Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: uQvdz6/EJjsCFZjizmXfc7hdHhq6YH2Li1joFudNhkI=
Subject key identifier: F2:FE:D6:10:5F:E8:47:31:C2:8A:CA:F8:C7:86:2B:2A:63:12:02:F2
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 01965538459640057A367AC0198E46DFDE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 22:01:13 +0000
Manifest this update: Sun 20 Apr 2025 22:01:13 +0000
Manifest next update: Mon 21 Apr 2025 22:01:13 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: mGOpH1NbvQ/tVypiUKY1Xf9IFv7m9u8DCaUfNnUoEIs=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:45:96:40:05:7a:36:7a:c0:19:8e:46:df:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Apr 20 22:01:13 2025 GMT
Not After : Apr 21 22:01:13 2025 GMT
Subject: CN=f2fed6105fe84731c28acaf8c7862b2a631202f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:3c:20:2f:2e:59:ef:9f:08:79:52:64:f8:
c0:35:17:eb:2c:56:9a:ac:96:73:66:e3:29:75:4b:
29:63:60:43:cc:f6:99:d6:75:b6:e1:3d:f5:d2:6a:
65:98:f6:be:8b:a0:2a:4c:ef:e9:68:df:56:91:67:
16:e4:82:cf:88:20:d9:4d:59:9f:00:b6:d8:6d:7b:
22:00:78:fa:17:09:be:80:f0:f9:a8:c8:ec:b3:aa:
67:b0:ff:e1:e5:09:0b:38:76:11:2d:cb:48:de:12:
79:c4:9f:98:7a:78:01:b7:0a:f3:72:11:db:e0:65:
7f:1a:c7:72:d8:19:e6:85:46:3a:e4:09:9a:3f:ae:
8d:27:8c:67:76:0c:f4:1c:8f:f3:55:39:1d:0f:35:
48:81:c9:7a:52:01:e2:03:cf:a9:91:a8:1f:74:94:
ee:c7:14:96:20:a8:39:ef:97:9f:02:77:20:31:0f:
66:7b:88:20:5e:d0:02:8e:1b:39:f5:fb:03:38:50:
98:17:4f:83:21:b5:20:f6:f4:0f:75:0a:c1:60:e1:
25:88:b2:c0:82:ad:17:09:c9:f0:fc:3d:e4:ae:e5:
5b:d3:f5:56:c2:47:72:f6:4f:38:66:73:48:0a:eb:
27:fc:ca:20:9f:d3:15:bc:c3:df:71:d6:35:f0:25:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:D6:10:5F:E8:47:31:C2:8A:CA:F8:C7:86:2B:2A:63:12:02:F2
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:7a:8f:29:5f:0f:c1:56:1f:a0:b3:8a:cc:63:bf:8c:c1:
a0:70:10:c2:ad:ab:5c:e7:9c:ce:12:9c:d6:af:f8:7e:df:01:
50:ea:66:f1:f4:82:9a:0f:b5:3f:42:a2:19:3c:e0:41:86:a3:
77:e8:a5:9b:7f:8a:83:a5:f4:41:10:3d:a8:ac:24:d8:0f:f9:
93:bb:66:c5:c3:fc:cc:59:44:88:23:b4:f4:a0:b6:e7:18:0f:
00:40:ee:56:bb:2b:34:03:32:cc:9d:4f:12:5f:61:44:46:80:
f2:31:16:44:6e:00:46:28:92:b4:17:d4:68:ea:6b:a0:01:c7:
24:df:66:90:02:92:bc:37:e4:38:32:04:27:9d:df:6a:ab:88:
72:b0:ac:b9:5a:1e:e2:3b:6d:ab:ef:97:b7:47:77:9d:da:2e:
04:25:73:3c:e0:29:a6:6f:bf:27:7c:42:54:19:f3:dd:b9:b0:
c9:fc:e9:81:09:f2:5b:8c:6f:26:e0:5b:b7:fa:57:ab:f7:c6:
80:7d:c3:d6:1c:ec:3e:72:72:2f:44:08:af:f2:ef:ab:f9:b1:
b9:40:1e:05:3f:10:57:41:c6:b1:8c:58:d4:80:b4:a1:55:19:
12:ba:52:f0:83:33:f6:b6:fe:b9:3c:f1:b6:15:d7:8b:a3:16:
fa:72:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:09 2025 by rpki-client