Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File: pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier: 84iiRhIe9MGoujC8ghAFzQ3qIYYZMlZ4fSY2VK40+Jc=
Subject key identifier: AD:2A:60:1E:39:C0:87:C4:4B:8D:BF:00:36:21:A3:E7:66:2A:C2:9B
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 019849D2F4E64DC4CE35F0292484D524A3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number: 0420
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: tjDvu10NpgBClckuFBVkm5B3A2A/cc7ciscVEaxI/i4=)
2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f4:e6:4d:c4:ce:35:f0:29:24:84:d5:24:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=ad2a601e39c087c44b8dbf003621a3e7662ac29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:ef:05:de:f6:0f:ea:1c:e4:13:05:d8:03:
6f:2d:41:77:48:bb:45:b0:3c:33:86:3e:b5:35:f2:
0a:2c:57:a7:e0:71:b4:e9:33:3d:11:cd:a1:6e:aa:
2d:c7:23:cd:61:d4:75:9f:d6:1a:2f:cc:a4:7e:51:
93:95:ca:e3:1c:32:23:1a:5c:70:60:81:06:4f:31:
44:f2:0b:35:7c:d3:d4:7f:8c:42:c2:6d:67:41:a3:
09:5d:0c:ec:50:78:5c:99:2e:39:d0:cd:11:38:65:
a4:89:c3:7e:c3:f9:ed:46:d3:24:e5:e9:cf:1e:24:
13:b8:a5:92:3b:18:c1:e0:09:b6:ca:aa:d8:96:ea:
a6:f0:a6:60:81:48:ad:45:73:c0:b3:4e:d3:20:5d:
a6:b0:c2:bf:4c:80:4d:01:23:7b:f5:c0:18:b5:3a:
c3:c7:38:b4:8e:f5:6a:8d:41:49:74:3a:e3:66:02:
c8:c0:5b:72:b7:81:04:ad:91:01:49:19:dd:49:65:
35:3e:ce:3c:0a:a3:d2:5c:5f:87:b0:91:50:93:1b:
98:c8:32:92:cc:4d:70:93:ac:c0:8d:12:14:df:4e:
17:b1:c1:8f:89:34:8b:68:31:36:b1:ff:e2:fd:d5:
55:0e:0f:74:52:94:71:1e:85:53:27:b4:88:c6:83:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:60:1E:39:C0:87:C4:4B:8D:BF:00:36:21:A3:E7:66:2A:C2:9B
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:99:a0:95:8d:ce:cc:b8:7f:9c:ed:1c:a5:de:2c:31:f5:3d:
e3:17:0b:04:e1:b4:ad:41:da:ff:95:5f:07:9d:1d:94:24:78:
ce:bd:7e:bb:e9:51:1c:78:7e:54:5f:e3:bd:ef:c9:d8:f0:12:
1c:b6:38:70:40:77:56:80:5a:cb:9b:0f:f1:3d:9f:89:b0:0f:
56:2b:00:cb:ca:8e:7e:0a:04:63:09:28:09:df:90:00:89:0e:
ca:99:22:74:4d:7f:a7:c1:91:d3:78:ca:ed:9e:be:cb:ac:af:
91:91:8e:9c:fb:de:2b:3b:6d:2a:2b:73:14:68:f9:55:e2:44:
51:84:9e:ba:c6:f2:d3:66:f5:35:86:32:6f:2d:44:c1:71:40:
1a:f3:98:50:41:94:ef:68:23:ac:fa:18:d6:e2:17:b2:13:32:
b5:bf:c8:19:e1:80:66:58:3f:e9:84:f9:d8:a2:15:9f:23:c9:
39:71:f8:63:80:92:47:5b:38:d3:cb:be:6e:43:4d:0c:87:3c:
a0:6f:5f:8f:13:2c:95:64:99:6e:d1:81:26:d0:23:c5:ec:95:
77:f9:d9:43:f8:a3:b8:6b:29:3e:07:a0:00:82:3b:5e:c4:76:
9a:9f:9b:13:04:3d:2a:14:fb:25:ec:c6:3f:ec:39:a4:b8:97:
c6:be:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:59 2025 by rpki-client