Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: 91EhGm2Ae8lR9zOVesfnnN7TTt6uYYM8LM9QNw0DILI=
Subject key identifier: E2:33:9B:7F:D4:31:A6:F0:7F:62:46:ED:1B:5C:F7:6F:90:90:40:E2
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0197B6A05817EB3F47D47FD4E20A5B7D95FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: 2Ab5GlKpeR3o/NIawcMaA7xFpmQKIPjAap/2iI2a+D8=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:58:17:eb:3f:47:d4:7f:d4:e2:0a:5b:7d:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=e2339b7fd431a6f07f6246ed1b5cf76f909040e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:51:9f:37:59:65:f4:a2:59:b0:8d:04:be:
d1:a0:ce:a5:05:e6:06:a6:03:6e:2a:65:7a:c4:5d:
c3:bc:32:bd:62:3a:c3:d1:b4:6f:46:c7:ca:11:0a:
f1:59:56:1a:f1:49:0b:9c:cf:e3:19:9e:ae:51:9e:
71:a6:8c:05:5c:00:49:1e:d0:0b:b5:6a:4f:da:ab:
31:4c:6a:8a:d4:3a:18:66:b2:12:b3:56:8c:91:03:
bb:29:da:85:21:f8:cf:ff:37:bf:28:99:34:c1:0c:
ed:de:c9:39:6c:56:2a:f5:cb:78:f8:d8:78:81:0e:
9d:6e:ba:aa:a9:99:e8:0d:78:f9:da:29:1f:99:30:
44:67:c9:72:38:27:f6:5f:ab:d3:41:50:86:fa:10:
20:c3:6a:48:52:5f:93:dc:bc:64:4f:25:01:09:08:
17:f5:cb:3a:4c:8e:f1:15:eb:1a:13:e0:b7:da:73:
9f:93:ac:c0:ba:1b:f5:32:ff:8f:e1:31:34:b5:42:
c2:16:ac:61:4c:fc:c8:98:02:63:36:61:04:5a:b0:
90:c3:e0:a4:17:22:b5:17:01:f8:cf:67:62:51:f6:
06:a0:f5:f2:16:e1:7f:a0:63:79:4e:63:db:33:7f:
10:de:d5:7c:ee:cc:9c:bd:12:4b:ff:fc:ab:86:d3:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:9B:7F:D4:31:A6:F0:7F:62:46:ED:1B:5C:F7:6F:90:90:40:E2
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b8:b2:aa:f7:f1:24:0a:33:6f:6f:1e:34:29:2a:64:5d:24:
bf:b0:97:c7:a6:f6:b2:1e:63:05:b9:88:59:4e:51:86:01:ed:
67:be:bf:32:bb:a8:6c:02:b3:88:c4:19:69:4c:ea:ff:c9:19:
8c:09:d3:78:05:8f:5f:a5:7b:7e:5a:31:bb:a4:11:a9:82:ea:
9c:81:63:56:f4:0a:84:23:de:9c:26:d4:9d:ea:36:59:96:dc:
e2:5d:dd:cb:2b:25:f5:3d:5c:35:2c:aa:ee:9c:1c:2b:bc:78:
2a:68:d6:e4:f8:0c:3a:1b:cf:1b:60:37:77:3e:28:6f:61:95:
26:ad:39:6f:9d:22:ce:a6:ed:4b:36:bf:f7:cb:82:c8:29:cb:
88:8b:ee:2f:94:68:f3:c9:95:21:55:30:4e:f7:b8:86:a1:90:
57:3d:ad:fe:f9:91:08:b1:a7:17:ef:c2:93:34:11:de:1d:8b:
1c:f3:4f:fd:e9:18:b7:4b:fb:41:9e:24:01:a2:0e:c3:7e:47:
a9:13:4a:33:91:4e:eb:e9:90:e0:e4:6d:45:7a:ea:57:81:64:
3a:8a:a2:f6:73:b1:27:b3:98:f9:ec:c2:f3:76:94:ef:f5:de:
76:2e:bf:89:07:c4:af:f8:50:98:10:1e:a5:d0:d7:81:b0:68:
ea:75:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:54 2025 by rpki-client