Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier: jWs9tKJ/jh/BKG7HpDAi3OidTr7MjCSm8F145uV3BHM=
Subject key identifier: 67:1B:CF:EE:08:92:3C:FB:97:19:41:35:8C:0B:66:76:93:23:BC:D4
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer: /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial: 019848F70B1C60AD5E1523EB0CB43C0F55F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number: 08C8
Signing time: Sat 26 Jul 2025 23:00:06 +0000
Manifest this update: Sat 26 Jul 2025 23:00:06 +0000
Manifest next update: Sun 27 Jul 2025 23:00:06 +0000
Files and hashes: 1: JD1ZF1XWLuEfY_xZK_HiSB-W5Sc.roa (hash: tU/SgRvLeOcLILG1M49HHg6nzxCmwlwyRSULttNgB8k=)
2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: xVg2QmZfclDALBVv09OUohCqTBkyTmz5bnWPnL7xt94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:0b:1c:60:ad:5e:15:23:eb:0c:b4:3c:0f:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Validity
Not Before: Jul 26 23:00:06 2025 GMT
Not After : Jul 27 23:00:06 2025 GMT
Subject: CN=671bcfee08923cfb971941358c0b66769323bcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:6e:bb:bc:a6:09:07:09:c9:3b:c8:09:03:
a9:1e:4e:aa:47:94:4d:15:1b:8a:f5:15:2b:a2:16:
19:9e:64:4c:e9:42:d1:73:27:9a:75:bd:11:3a:ed:
1b:a8:85:1d:98:b8:1e:c2:9c:35:b0:28:e8:5e:54:
49:b1:7f:9c:49:a0:ce:77:2c:59:5a:9e:a9:ca:94:
b4:0c:92:e0:5e:d3:8b:fe:07:f0:01:18:e8:6c:aa:
74:f3:dc:57:4f:f9:f4:a1:63:89:b4:a9:af:e0:72:
76:b1:2f:3c:bd:b4:5e:26:49:06:40:75:67:5e:f1:
7a:91:8a:bd:03:55:30:86:d3:c3:76:ad:6b:a5:ab:
8a:3a:39:a3:ff:93:47:19:78:2c:bd:e7:b5:ec:1b:
47:54:61:1c:10:db:08:86:17:8f:46:15:68:39:3f:
5c:a5:47:68:1b:64:90:04:75:ba:07:16:61:b5:ff:
64:14:68:56:da:58:33:bc:e6:e4:fe:0a:5e:55:76:
aa:b6:6d:43:2f:17:78:84:d9:de:09:a0:b9:5f:1c:
1f:f3:9e:cf:e7:7e:ae:6f:f3:56:eb:97:81:37:f7:
cd:9f:29:0a:bf:b3:89:82:01:81:95:21:1c:e0:f6:
66:2f:a6:91:fe:1a:0a:f3:fb:1d:b2:f9:f5:af:c2:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:CF:EE:08:92:3C:FB:97:19:41:35:8C:0B:66:76:93:23:BC:D4
X509v3 Authority Key Identifier:
keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fd:de:4c:1e:3e:4d:81:b4:a2:82:7c:4b:b3:14:0e:ec:d6:
73:11:e9:8e:41:02:52:56:ea:44:fc:16:7f:16:31:66:e2:6a:
5b:8d:ee:f9:49:4b:2f:7c:bc:4c:65:4d:a3:64:10:ad:d5:13:
af:49:30:6f:97:3f:08:85:3a:98:7d:5d:7e:76:5e:61:7e:14:
41:33:19:7c:2a:84:3d:e0:c2:20:27:6a:77:11:56:11:d3:a4:
ed:d1:4d:42:60:79:ec:bf:99:0c:a0:78:cf:f1:97:3c:5f:57:
ad:9d:81:68:8c:38:c4:70:c5:6c:5f:fe:6e:51:6b:61:e3:ac:
41:99:30:af:a1:96:54:85:7a:e6:86:3e:bc:71:16:01:cd:2e:
3e:a8:cf:02:18:fb:2b:5a:d1:ce:7d:ef:fb:2a:ca:69:cd:4f:
a8:6a:06:c3:05:49:a4:4d:9c:11:5b:54:dd:48:b8:bf:35:c1:
aa:62:5d:fe:04:35:50:ad:99:e5:7c:fc:5d:81:7b:8e:60:f9:
a7:c9:c3:97:6a:b6:bc:9b:ee:6f:8c:44:b5:cb:b9:73:7f:b1:
66:ff:79:2d:18:37:0d:56:ee:3d:4a:b3:a2:20:fb:6a:41:ce:
5a:a9:be:81:02:d8:af:cc:3d:13:e1:c6:37:44:20:5e:ed:e5:
3e:71:15:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9wscYK1eFSPrDLQ8D1XxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODk3YmQ4YzZkZjFjYjcxNDEwZmUxOTRiZWQ3MzlhMmY4
YTY3NzMwHhcNMjUwNzI2MjMwMDA2WhcNMjUwNzI3MjMwMDA2WjAzMTEwLwYDVQQD
Eyg2NzFiY2ZlZTA4OTIzY2ZiOTcxOTQxMzU4YzBiNjY3NjkzMjNiY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpuu7ymCQcJyTvICQOpHk6qR5RN
FRuK9RUrohYZnmRM6ULRcyeadb0ROu0bqIUdmLgewpw1sCjoXlRJsX+cSaDOdyxZ
Wp6pypS0DJLgXtOL/gfwARjobKp089xXT/n0oWOJtKmv4HJ2sS88vbReJkkGQHVn
XvF6kYq9A1UwhtPDdq1rpauKOjmj/5NHGXgsvee17BtHVGEcENsIhhePRhVoOT9c
pUdoG2SQBHW6BxZhtf9kFGhW2lgzvObk/gpeVXaqtm1DLxd4hNneCaC5Xxwf857P
536ub/NW65eBN/fNnykKv7OJggGBlSEc4PZmL6aR/hoK8/sdsvn1r8JSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcbz+4Ikjz7lxlBNYwLZnaTI7zUMB8GA1UdIwQY
MBaAFD2Je9jG3xy3FBD+GUvtc5ovimdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NDcxZjgtYzkzOC00MGNjLWIxMzkt
ZjlmOTIxNTBjZDM5LzEvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NDcxZjgtYzkzOC00MGNjLWIxMzktZjlmOTIxNTBjZDM5
LzEvUFlsNzJNYmZITGNVRVA0WlMtMXptaS1LWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIf3eTB4+
TYG0ooJ8S7MUDuzWcxHpjkECUlbqRPwWfxYxZuJqW43u+UlLL3y8TGVNo2QQrdUT
r0kwb5c/CIU6mH1dfnZeYX4UQTMZfCqEPeDCICdqdxFWEdOk7dFNQmB57L+ZDKB4
z/GXPF9XrZ2BaIw4xHDFbF/+blFrYeOsQZkwr6GWVIV65oY+vHEWAc0uPqjPAhj7
K1rRzn3v+yrKac1PqGoGwwVJpE2cEVtU3Ui4vzXBqmJd/gQ1UK2Z5Xz8XYF7jmD5
p8nDl2q2vJvub4xEtcu5c3+xZv95LRg3DVbuPUqzoiD7akHOWqm+gQLYr8w9E+HG
N0QgXu3lPnEV3A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:29:49 2025 by rpki-client