Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: UxDyn9TNOcZ2RcKOBtoti9JnmaILPW+4vPcZHKCfNHE=
Subject key identifier: 24:0C:C2:E4:B5:ED:BF:CE:3D:E8:02:96:39:30:86:EC:24:38:7F:09
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0196A842ECA5CF469921A5AF326708783D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 01:01:20 +0000
Manifest this update: Wed 07 May 2025 01:01:20 +0000
Manifest next update: Thu 08 May 2025 01:01:20 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: wdtAwFo5D0stHNABcLWjlLr0JjGllAqLl0Xwege11iI=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:ec:a5:cf:46:99:21:a5:af:32:67:08:78:3d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: May 7 01:01:20 2025 GMT
Not After : May 8 01:01:20 2025 GMT
Subject: CN=240cc2e4b5edbfce3de80296393086ec24387f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:f5:a7:90:7f:a0:ca:fa:48:5e:6b:52:e1:
f2:c6:4c:a2:c3:0a:50:cc:34:4b:4f:2c:55:2b:98:
e8:0a:4b:d5:7d:4b:9f:b7:b2:c9:f0:1f:6f:d7:27:
83:1d:b0:39:d4:34:4b:21:35:89:90:8d:ce:09:5f:
69:21:02:e3:9d:f0:39:11:e7:e2:99:7c:be:ee:5b:
7e:04:67:f7:3f:0b:ec:b6:bd:5a:66:c7:6b:c8:3d:
0f:aa:59:b3:d4:58:fb:5a:00:51:df:55:9b:23:bd:
69:fe:61:12:ce:75:81:14:7a:f5:8b:d4:1d:3c:91:
c7:47:06:0b:9f:dd:a5:d6:cb:93:7d:98:16:b2:fb:
f9:32:64:76:52:10:90:cb:0c:11:5e:11:93:5e:28:
a1:f0:00:ed:e9:02:4f:e6:f6:7b:d5:4e:e1:5d:2e:
8a:d2:0a:50:1b:24:83:2d:ce:31:5e:61:d8:b0:68:
bc:70:4a:1a:71:76:b9:55:97:a5:6c:84:d6:b5:69:
ec:06:7c:1c:90:a4:57:3f:80:37:13:b4:aa:2c:08:
5e:4e:b6:18:e3:00:28:dd:3d:f4:e8:3f:a6:65:ed:
c6:04:8a:d6:d8:06:27:f3:7e:26:1c:b6:1d:81:ac:
f4:a1:88:09:d6:60:2c:80:bc:89:49:37:39:c6:a8:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:C2:E4:B5:ED:BF:CE:3D:E8:02:96:39:30:86:EC:24:38:7F:09
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:76:67:a1:83:68:89:a4:6b:cf:f2:d2:c4:2d:4e:0d:36:
3f:8a:2d:c7:69:07:8c:b3:4f:6b:6f:b0:db:d0:b9:6e:47:05:
a3:d4:12:5c:d6:a5:05:4a:40:1e:7b:31:c7:cf:4e:f3:19:e7:
f6:17:27:64:bf:aa:3e:5c:52:bb:71:36:c3:1f:fd:a3:a5:d5:
16:14:c0:ef:78:6d:cf:86:3a:65:50:3b:97:29:ef:60:9c:d8:
36:08:fb:ca:f2:0a:ec:6f:33:48:b0:b5:97:1a:46:fc:4b:f6:
74:a0:c5:56:35:98:57:6e:99:59:16:31:b0:f3:03:6c:8a:55:
5f:99:19:94:bd:a2:e9:15:f4:f3:a5:c5:c5:ea:15:59:c1:af:
cc:69:a6:17:d8:12:00:14:48:1c:8f:25:3c:97:83:56:8d:6f:
d9:b1:bc:00:ca:0e:70:06:f1:8a:c1:75:f7:a8:67:da:7e:e9:
72:31:cf:fb:54:fb:43:c1:9e:5f:e1:84:cc:09:38:a5:5d:d5:
dd:b8:35:75:69:32:00:21:89:df:08:77:ab:a2:a2:7a:32:97:
59:80:44:49:52:fd:80:f2:7d:8d:42:1c:06:ea:8e:f8:13:90:
f4:5f:96:62:11:b4:71:4c:18:91:11:53:7d:ce:87:e1:64:36:
26:9c:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:18:06 2025 by rpki-client