Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: rA08vaTEEC+lQ//DJtGUDmRVQF5BlxbqLAZS1OkCklM=
Subject key identifier: EE:96:23:A1:03:5A:D1:F6:3B:15:FB:5C:F6:27:8F:2C:94:1F:34:76
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 0196BDB785B293026B7897F061A17A87F2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0633
Signing time: Sun 11 May 2025 05:00:43 +0000
Manifest this update: Sun 11 May 2025 05:00:43 +0000
Manifest next update: Mon 12 May 2025 05:00:43 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: C5Mq9Yi8LLyWjrBe3hOid5j/YQtNXrC4EAF9ncLkAqg=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:85:b2:93:02:6b:78:97:f0:61:a1:7a:87:f2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: May 11 05:00:43 2025 GMT
Not After : May 12 05:00:43 2025 GMT
Subject: CN=ee9623a1035ad1f63b15fb5cf6278f2c941f3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:3f:f3:6c:51:b7:c8:96:0f:08:83:d4:9d:
06:f2:9d:db:9e:d7:ad:3a:4c:e3:08:f5:88:b7:ba:
e5:3f:8f:af:64:46:16:79:01:73:ae:09:de:e8:86:
60:59:93:27:6d:03:a9:74:e7:a3:a9:c1:3d:ec:4a:
68:a5:7d:05:5a:b6:43:80:f5:b2:5b:84:86:39:c6:
8a:ff:5b:4c:ea:41:4a:65:3e:f2:19:94:ab:f5:5f:
8a:01:e8:cb:fe:70:0f:ed:96:d3:31:82:94:a9:66:
96:19:b9:77:35:40:98:e9:95:c6:26:11:5a:87:b9:
9a:de:da:61:1e:94:d2:85:6f:2f:bc:ed:57:58:cc:
b8:84:fb:0f:b4:61:b8:5b:70:28:bb:09:36:81:05:
59:31:65:ce:ea:42:f5:86:0e:c2:05:26:f1:10:69:
59:e2:14:ce:d1:cc:cb:dd:1e:2f:e0:4e:8b:3f:6f:
9c:df:23:f9:98:55:34:d3:fb:ee:f6:46:4f:92:3c:
af:53:bc:0a:d7:c1:ce:35:73:17:47:b0:72:fa:38:
82:54:1f:ab:ee:22:ae:25:97:5a:c3:b8:3b:a1:b2:
a6:11:e1:28:6c:39:03:28:d3:08:67:f2:c3:72:95:
b9:e1:b2:08:03:77:a5:71:5c:d8:f5:47:f8:86:7f:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:23:A1:03:5A:D1:F6:3B:15:FB:5C:F6:27:8F:2C:94:1F:34:76
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d6:e3:3b:78:6e:12:51:e1:fd:d1:ad:25:e4:58:37:a8:de:
18:01:ef:09:7e:45:5c:5c:64:84:b2:92:16:58:6f:2c:55:dd:
62:83:90:61:f9:3b:ce:62:db:f1:85:35:af:42:31:2a:b0:71:
a4:c2:4a:12:e9:88:e2:bd:d9:c9:f2:99:6d:9f:d9:1f:bc:4e:
83:29:bf:ec:4f:32:76:4c:d5:9f:2d:f2:00:ce:d9:21:84:c5:
94:d9:8f:6a:0b:51:27:18:c4:48:d0:90:a9:19:e2:0c:26:b2:
86:91:60:e8:dd:a9:cc:eb:fa:af:17:04:9e:f8:08:3f:4b:a5:
59:d3:33:44:cd:9c:f3:de:5c:39:01:2c:cb:e1:11:5e:7d:6c:
3b:d8:63:35:9b:bc:ed:dc:77:e3:f6:00:7f:d4:54:87:73:2b:
b6:89:95:68:8b:71:1f:61:90:28:32:fc:d6:6d:47:96:22:b7:
99:8c:0b:9a:9e:ea:b0:f0:73:65:26:ba:d0:0f:a5:8e:0f:af:
d8:f7:66:51:35:43:0b:3f:74:ed:13:1b:66:cf:1a:29:db:77:
82:59:57:0c:cb:59:32:e8:40:d8:62:f6:35:8e:3b:78:9f:f9:
5f:39:17:0e:ca:5f:0b:20:96:24:9c:a0:81:8a:37:81:e1:66:
c6:e0:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:48:56 2025 by rpki-client