Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: SZcgyQohPuiAAzHDCA0wjAWplKoGIbsxTvpxgDp4IXk=
Subject key identifier: 10:A2:24:4D:69:8E:48:78:CB:B6:47:7A:3B:7F:2B:78:AA:34:FB:7A
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0196C1CAFA284BE6623163288DEAB634014C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 85
Signing time: Mon 12 May 2025 00:00:27 +0000
Manifest this update: Mon 12 May 2025 00:00:27 +0000
Manifest next update: Tue 13 May 2025 00:00:27 +0000
Files and hashes: 1: 4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa (hash: 2vq5lY7p3QV26YVrvW4JIsT+fBab01wVcEMyf7CWXAA=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: MbU/vFatysFkQrycG9VuviIxHxEjEKeOON7VM0Dau1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:fa:28:4b:e6:62:31:63:28:8d:ea:b6:34:01:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: May 12 00:00:27 2025 GMT
Not After : May 13 00:00:27 2025 GMT
Subject: CN=10a2244d698e4878cbb6477a3b7f2b78aa34fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:61:56:3f:c1:d4:7f:8f:9c:16:36:0e:88:
71:a6:07:49:69:6e:19:96:50:af:93:16:44:30:8b:
43:e0:7c:68:45:d0:5a:7b:d8:b6:0d:84:d5:41:74:
7f:d2:02:92:fb:a4:24:0a:ff:66:e9:e4:45:7b:07:
e0:f6:90:e1:70:5a:fe:40:6f:a9:28:9e:04:dd:14:
dc:85:ad:90:aa:73:e8:d2:c0:8d:ad:ec:7e:09:42:
74:9e:98:3d:61:a2:c7:01:b9:ef:98:a2:84:5c:45:
c2:24:41:9e:56:96:e4:16:95:b3:d1:72:8b:35:d9:
2d:8e:eb:38:16:a7:ac:d2:1f:5d:3c:35:b6:81:d5:
bf:19:38:1c:ab:48:09:9e:43:c2:34:99:12:2e:2a:
83:4d:51:8b:56:1e:b0:0b:3d:6e:fd:1e:1a:0c:a7:
67:4f:1a:85:95:d5:b1:42:87:82:bc:ff:e2:fd:bd:
62:91:5c:ad:1e:d3:76:54:ac:7a:a1:d4:db:7c:c8:
b4:46:c3:97:01:4a:e7:b4:4a:bb:a3:1a:fd:95:af:
df:28:1b:06:38:09:4b:aa:cf:7a:27:d3:32:7f:41:
86:6d:68:13:ae:42:7c:a7:48:d5:a4:43:5d:97:4f:
03:ea:7b:9f:77:63:d7:ff:c4:9b:ee:a7:ca:c7:42:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:24:4D:69:8E:48:78:CB:B6:47:7A:3B:7F:2B:78:AA:34:FB:7A
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:f1:f9:4b:a7:ec:10:af:63:2f:9c:58:e6:df:ec:88:80:
42:bc:27:56:cf:77:83:a0:0a:2c:6c:94:97:68:64:e7:88:f6:
5b:56:5e:83:97:23:13:4f:bc:52:d0:08:29:50:e8:8c:f4:bb:
15:68:1a:7f:f3:22:35:66:ea:5a:2c:fd:00:93:78:cf:2c:fc:
62:9a:a5:79:18:80:70:8c:8d:74:6a:e7:e1:bb:67:b3:8d:ea:
9e:83:1a:9f:f5:20:9e:f3:7c:29:05:e1:77:57:c7:39:76:10:
4b:c7:3c:ce:0c:32:3c:36:da:02:1f:6a:6d:2c:73:98:df:ca:
6d:9a:fd:c3:dc:32:d4:0b:f4:64:de:bc:c4:66:9a:b7:3e:31:
7e:64:39:a5:0a:50:7a:37:e6:4a:3d:9e:23:16:2e:25:ff:18:
2b:54:4e:df:bf:8f:05:06:c9:c2:ca:d5:97:cf:dc:7e:6c:81:
6d:9c:8b:11:de:78:6c:ba:68:92:26:6f:1e:fe:cb:0e:48:bb:
34:c5:e6:d0:12:50:2a:d3:fb:a2:bc:5a:bf:9c:d5:25:a1:36:
19:9c:33:08:45:e4:2b:cd:7f:85:0a:d8:04:11:91:a9:de:f8:
85:23:40:e3:45:6b:4e:9c:50:4d:c2:cf:0b:ac:eb:d3:09:de:
d9:34:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:17:45 2025 by rpki-client