Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: VmfiUncMRyfjFKF61rZXMQCncDb7/f6peVakR2YbJA0=
Subject key identifier: 90:17:69:E1:29:D2:7C:B1:88:D0:2A:9E:10:35:A6:FE:5B:25:04:45
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 0196545C1C72B9A4E685DC6467E2586E76B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 05C3
Signing time: Sun 20 Apr 2025 18:00:44 +0000
Manifest this update: Sun 20 Apr 2025 18:00:44 +0000
Manifest next update: Mon 21 Apr 2025 18:00:44 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: 8X6day/WMpt5FK1uHIZOHycZhYGXmOWybVGiMEvx3vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:1c:72:b9:a4:e6:85:dc:64:67:e2:58:6e:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Apr 20 18:00:44 2025 GMT
Not After : Apr 21 18:00:44 2025 GMT
Subject: CN=901769e129d27cb188d02a9e1035a6fe5b250445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:7b:cc:2b:ee:fd:f4:47:35:a7:f1:33:e2:
bd:82:68:42:db:92:cc:5e:31:fd:f9:f1:d6:be:fc:
bc:4d:d2:dc:9b:11:2c:79:3f:a4:4c:a2:14:75:0b:
6f:a6:4c:3c:61:59:a2:3c:25:36:7b:af:e8:7c:b5:
8d:ef:3a:77:b6:d0:65:c3:02:14:a4:dc:60:bc:a2:
37:c4:aa:c4:19:14:81:36:7c:18:b3:dd:0c:f5:77:
79:7a:10:8f:47:8f:53:a5:da:4b:fb:f4:0a:ba:c2:
ce:b9:01:6e:9d:85:c0:5f:99:a3:62:34:b8:17:9a:
02:90:8b:99:28:26:fd:c0:58:10:53:55:47:5e:e7:
34:40:83:12:d2:6e:91:ac:8a:75:53:81:dc:37:d6:
93:64:01:0d:ae:56:15:be:d2:5d:7d:9f:5a:23:19:
f1:57:69:8e:32:46:69:20:57:58:9e:59:07:5c:98:
22:99:84:63:64:43:19:41:74:ea:fe:e3:1c:49:68:
5f:7b:fe:4b:8b:fd:2f:bd:52:72:23:c0:e3:2c:70:
97:41:c9:da:d6:8b:4a:64:de:ca:e0:6b:1f:51:73:
3c:55:2a:9e:52:bf:a5:71:a9:99:0c:e4:c0:0d:fe:
82:09:b1:ae:88:fd:57:d9:bb:30:e9:1d:03:e0:61:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:69:E1:29:D2:7C:B1:88:D0:2A:9E:10:35:A6:FE:5B:25:04:45
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:78:a2:38:0f:ec:17:87:7e:5c:b0:c3:bd:c6:52:2b:52:8f:
50:a1:4b:be:d2:6e:e0:bf:06:d1:0c:13:b9:12:9e:27:11:27:
af:d1:36:b7:30:9f:96:e9:d4:50:c1:a6:94:06:1f:d4:09:d1:
8b:de:19:d7:19:c7:6c:e5:b4:2d:c6:b2:26:27:4b:eb:37:eb:
36:f4:1d:2d:3d:a9:6e:b1:c6:32:9a:a1:63:32:cb:41:81:28:
4e:54:13:0c:1b:11:4b:5c:1f:f0:ac:dd:54:a7:78:04:4f:e6:
0c:78:ca:1f:06:93:31:dd:1b:c6:fb:01:ea:9e:ce:e0:c7:8e:
bb:ba:fa:66:b4:10:cf:2e:5b:db:6f:c4:a8:4a:d6:e6:bd:b9:
56:56:f2:ea:33:8b:50:79:e9:0b:82:05:d3:8d:92:a7:c2:da:
ee:8f:1f:f0:f6:42:ba:64:0b:4a:a1:e0:e1:ec:1a:76:4a:f5:
94:bc:f1:59:85:98:05:1d:a9:b5:f8:53:5c:9e:5a:39:f7:69:
89:41:54:19:87:e7:a7:ce:33:6f:bb:5e:33:dd:28:f7:66:6a:
2f:47:d6:84:1e:81:ac:24:05:04:40:a6:e3:d4:43:c5:34:cc:
71:08:d9:f2:a9:b5:aa:0a:3a:e3:7d:9f:ad:b6:3c:2c:b1:74:
c1:e0:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:43 2025 by rpki-client