Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: GpPck6hulWqBJmvJlj4WGBLxecv1MZaWeBMUkRLFRlA=
Subject key identifier: 56:6A:9A:6C:08:BB:2E:D7:38:CE:CD:85:A4:A1:45:BA:77:61:49:7C
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 019650115F969F97FE90FDB94FE678C874ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 22:00:37 +0000
Manifest this update: Sat 19 Apr 2025 22:00:37 +0000
Manifest next update: Sun 20 Apr 2025 22:00:37 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: qFFMKzXN16Mcg7OG4+lwwIsuL+LcMJxBrEqAqlmtQsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:5f:96:9f:97:fe:90:fd:b9:4f:e6:78:c8:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Apr 19 22:00:37 2025 GMT
Not After : Apr 20 22:00:37 2025 GMT
Subject: CN=566a9a6c08bb2ed738cecd85a4a145ba7761497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:1c:ac:94:81:e9:86:df:02:7e:f6:40:30:
63:94:e7:cc:52:ec:d3:43:8a:98:21:61:2c:94:9a:
1f:8d:7b:aa:95:c8:3d:7b:26:ed:cb:50:87:1b:22:
eb:7c:1a:2d:72:9f:3a:e0:29:41:9f:c6:e6:0e:b1:
a9:b4:51:28:ad:9f:17:bd:21:19:80:89:4b:cd:34:
c5:aa:ab:5b:9e:3e:fc:fe:ba:4e:1c:72:8e:bf:82:
1a:a3:da:64:c0:09:44:74:0d:15:96:e9:2f:63:d8:
fb:89:95:9e:6d:29:91:aa:af:69:9e:ce:5d:48:e6:
60:9d:c0:9a:cc:71:48:51:57:b9:ae:9a:26:27:dc:
d1:95:36:07:1d:dc:fd:24:61:c9:af:fa:c7:83:f9:
9c:e0:c8:d7:60:93:86:00:ec:6a:4e:e2:eb:4f:24:
29:35:51:ef:3e:b4:de:84:9c:88:e3:78:5a:bd:17:
04:9c:91:cc:a4:78:43:f6:90:6b:a1:77:ac:64:63:
bd:c6:ae:86:f5:e6:cb:83:24:11:4b:d5:27:76:c4:
1a:2e:ad:cb:7d:15:d2:30:4d:ef:ce:f0:b4:6d:79:
8d:5a:95:bf:c8:39:f9:c5:95:7c:20:90:97:6c:4c:
57:aa:6c:00:a2:f8:07:97:41:40:36:dc:fc:36:72:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:9A:6C:08:BB:2E:D7:38:CE:CD:85:A4:A1:45:BA:77:61:49:7C
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bc:28:a6:82:45:4d:4b:a7:a9:43:e9:43:1c:93:b8:e9:63:
f9:d7:44:d0:f1:9d:c8:8d:17:b2:f0:c6:38:36:14:9f:ce:9c:
b3:27:87:e0:cf:0f:8a:6c:b4:30:60:0f:24:4d:b0:22:59:4c:
78:c9:1d:4c:3f:da:a0:05:12:bb:76:b2:7b:c9:78:5c:59:da:
de:29:9b:76:92:7e:e9:d0:91:9e:49:a5:26:7f:78:b7:d0:13:
cc:a5:92:58:89:54:54:89:6a:82:a8:c5:85:d1:e9:02:3c:fe:
6f:4f:41:ed:fa:0b:e3:ba:a8:0b:5c:e6:66:98:57:07:a9:29:
2b:1f:28:6e:00:cf:f8:eb:e7:f1:d8:0a:df:5a:dc:1a:22:0e:
93:53:35:dc:eb:c2:2a:31:65:9f:99:1f:7b:70:10:bf:95:f4:
1f:2b:b3:2a:06:3c:19:7f:2c:42:fa:60:1f:8c:d3:d4:b1:98:
27:e2:7c:e6:22:23:59:ec:9c:97:53:fc:e7:44:9f:5c:37:26:
62:50:9d:f0:c4:e3:47:87:d2:30:27:dd:fe:33:97:99:7d:2e:
b7:a6:f0:6a:6f:13:c0:0b:87:b3:b3:77:14:26:68:7a:39:31:
c0:52:ec:d5:dc:62:fb:9c:82:7c:85:59:74:2b:0d:ea:cf:fb:
c4:1e:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:40 2025 by rpki-client