Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
File: PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft (raw, json)
Hash identifier: EOhzTIZClA8zH6GV/cqKpXobqctqq4i12RiRoqmdh7w=
Subject key identifier: 1B:87:B7:F9:44:BD:86:EC:F1:F3:BA:52:5D:81:8F:7D:E3:75:16:E3
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 0196545C3AA756E58B20F11FDF232F6E2E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
Manifest number: 1217
Signing time: Sun 20 Apr 2025 18:00:52 +0000
Manifest this update: Sun 20 Apr 2025 18:00:52 +0000
Manifest next update: Mon 21 Apr 2025 18:00:52 +0000
Files and hashes: 1: PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl (hash: qJCzXtIy1vfvTUeXZUPCagW9Iu8JOB+53t5Ne4MSpUg=)
2: WUGlCtJw6cpU2FG2Edk0WX6jTy8.roa (hash: JBmFXCHcBO6dIcBHrxlCuuoBtse/nvSs/yMZuy61tLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:3a:a7:56:e5:8b:20:f1:1f:df:23:2f:6e:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Apr 20 18:00:52 2025 GMT
Not After : Apr 21 18:00:52 2025 GMT
Subject: CN=1b87b7f944bd86ecf1f3ba525d818f7de37516e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:79:d5:99:eb:e5:bf:f3:40:33:06:15:98:
71:c1:98:d4:47:db:72:78:5b:41:fb:a3:45:be:fc:
b8:dd:1c:ba:62:ff:9d:5e:56:6c:ac:e2:d9:ed:39:
35:d5:6f:b9:94:63:9f:d9:d0:b8:06:9f:ac:5c:a0:
01:cf:2c:30:cc:df:fc:9f:2b:0a:f3:ae:57:b6:30:
15:fc:4a:f2:dd:75:37:31:2f:de:38:9b:38:95:67:
60:53:d3:17:c1:2f:0f:42:90:ee:df:ec:0f:6c:85:
af:4c:66:4b:0e:17:7d:62:28:ee:43:8d:f7:b9:a6:
42:63:33:f0:59:ce:76:87:79:6c:f0:21:02:53:06:
f5:df:a5:aa:0a:3d:c9:d7:29:8a:4c:f7:81:58:9e:
2a:a4:ce:3a:45:a2:1f:76:79:64:11:60:67:a0:85:
07:2b:e1:6b:ca:9d:92:88:25:bc:e3:f2:48:94:62:
b5:22:bb:a7:c9:20:2f:76:78:86:73:16:2e:13:21:
03:fe:94:13:81:1c:c8:7b:3c:75:83:eb:13:27:2a:
eb:98:71:83:4c:dd:1f:99:49:cc:cc:3c:58:2a:1b:
3a:50:a1:cc:09:7d:af:78:2c:e6:c0:26:86:55:5e:
a5:0a:e7:b1:54:f4:e0:a2:05:0c:fd:3e:7a:a6:c0:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:B7:F9:44:BD:86:EC:F1:F3:BA:52:5D:81:8F:7D:E3:75:16:E3
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:1e:ca:78:80:43:41:65:2e:af:7e:f9:eb:a6:9c:4f:35:
a0:b2:6a:6d:6a:72:07:7b:36:db:31:5a:f4:57:8c:cc:c2:14:
47:dd:e1:5d:7f:30:3d:34:70:6f:e4:74:48:ff:b3:dd:af:c9:
00:fc:97:7c:5e:a2:3a:3a:5d:bd:59:87:e2:0f:fb:b3:e0:34:
ff:6e:84:9c:4d:21:5c:ba:3b:ba:f0:15:78:63:15:13:92:22:
d9:52:5e:fc:7c:97:5b:45:7c:d5:db:50:54:bc:69:12:5c:cc:
bd:dc:39:db:63:84:cc:5d:f6:2c:9f:99:66:13:43:2e:dd:f9:
79:fe:af:d6:13:ee:4e:f9:03:d6:e3:03:59:5a:f0:f1:1a:a6:
4e:51:27:4e:6a:6a:fe:67:14:73:d3:bb:54:f2:2b:cc:d5:d7:
18:f1:e2:69:4b:51:4d:d6:c1:a1:44:18:6f:0e:a4:bc:c3:50:
53:54:b5:2c:45:57:18:ea:ec:15:15:40:78:f1:13:ec:1f:8b:
35:d0:f8:8e:b6:01:ad:89:f3:69:f7:e8:af:01:72:9a:9e:ac:
a4:26:a9:a9:f2:09:9d:b9:2b:fd:72:83:06:73:3b:16:cb:d4:
13:8a:0d:35:4a:2b:52:6b:60:34:b5:87:65:38:d0:43:60:5b:
69:76:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:47 2025 by rpki-client