Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: qlm9ZlTTY/Fz9/k9qc+Qwz16TwsI3CEd2z3RlKUtw2o=
Subject key identifier: F2:66:DB:14:34:86:9C:20:04:D1:59:23:7B:7F:07:AF:CA:2B:A9:F7
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 01960AFA0CDBC3BA8C5F746EBB4615F8A117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 26
Signing time: Sun 06 Apr 2025 12:01:21 +0000
Manifest this update: Sun 06 Apr 2025 12:01:21 +0000
Manifest next update: Mon 07 Apr 2025 12:01:21 +0000
Files and hashes: 1: 4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa (hash: 2vq5lY7p3QV26YVrvW4JIsT+fBab01wVcEMyf7CWXAA=)
2: gNGKUpZCXd8q1DoJLImZ6jAcs7E.roa (hash: sSxxOvPgg252LzRC1H4oHyqsDh65DNBimoIxyS9qxFo=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: ZtZa8lRqdBdj2y2nfB4hFBvsn+fqKJ7TdwoIu3Q+EdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:fa:0c:db:c3:ba:8c:5f:74:6e:bb:46:15:f8:a1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Apr 6 12:01:21 2025 GMT
Not After : Apr 7 12:01:21 2025 GMT
Subject: CN=f266db1434869c2004d159237b7f07afca2ba9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:09:3b:9e:7e:18:2e:32:b5:25:7f:90:91:
6c:53:ef:46:f3:ed:bd:17:65:19:74:16:3e:90:40:
66:54:cc:fc:64:b1:03:ec:1c:8c:21:bc:87:87:6f:
11:63:9b:6f:92:a4:35:e2:fb:b7:51:96:a4:7c:72:
ec:85:79:4f:2f:d0:fb:6d:85:80:a3:76:7f:10:82:
05:d3:f9:da:a9:55:1d:f0:4a:d0:da:90:f9:63:27:
ca:58:86:73:27:34:3e:1f:ee:f1:e7:5e:77:55:c9:
85:9b:02:a7:b5:3a:4c:89:52:bd:84:51:2a:4e:f9:
86:35:01:ca:21:1b:23:f7:01:9f:cd:27:02:37:6d:
8a:42:d1:d2:f5:61:c9:d4:6d:04:35:f5:6a:72:df:
93:0c:ba:22:27:ed:22:17:e1:78:07:e1:02:bb:c8:
cd:07:6a:7b:87:3d:48:e9:09:13:6b:0b:62:25:33:
59:f2:1c:d0:6a:5e:a0:e3:67:c2:5e:a6:19:d7:51:
24:fb:17:ac:fb:27:9f:81:fb:a3:ea:b2:3c:45:7c:
91:17:25:92:f0:cb:77:59:95:9e:da:3e:42:4a:2d:
01:b3:c0:7e:33:02:5c:e2:f2:e2:3f:be:df:93:30:
c0:66:c2:45:63:8f:3d:97:55:87:02:ce:58:0f:fd:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:DB:14:34:86:9C:20:04:D1:59:23:7B:7F:07:AF:CA:2B:A9:F7
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:99:70:0d:c7:c0:76:2f:19:ff:86:73:9b:d9:fa:f3:78:6b:
43:81:e4:97:52:2f:99:36:c6:95:0f:c5:29:36:d4:07:4f:9e:
b4:24:0b:a1:6b:25:6c:4a:06:de:4a:67:ff:76:80:3a:f6:76:
d1:a2:17:11:61:f2:d9:f2:1c:6d:39:d4:8f:0b:d8:4d:65:d2:
ac:50:67:bc:74:ed:8e:3b:5b:ca:00:15:19:94:18:67:3b:32:
5d:85:31:0d:94:d1:ac:c9:79:1c:41:25:35:2f:a0:9b:9e:8f:
44:80:7a:0d:ac:a2:c9:e1:ee:44:00:c0:59:74:0d:2f:24:82:
25:83:84:a1:5a:5a:ac:77:52:ad:d9:27:2b:72:69:f5:02:54:
62:e3:75:58:89:e2:53:e6:b9:1f:42:d9:5b:af:5e:a4:fb:bb:
f0:66:be:3c:a2:bd:57:37:dd:9e:d6:10:ef:d8:36:2b:dc:0a:
b9:73:8f:63:9f:89:00:2f:86:dd:3e:f1:eb:b2:57:38:b3:84:
6a:aa:d8:89:93:89:ed:42:06:ed:ee:50:22:ec:b0:a8:0a:01:
7a:b8:c8:f4:2d:b6:8d:5d:ac:eb:56:b5:49:48:86:d8:cc:20:
28:d4:a5:83:2a:64:6b:c1:ed:cf:e0:2f:29:59:da:3f:71:d9:
1f:ce:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:58:08 2025 by rpki-client