Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: jTjt9LPzjoWpcycWP+S0F/98BwgR4NVHygh2Ir4kpVU=
Subject key identifier: A0:4A:7A:21:A2:C4:9F:24:75:6C:CD:49:85:04:7A:98:8B:B0:A1:20
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01960C7AB34643EFBB69DF75DF73104775BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1203
Signing time: Sun 06 Apr 2025 19:01:29 +0000
Manifest this update: Sun 06 Apr 2025 19:01:29 +0000
Manifest next update: Mon 07 Apr 2025 19:01:29 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: WibCBX+faiq+dj0W8ONyUEo1CMAnXifRO3Wpy1XF5xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:7a:b3:46:43:ef:bb:69:df:75:df:73:10:47:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Apr 6 19:01:29 2025 GMT
Not After : Apr 7 19:01:29 2025 GMT
Subject: CN=a04a7a21a2c49f24756ccd4985047a988bb0a120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:e4:51:ba:26:73:c2:fe:7a:b7:87:65:33:
06:ec:1d:37:71:75:cb:91:0a:ed:6e:31:0a:49:3d:
d2:7f:67:2f:cf:4e:2c:03:21:c1:db:b5:a5:eb:4f:
45:b7:ce:b7:df:69:95:4a:ee:45:0a:e7:6f:9f:0d:
bc:11:45:5b:ed:51:f8:40:12:5b:53:08:b5:19:da:
ef:ce:26:ab:a3:68:db:82:47:52:44:91:38:41:23:
8b:71:3c:fa:3a:26:f2:6e:f3:2c:b6:8f:b8:f3:8f:
0d:34:e1:66:6a:20:e1:32:76:85:72:27:8c:9a:9f:
c9:bc:f1:f7:1f:e4:55:da:ba:12:1a:8b:94:bf:83:
5d:99:ac:e6:8c:96:d2:46:b6:c3:a1:6c:6b:ba:fe:
fe:20:35:66:9c:47:c5:d2:80:03:9c:11:cd:26:c3:
aa:25:2a:90:35:ab:2a:81:f4:4c:04:f6:5f:5a:89:
63:c0:05:d9:e3:8b:b9:ed:f5:2a:ce:af:0b:61:03:
00:9f:ae:87:10:20:4a:13:a8:90:f1:97:21:8e:ba:
ce:ed:6e:67:9f:33:d5:c8:e5:30:c0:95:b7:1c:29:
d2:94:f9:df:c9:47:62:09:a0:da:df:16:5e:0e:ed:
a8:a4:ca:b0:c2:d5:8a:9b:d2:d5:8b:69:7c:6f:a8:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:7A:21:A2:C4:9F:24:75:6C:CD:49:85:04:7A:98:8B:B0:A1:20
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:57:19:ad:f0:db:16:a4:c8:bd:f8:4e:ab:73:62:ad:2b:
71:13:84:be:99:dd:88:ff:a1:e0:67:7a:e8:ae:ad:79:ee:72:
d3:98:1f:53:80:0e:eb:a4:2e:44:70:fb:a3:59:68:fb:25:df:
15:dc:c9:9a:6f:10:bc:17:cd:f2:c7:8e:49:d8:52:1e:32:ed:
06:2f:93:33:97:e1:38:81:47:f1:05:36:b5:0a:fd:ac:3e:32:
42:c8:7c:c8:e3:25:96:bd:11:42:60:18:f6:6d:b1:b7:c6:a4:
07:29:f0:98:ef:bb:f4:32:ff:43:d3:97:fc:39:21:a2:c0:2b:
4a:05:28:03:27:5b:a1:d1:53:f3:73:90:10:c1:20:4a:e2:f3:
27:88:e6:61:50:e9:8e:7d:c5:63:10:9d:19:06:22:59:eb:f2:
48:81:b0:d8:6f:c9:3b:44:18:f2:78:0d:96:ce:3e:85:d4:d4:
db:40:d2:89:18:80:ec:95:ca:56:1e:f9:75:7a:b4:ab:5f:dc:
0f:74:f4:72:e9:b8:fa:cd:82:39:b2:21:85:f9:9a:1f:af:b4:
97:12:42:34:32:f2:f8:3c:43:e3:27:06:b9:63:06:5a:0c:e1:
44:dc:27:4d:b9:11:e1:93:7d:86:13:14:c7:ea:d9:be:2b:f7:
bd:48:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:11 2025 by rpki-client