Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: CVW1oOYYJhvl9xU0aTFC4gs28LUuoPGcBM62MgforlI=
Subject key identifier: A4:D2:C8:A9:92:98:A0:33:12:87:BC:BB:AE:6F:36:36:00:E9:A9:14
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 01984588EC3DB7F672AFAD6B901763EA91D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 07:00:57 +0000
Manifest this update: Sat 26 Jul 2025 07:00:57 +0000
Manifest next update: Sun 27 Jul 2025 07:00:57 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: rDaG+aExRJ50JTlDoMLJf+z9SoZhLdgzpvlRXPjQqOA=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:ec:3d:b7:f6:72:af:ad:6b:90:17:63:ea:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Jul 26 07:00:57 2025 GMT
Not After : Jul 27 07:00:57 2025 GMT
Subject: CN=a4d2c8a99298a0331287bcbbae6f363600e9a914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:c6:b2:aa:20:db:07:9e:68:66:d0:c3:6d:
d9:9b:1d:ea:cc:e1:d8:2f:b5:96:ed:2f:c8:7a:b7:
a2:e8:25:6e:34:5a:3a:44:97:d7:36:21:34:63:95:
5c:2f:29:5e:01:e2:1e:50:fb:29:38:ee:fc:72:ad:
bf:81:da:f0:46:2d:12:e6:ce:cd:99:21:e6:af:92:
4e:a4:4a:a4:7d:a9:c4:89:6b:10:3c:0c:82:81:5c:
3f:17:c1:43:16:14:96:2b:71:71:7d:ce:8d:93:17:
92:8a:3d:1f:67:09:f7:8a:c0:bb:e5:72:1b:bc:44:
07:84:c3:df:b5:72:f1:eb:10:24:d8:78:c7:af:c7:
63:21:c7:0a:a0:70:44:dd:46:d6:43:a5:e3:01:8a:
89:58:0a:87:59:37:48:c3:d9:99:f8:80:77:2a:3a:
d7:86:e8:28:8a:b9:9d:c5:e5:ca:00:0f:ee:7e:74:
f0:f2:f9:f4:2d:83:4d:ac:e6:43:dc:81:9f:48:54:
c2:8e:57:ae:eb:22:b6:23:ba:8d:a4:1c:4f:d1:b3:
fc:28:be:45:da:ab:79:e7:75:0c:54:10:10:54:4d:
64:56:3b:f2:44:ac:2c:08:cc:31:ca:23:62:8b:82:
4d:de:99:c4:dc:ce:1c:63:f8:16:88:63:c4:19:41:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:C8:A9:92:98:A0:33:12:87:BC:BB:AE:6F:36:36:00:E9:A9:14
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:61:e5:4d:ca:4a:b1:25:df:96:c9:0c:b3:b8:05:03:8a:
1f:89:d4:00:3b:e8:38:79:da:cb:0f:95:62:9f:e2:71:31:52:
b5:c5:49:02:40:55:95:aa:4e:0f:2a:a4:6d:50:8f:44:61:62:
c1:f8:c0:f3:4d:44:a7:47:1b:39:db:a8:3b:7b:3e:d8:a7:77:
f4:eb:b5:4d:04:1e:5f:6b:67:e1:0e:90:31:f4:fd:7e:f6:a3:
1c:40:ee:a9:56:0d:fb:71:e0:91:65:21:05:80:9e:0c:66:7b:
f6:d8:b0:85:ff:40:bc:b2:64:2b:f4:0c:c9:df:23:9d:6a:13:
7c:63:c4:2d:42:ec:9f:36:fc:b3:bd:b6:ec:13:5d:cb:1c:01:
3c:4a:ea:4a:3e:82:9f:e0:af:6b:9f:f5:4a:23:39:0c:d4:c9:
7f:19:ce:ac:fd:e2:92:80:66:22:76:aa:4d:d4:10:a5:9d:8d:
91:04:1f:9c:63:df:62:65:0f:c6:a9:82:bb:e2:0f:c1:e7:87:
54:af:89:b1:ad:4d:04:dd:85:b0:34:8e:58:2b:65:17:03:e4:
47:48:54:c6:b8:f7:ef:98:9a:54:ac:66:d3:9c:90:67:5c:7e:
fe:5e:75:0e:7c:f0:50:b7:75:0d:d7:a9:7f:27:91:c9:f4:8d:
2f:47:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:32 2025 by rpki-client