Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: P71aJzbW7QU61WgtHN2uKPov12+m+J2oX9rEbHNk/Uc=
Subject key identifier: 48:8F:67:04:84:2C:38:7F:75:05:67:46:68:52:0A:79:B4:8D:6D:25
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 01964A7CD3496365B626E9F640BD43B22046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 20:00:16 +0000
Manifest this update: Fri 18 Apr 2025 20:00:16 +0000
Manifest next update: Sat 19 Apr 2025 20:00:16 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: dFJpYYuB1QFDyEMltxwnqST1CNqd2Uh6Hp3LuSMvH2o=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:d3:49:63:65:b6:26:e9:f6:40:bd:43:b2:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Apr 18 20:00:16 2025 GMT
Not After : Apr 19 20:00:16 2025 GMT
Subject: CN=488f6704842c387f7505674668520a79b48d6d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:36:ef:2f:66:4f:b5:67:f1:99:a5:08:4c:
52:32:f8:72:6e:27:c2:9b:b5:e4:dc:e7:33:4b:cc:
c0:9a:60:7a:1a:0f:fe:59:c5:ec:cf:b7:10:2b:c0:
b3:e9:d5:c2:b3:47:63:8c:80:ac:39:1b:0e:c2:c8:
86:e2:02:69:81:fb:5f:29:06:a4:e6:4e:4b:33:af:
34:21:32:9d:41:1e:29:c6:47:37:22:7b:42:87:f3:
8a:58:76:6f:66:ff:57:a3:3a:46:4a:7b:0b:41:06:
88:85:3e:9b:b2:12:b8:03:ee:a0:91:ab:1a:01:4f:
23:2f:64:82:90:b1:52:c5:09:80:a2:0f:e5:eb:70:
1d:f3:46:b6:34:1b:f8:29:8e:23:25:ba:33:e9:0f:
29:81:77:50:b7:cd:a8:55:1c:aa:05:80:f0:12:49:
c9:8c:25:85:3f:3c:20:05:89:f7:39:60:6b:64:c0:
bb:6c:b4:49:9b:35:79:45:b6:7f:89:65:9b:c3:be:
61:83:43:65:2d:77:66:93:f5:0c:67:ff:42:a0:d5:
d8:fd:35:cb:38:8c:2f:35:de:e7:77:14:4b:ad:20:
8a:d0:89:90:4b:36:8e:b7:8a:2f:2f:c9:01:7d:f7:
ed:41:01:1e:01:da:da:6b:cf:85:27:ad:fd:c4:a2:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:67:04:84:2C:38:7F:75:05:67:46:68:52:0A:79:B4:8D:6D:25
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:61:ba:27:34:0f:df:55:22:01:ae:f0:cd:0b:f3:2d:66:46:
22:bf:90:b2:a7:08:3a:a1:1a:07:9f:f7:c2:69:d8:db:4f:e8:
db:a3:09:f2:9b:49:67:cd:71:44:6e:46:ec:38:1e:cb:6d:87:
5d:9e:36:6f:4f:06:9b:25:c0:56:7f:e8:6f:2e:4c:bc:5f:59:
d3:3e:75:ea:b9:9e:24:37:39:cb:4e:d5:70:9e:cb:02:10:bb:
44:fe:26:cc:8d:ca:e8:65:5e:b2:1b:85:4f:8c:3a:d1:31:90:
60:08:78:33:4c:02:fd:e9:f5:df:c5:66:fd:47:9e:99:4c:07:
30:e3:bf:79:82:9a:32:14:4f:47:5c:db:3a:83:97:39:1c:44:
27:ee:10:ab:e2:3a:1e:29:18:31:08:d7:4c:35:a3:60:bf:93:
d5:79:bc:12:c7:3f:da:bd:33:b6:53:76:25:6d:8b:62:11:d4:
9b:b3:4b:07:9a:83:ff:b2:6d:15:d7:b2:a6:c8:3a:e1:d1:cf:
61:a9:d9:5d:ab:37:06:3a:19:88:95:42:49:4f:4d:ea:6b:c3:
ff:9c:1f:5c:33:91:a9:c4:19:69:ef:d9:a0:73:70:0a:71:be:
17:19:09:6f:c3:ff:97:0a:ff:3c:a7:78:74:aa:79:2a:01:bb:
04:c8:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:34:08 2025 by rpki-client