Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: LMHd3T1OYixHP1EF93YeEM03bq2gF2eBMq5BmwP9ZFA=
Subject key identifier: ED:F0:6D:9A:C4:AA:FB:C3:E1:13:63:16:F4:1F:7A:DF:E7:82:96:D5
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 0196C04B2BA629489F48D339EE2719DD3567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 17:01:13 +0000
Manifest this update: Sun 11 May 2025 17:01:13 +0000
Manifest next update: Mon 12 May 2025 17:01:13 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: fpyWTjtWT9JPWOGbJl1KvRfxFih3neprzSxKW2Wac24=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:2b:a6:29:48:9f:48:d3:39:ee:27:19:dd:35:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: May 11 17:01:13 2025 GMT
Not After : May 12 17:01:13 2025 GMT
Subject: CN=edf06d9ac4aafbc3e1136316f41f7adfe78296d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:80:0c:f9:71:2e:a1:63:9a:51:ba:6e:47:
5b:da:07:f9:d5:d1:71:85:52:82:01:e9:30:50:69:
8f:24:0f:7d:91:18:45:7a:e2:e6:75:6f:8c:2a:4a:
5f:0e:69:d4:30:8c:bc:01:0b:1c:7e:3d:e5:a0:a5:
82:3b:ba:e7:33:61:72:9f:05:f6:9f:a2:46:ac:d8:
fa:d4:2e:5b:1a:40:f2:e6:ca:3d:19:0e:16:9e:37:
a3:9e:52:6a:34:fd:91:94:f4:10:f7:41:76:3d:36:
a0:7d:d8:a4:41:9d:22:28:0b:cc:50:be:31:b3:39:
2f:85:15:c6:c8:6a:e7:99:bd:22:45:e3:bd:86:45:
79:94:ae:38:85:6f:8e:c6:9d:da:6a:23:b5:99:95:
4f:15:85:b0:2a:36:31:6b:ac:e0:cf:c0:31:a3:fc:
93:c6:0a:bf:61:65:4d:9a:84:d9:e1:b5:53:ef:65:
f1:0e:c9:80:83:8b:bb:49:81:ae:c0:db:9b:bd:c2:
3e:fb:f5:18:40:48:10:b6:cd:fb:f4:06:46:e4:34:
e4:81:ba:cd:61:39:34:5e:91:1a:ed:4b:bd:39:02:
c8:6a:66:de:2f:71:af:41:04:48:79:e8:cd:63:e7:
04:6f:c5:fe:78:70:ea:f6:b4:b5:97:0a:8d:59:fb:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:6D:9A:C4:AA:FB:C3:E1:13:63:16:F4:1F:7A:DF:E7:82:96:D5
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:85:e5:20:ad:71:61:51:20:e8:0b:0e:12:74:62:26:d9:
62:15:2a:b7:8a:69:ef:44:cd:09:c1:af:82:2c:a4:b0:6f:6a:
72:88:06:90:26:e4:17:22:16:95:dd:4f:7d:3f:5e:92:13:c1:
d2:c0:f4:73:46:b7:c7:0b:f0:ca:57:f3:86:bf:16:0b:9b:fc:
74:e0:1c:60:f5:e9:a7:96:03:d0:08:e8:be:fc:e2:d7:8e:51:
a6:8e:ad:89:48:bc:0e:b8:24:18:7b:11:aa:af:9e:07:08:9c:
3a:06:ac:a5:f6:1c:f4:f8:0e:dd:f8:75:85:11:83:06:f9:a3:
62:af:5c:97:31:23:be:65:5a:dc:ae:38:ac:8b:7d:67:34:f8:
22:24:db:c0:2f:a3:05:27:9c:6a:cc:8e:ad:c4:ea:40:1c:cb:
72:c6:35:ca:4a:d6:94:d0:b0:c7:cf:32:a6:30:dc:2e:f0:e4:
28:cd:f0:15:d7:d3:53:fe:ac:a9:8e:44:53:f0:3c:33:91:98:
c7:63:06:6d:1a:4c:da:39:32:ec:5b:da:b0:32:35:a2:a8:e3:
38:e5:04:c4:17:15:86:ec:2d:1b:11:96:d1:f9:2b:7d:73:63:
93:da:68:15:d4:19:53:ab:bc:3a:87:0c:c9:2c:fc:67:40:f6:
7e:3f:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:53:29 2025 by rpki-client