Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: SRCViREDgKY75mayfBllN+GQEpTdwctEeBKE/WMuxG0=
Subject key identifier: 51:5E:4F:3E:6F:0F:F6:67:56:BA:91:80:CE:CE:43:BC:EA:77:78:87
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 0197470C101A96943DA788A6B13187B2B60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 21:01:02 +0000
Manifest this update: Fri 06 Jun 2025 21:01:02 +0000
Manifest next update: Sat 07 Jun 2025 21:01:02 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: ktxxcMzd1g6EPungLztjKt9+SVEFkmtZfAFM21tgmGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:10:1a:96:94:3d:a7:88:a6:b1:31:87:b2:b6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Jun 6 21:01:02 2025 GMT
Not After : Jun 7 21:01:02 2025 GMT
Subject: CN=515e4f3e6f0ff66756ba9180cece43bcea777887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:17:50:06:60:31:f8:ff:c5:bf:24:e9:fb:
3c:8c:74:b4:5f:29:45:eb:82:c1:3f:ca:22:1b:14:
5a:a8:3b:e5:72:34:c2:46:c3:00:c0:7a:69:17:d2:
2f:7a:bb:30:29:6b:c8:79:2f:7d:bc:a2:87:d5:40:
c8:31:10:27:30:76:08:b5:06:15:c6:27:d0:5b:81:
52:61:f0:ba:f0:de:21:63:04:00:33:35:86:f6:93:
fc:2a:eb:27:dd:2c:a0:eb:fc:c0:18:b0:d9:96:cb:
1a:06:a0:11:97:9d:9e:88:3b:c1:e8:d4:c9:ec:39:
a6:a0:1d:96:e9:15:75:a5:ea:00:43:3d:7a:37:de:
2d:eb:57:3c:11:4a:cb:ff:25:d3:b8:ab:58:1b:73:
c6:d6:1c:3d:bb:7e:9d:f1:9a:a8:ed:10:ed:e9:e4:
f9:87:d6:5e:38:a2:1c:f9:49:cb:be:0a:ab:66:21:
d3:72:83:56:0b:a6:2d:13:ce:19:fe:e9:20:46:69:
7b:f5:07:9a:e2:05:92:ef:4b:2f:d4:db:41:7b:0d:
d5:31:2f:ca:39:97:bf:68:74:86:2d:de:ad:eb:a0:
7b:67:1a:d5:3d:4e:f0:55:24:2a:f1:18:e8:62:87:
c6:9f:51:70:80:d3:3b:1e:5f:91:62:fa:ab:1f:0c:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:4F:3E:6F:0F:F6:67:56:BA:91:80:CE:CE:43:BC:EA:77:78:87
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:db:5b:23:e1:a7:39:2b:fd:cf:ac:6f:88:6a:c9:1d:13:
d1:89:d0:d8:c7:b1:3b:24:f9:28:50:65:fa:a9:c8:a3:44:b6:
bc:d9:de:40:5e:e6:ba:5a:8d:82:e9:a1:55:e2:0e:ed:f0:9a:
c1:3a:6d:8a:e7:37:79:e5:a1:4b:92:2d:d1:da:32:e1:4a:52:
4a:7c:02:53:4f:c3:d5:4b:68:4e:5a:10:5f:a2:91:3f:72:36:
2f:3a:59:12:0b:07:98:b9:e0:4f:18:a8:40:22:bb:ee:46:79:
cf:dd:f3:f0:15:08:f1:d7:1b:a8:4a:9e:03:44:1a:7e:2a:ef:
d6:90:88:f1:6a:bc:14:5b:df:e5:9f:05:02:3b:06:95:ec:36:
65:60:55:76:89:33:e6:dc:c1:00:99:5f:d3:af:a2:92:f3:53:
bd:03:2a:32:8e:09:de:cb:d8:c4:24:8b:39:c2:12:c8:70:0a:
f2:99:38:8a:b1:72:9d:85:1c:c9:08:c1:5d:d7:bc:2a:cb:42:
cd:31:e1:60:8c:fc:df:d1:96:f1:a1:36:3e:c9:fb:1d:0d:13:
09:e2:85:bb:63:8e:f3:19:2c:76:5a:34:7b:55:8b:79:07:67:
69:fe:a3:4b:c6:ba:aa:c5:5e:19:4a:3c:a2:2a:32:f6:23:8e:
5e:04:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:04 2025 by rpki-client