Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: J84THOzNOP9wA9CDmWM/RmhR/1MeQVlQrkPl3NnK3Ak=
Subject key identifier: 4C:DB:04:3A:34:FB:0B:58:56:75:CE:7A:C5:49:E9:74:D9:B5:E6:66
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 0198282325310D34E0E71A9E8390CCCE8EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 42
Signing time: Sun 20 Jul 2025 14:00:48 +0000
Manifest this update: Sun 20 Jul 2025 14:00:48 +0000
Manifest next update: Mon 21 Jul 2025 14:00:48 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: JOb//7+W/PGGqMgdgoU+KVB8CFaL97lwf2uTLOa9dqY=)
2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:25:31:0d:34:e0:e7:1a:9e:83:90:cc:ce:8e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Jul 20 14:00:48 2025 GMT
Not After : Jul 21 14:00:48 2025 GMT
Subject: CN=4cdb043a34fb0b585675ce7ac549e974d9b5e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:83:15:ab:bb:7e:28:c7:39:b2:82:88:0d:
59:a1:0f:d7:94:93:d2:97:87:a8:a2:52:9b:29:b8:
12:3b:d8:7e:f1:98:c5:79:03:44:7a:42:0a:65:f0:
fe:fa:19:eb:e8:6a:f3:8e:ab:56:b4:60:39:2d:d2:
0a:4c:f4:bf:a8:8e:b9:95:2a:6c:7e:69:ae:cb:4f:
98:06:d4:c7:00:f4:90:69:e3:df:b7:11:c9:94:3a:
31:c4:b0:fb:b9:8b:88:72:11:f1:ca:7a:8e:1c:11:
e9:c2:a6:1d:66:03:91:97:63:cd:66:a1:b7:22:35:
b5:70:52:40:69:59:70:32:fc:2f:cf:b4:c8:d4:37:
fe:c8:9c:12:1d:11:c7:61:1b:0e:ff:c9:51:5c:1b:
9d:16:ad:79:bb:35:42:0e:36:68:80:f3:d9:19:0a:
b1:53:9c:d5:0d:e9:1e:d9:fc:37:c8:ce:28:8f:1d:
15:4d:40:5a:98:d3:56:e2:ed:67:90:ed:59:d9:d2:
cb:c4:56:4a:c7:67:1d:d4:69:45:4b:3b:94:5f:76:
24:7c:8d:e0:8c:a2:a3:d6:7c:8e:f6:fa:90:28:ae:
00:e0:61:cf:9c:86:d2:7b:c4:2a:fe:32:53:57:47:
81:04:ed:a6:32:ec:43:de:8d:38:44:8d:5a:b3:a0:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:04:3A:34:FB:0B:58:56:75:CE:7A:C5:49:E9:74:D9:B5:E6:66
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:5b:b9:44:09:49:ef:a3:9c:dc:8b:39:27:71:67:37:02:
ea:09:ff:41:ca:1b:7a:a6:6d:6a:c7:a6:f0:35:8b:ae:5c:3f:
71:36:21:d7:0e:93:9f:0a:be:a6:28:3d:76:26:6d:6f:92:61:
9d:08:e4:2a:99:d8:db:09:1d:26:8a:46:84:34:e7:98:4a:19:
6f:51:c2:78:5d:f6:be:c8:48:5e:69:a9:39:31:cd:58:fb:4e:
f5:4f:43:e5:27:e1:a3:ad:34:a3:27:ab:d1:56:20:23:0d:2c:
b5:10:ed:6c:fe:52:82:cc:e3:61:89:9c:d9:11:e2:ea:80:a8:
6b:a6:69:8b:39:71:ac:6e:72:71:32:99:74:50:20:b6:fc:01:
c2:ec:fd:bc:a1:3d:5f:d6:a4:3d:c3:9a:6d:65:50:7b:07:07:
0f:43:0c:c4:06:29:a9:9d:02:ae:9a:ee:a1:d2:be:7a:a2:dc:
12:fe:4e:08:d1:18:a1:48:5a:6e:e9:1a:fe:3d:4f:95:d2:f3:
ff:39:e8:a5:78:7f:a3:b1:9c:28:d8:3a:83:c0:cb:af:7e:f0:
74:32:93:c1:1e:37:d6:7a:06:1a:e3:7d:e9:46:9d:2d:7a:9f:
d7:00:fd:92:3f:e5:b6:d5:59:ee:66:06:64:98:93:9e:58:22:
0b:cb:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:57:28 2025 by rpki-client