Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File: pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier: tnqhABIJ46MQdzATTdaH0TPICUKdpsXmj1UH0nAeX1Y=
Subject key identifier: B3:11:FA:FB:AB:5C:D6:1D:A2:50:46:9E:6D:6E:2B:3C:42:66:26:64
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 019590AB56C848DFEC8577016941B115954D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number: 02B7
Signing time: Thu 13 Mar 2025 18:01:42 +0000
Manifest this update: Thu 13 Mar 2025 18:01:42 +0000
Manifest next update: Fri 14 Mar 2025 18:01:42 +0000
Files and hashes: 1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: jQO9/PHmtVAqdS3wFaYP95aOyI0aSrb+0rJ2y+93LE8=)
2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:56:c8:48:df:ec:85:77:01:69:41:b1:15:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Mar 13 18:01:42 2025 GMT
Not After : Mar 14 18:01:42 2025 GMT
Subject: CN=b311fafbab5cd61da250469e6d6e2b3c42662664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:ee:f6:9f:14:ca:21:2d:90:ad:d7:2c:96:
ab:5b:ee:d9:ca:fb:d9:b8:1c:23:af:69:8e:61:30:
65:54:cd:a4:7d:5b:85:81:d1:76:88:58:53:fc:f8:
25:80:ee:d0:9d:95:21:8f:22:71:76:ee:f3:29:2b:
b2:3d:3e:8e:3a:64:92:4b:ab:8f:79:41:c8:60:95:
52:4d:e9:2b:74:77:81:d1:8d:51:1f:1a:ba:6d:cf:
65:13:2e:65:3a:13:40:84:4e:4e:aa:b1:de:0f:e3:
ed:8d:09:1e:33:55:68:c4:67:3e:43:d0:1f:0b:05:
23:66:81:47:06:68:63:86:a5:db:d8:52:79:26:8a:
9c:5b:2b:a3:7c:a9:36:c7:42:5b:1b:18:5d:05:6f:
bf:40:89:27:46:7a:c4:c0:6f:49:9f:c7:bc:9f:98:
3e:3b:19:fc:02:62:b9:f0:88:e1:a8:d1:f1:04:5e:
48:eb:c6:36:04:60:b2:1d:d4:6e:95:09:f6:52:3b:
29:d3:ee:65:72:93:33:42:92:af:d0:54:16:30:27:
b3:e7:8a:27:7a:31:72:9f:80:9f:c5:b0:9b:84:fe:
60:9b:7c:ef:87:d4:c1:24:ff:ae:06:fe:18:dd:86:
f4:86:30:65:b1:e2:82:3a:c8:46:44:f1:1b:eb:c0:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:FA:FB:AB:5C:D6:1D:A2:50:46:9E:6D:6E:2B:3C:42:66:26:64
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:19:d2:a0:e3:82:77:7e:dc:62:a6:19:b7:ac:a5:63:f8:96:
36:ba:ea:ba:8d:20:5b:b5:8f:63:d7:2b:3a:20:6f:23:22:85:
c0:06:f7:13:fc:dd:bf:8d:2a:25:96:b5:87:78:90:dd:d6:23:
02:99:95:60:78:99:b1:5a:9d:60:23:03:ee:0d:35:55:13:7f:
88:e8:80:b1:c6:07:8a:32:a9:40:37:e1:d0:86:4d:67:db:3c:
2e:a5:4d:e6:43:62:78:c7:03:5a:76:5d:7e:70:ae:31:a4:3a:
4e:1c:1e:90:fc:53:8e:25:1c:10:3d:a8:67:c5:55:dd:d4:cb:
3d:54:75:60:9a:1e:cc:4c:9d:9d:fb:42:5f:4b:34:45:65:0a:
f9:c2:78:54:d3:6b:d7:6d:26:7e:31:47:3b:c0:86:df:02:53:
0c:87:5a:41:df:ea:df:e2:68:36:62:66:e6:a2:ed:15:4c:94:
ae:07:2e:3c:c6:db:35:87:6b:ff:50:24:42:57:86:cb:27:67:
dc:20:19:cf:32:e6:a4:7b:d0:09:66:53:65:1a:bd:ca:d0:6e:
1c:f8:d7:d6:c3:fc:ca:3a:a6:5f:ef:32:e8:14:62:8f:c1:84:
a0:40:0a:3e:a2:8c:ce:91:a4:05:28:ef:f0:e5:b8:d4:64:9d:
43:ea:7e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQq1bISN/shXcBaUGxFZVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ0NDUwZDFjNzg1NWRmODQ4ZjM0MzE4ZTFmMDk0ODkw
MGQ4ZDUwHhcNMjUwMzEzMTgwMTQyWhcNMjUwMzE0MTgwMTQyWjAzMTEwLwYDVQQD
EyhiMzExZmFmYmFiNWNkNjFkYTI1MDQ2OWU2ZDZlMmIzYzQyNjYyNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I7u9p8UyiEtkK3XLJarW+7ZyvvZ
uBwjr2mOYTBlVM2kfVuFgdF2iFhT/PglgO7QnZUhjyJxdu7zKSuyPT6OOmSSS6uP
eUHIYJVSTekrdHeB0Y1RHxq6bc9lEy5lOhNAhE5OqrHeD+PtjQkeM1VoxGc+Q9Af
CwUjZoFHBmhjhqXb2FJ5JoqcWyujfKk2x0JbGxhdBW+/QIknRnrEwG9Jn8e8n5g+
Oxn8AmK58IjhqNHxBF5I68Y2BGCyHdRulQn2Ujsp0+5lcpMzQpKv0FQWMCez54on
ejFyn4CfxbCbhP5gm3zvh9TBJP+uBv4Y3Yb0hjBlseKCOshGRPEb68AWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMR+vurXNYdolBGnm1uKzxCZiZkMB8GA1UdIwQY
MBaAFKckRFDRx4Vd+EjzQxjh8JSJANjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEt
MTY4YzMzMDZjMDQyLzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEtMTY4YzMzMDZjMDQy
LzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBnSoOOC
d37cYqYZt6ylY/iWNrrquo0gW7WPY9crOiBvIyKFwAb3E/zdv40qJZa1h3iQ3dYj
ApmVYHiZsVqdYCMD7g01VRN/iOiAscYHijKpQDfh0IZNZ9s8LqVN5kNieMcDWnZd
fnCuMaQ6ThwekPxTjiUcED2oZ8VV3dTLPVR1YJoezEydnftCX0s0RWUK+cJ4VNNr
120mfjFHO8CG3wJTDIdaQd/q3+JoNmJm5qLtFUyUrgcuPMbbNYdr/1AkQleGyydn
3CAZzzLmpHvQCWZTZRq9ytBuHPjX1sP8yjqmX+8y6BRij8GEoEAKPqKMzpGkBSjv
8OW41GSdQ+p+4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:24 2025 by rpki-client