b7:4c:84:f6:
d4:38:d6:9c:a0:f3:8d:2d:86:6a:ed:60:5b:22:41:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:E8:A5:63:04:07:2B:15:BE:15:51:5F:D9:98:54:B4:C1:FA:BC
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9e:e7:70:f1:31:da:59:09:25:9c:52:b5:19:97:21:2b:95:
38:9d:7e:96:7e:bf:e6:23:88:b7:9a:46:a4:76:18:ee:99:1f:
17:03:d0:be:f6:40:e2:aa:dc:23:f2:ef:99:6d:1d:b2:92:ad:
63:1f:64:d3:76:ef:29:69:7b:eb:63:55:45:ec:df:b7:b6:92:
15:05:f8:50:a4:10:1d:c3:2a:6c:69:1a:46:5e:d5:82:b1:72:
55:04:aa:2d:a4:b7:bc:bc:8e:1a:51:d0:5d:c2:dd:15:6a:f5:
72:7f:b3:bf:b5:4b:d4:31:3b:49:af:4b:34:47:32:9a:2a:78:
24:d5:19:83:80:c2:a0:2f:9b:de:ec:5a:e2:04:ac:37:e0:cd:
8c:2c:72:94:bd:dd:0f:f9:f5:27:36:8f:02:bf:f2:b3:77:1e:
d6:80:9f:85:cc:75:16:98:66:2c:cd:64:47:90:0f:cc:61:38:
8b:0a:65:46:2b:eb:99:d3:00:42:5f:12:c8:af:8b:25:87:5a:
19:5a:fd:3f:9f:64:76:68:7d:04:33:10:c2:c4:59:b4:f1:17:
42:17:e8:95:57:79:0b:d8:0c:4d:34:44:fb:90:2c:19:99:ec:
ae:b4:55:9f:fc:8b:c2:24:54:32:fe:1f:46:6d:8f:55:01:6d:
1e:dd:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:12:56 2025 by rpki-client