Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
File: PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft (raw, json)
Hash identifier: VE00e6c+ixMe6/lZsYqTg5SZm/PbH9pqdQzcMQyyKu0=
Subject key identifier: D3:29:EB:87:BD:85:2C:9D:35:FA:68:DF:A6:25:A7:71:03:C8:F8:F0
Authority key identifier: 3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
Certificate issuer: /CN=3d563e205ad217433709b200a0dcd30c70961c96
Certificate serial: 0196AFC4C34B95ECDCD44E9E9EA2459B65FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 12:00:29 +0000
Manifest this update: Thu 08 May 2025 12:00:29 +0000
Manifest next update: Fri 09 May 2025 12:00:29 +0000
Files and hashes: 1: K0VVkly9aNi0yGL2uwtJHWinFa0.roa (hash: gUjyIMB+jt8lh1mExnA7oGVCKt6v3R2m9uw5LrUvVCY=)
2: PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl (hash: IHeZIVLD5kp7cVnBYoh/vF304CY0A6oGa+e9XK6Vs3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:c3:4b:95:ec:dc:d4:4e:9e:9e:a2:45:9b:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d563e205ad217433709b200a0dcd30c70961c96
Validity
Not Before: May 8 12:00:29 2025 GMT
Not After : May 9 12:00:29 2025 GMT
Subject: CN=d329eb87bd852c9d35fa68dfa625a77103c8f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:34:3e:36:97:e3:69:0c:63:7d:f6:31:39:
93:72:17:27:39:01:7c:a5:63:00:84:10:93:16:fa:
09:53:03:83:64:60:91:10:73:be:81:66:2f:d8:7d:
d5:1f:77:e9:f0:f2:b5:d4:08:c0:db:99:81:a5:19:
33:5f:1e:54:8f:1b:a4:08:b5:ed:70:36:63:d7:9c:
fe:ad:a4:97:e7:6c:0b:50:3b:77:ef:e6:6f:54:d7:
11:0a:9d:5b:c2:57:89:d8:e4:70:51:7a:f1:80:50:
54:95:fb:3e:0c:91:08:26:8d:54:8b:c1:7e:f7:b0:
43:49:79:c2:0b:87:b6:85:77:aa:0e:6c:d7:04:8c:
b5:f2:7b:b3:e6:79:d6:de:5d:8b:60:9f:55:bb:7b:
ae:25:15:cd:24:d5:c5:75:2a:bf:40:01:b9:4c:93:
d5:9f:fb:32:a9:f2:bc:4c:51:d4:90:cf:bf:83:32:
5b:e7:77:39:b9:33:86:88:16:c3:33:11:ef:20:33:
b6:0b:6a:6b:0e:dd:05:d9:5c:63:6f:4f:3a:cf:8c:
34:9f:b4:cc:32:dc:d9:1d:10:d4:b5:8a:c1:5c:20:
bf:be:a8:28:0f:50:15:7a:52:09:dc:c5:ba:3b:99:
0f:39:f2:d5:c7:50:fa:cd:63:1c:71:5e:62:7e:23:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:EB:87:BD:85:2C:9D:35:FA:68:DF:A6:25:A7:71:03:C8:F8:F0
X509v3 Authority Key Identifier:
keyid:3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:be:13:a7:75:60:f8:ce:6e:c2:02:14:ec:d2:a5:ba:95:ff:
e6:c1:ed:a6:12:95:b1:c9:e6:0e:cb:48:35:a7:21:7e:45:3d:
ee:ea:ea:85:fd:d2:62:ee:46:af:a1:b3:95:39:f9:3f:29:53:
7b:2c:7a:4f:b0:21:b8:29:ca:6f:79:d4:77:25:87:6b:a0:66:
c3:1a:52:62:39:23:d6:99:3e:3e:e5:50:a5:d9:72:c1:23:d5:
c4:aa:0c:2d:71:7e:84:90:64:f1:7b:51:93:1a:cf:f4:b0:84:
47:d0:c1:bb:f3:b3:e6:97:19:cd:74:76:65:14:66:57:a1:e2:
a4:0d:d1:86:c4:6f:a8:bf:23:55:33:22:0f:77:f5:43:07:0f:
a5:99:29:63:19:86:70:af:51:a3:69:98:19:06:e4:0e:3b:22:
f8:f3:93:97:2a:83:f2:83:05:e9:1c:00:ca:08:cc:99:65:88:
f6:32:1a:85:6a:43:3a:c6:f3:9e:cc:7b:44:a2:36:8f:43:90:
b9:ce:f6:fa:01:6b:84:54:d0:65:d7:69:ee:ec:10:33:a2:58:
e9:86:f0:09:46:44:a9:a0:fb:71:31:aa:18:12:4d:44:25:0a:
3a:db:32:ce:8b:86:72:1d:1c:1a:d8:33:1a:fc:84:d1:9e:df:
c0:db:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:38:05 2025 by rpki-client