
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier: G2TDW4G1d9DtY3Tl5OBu5p/HHAPwCuqcXpsqigQ4jPI=
Subject key identifier: E4:F1:4D:87:D8:6C:8C:EE:64:D2:23:22:BC:24:B8:0D:5D:23:18:F1
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 01984B550A7D2CAB78BCB77FED12885C521F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number: 0F09
Signing time: Sun 27 Jul 2025 10:02:01 +0000
Manifest this update: Sun 27 Jul 2025 10:02:01 +0000
Manifest next update: Mon 28 Jul 2025 10:02:01 +0000
Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: Yh4QJF23ya+U9ZsQ1sJ8qwABWWQcxrGbaSQ2HOmC0jo=)
2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:0a:7d:2c:ab:78:bc:b7:7f:ed:12:88:5c:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Jul 27 10:02:01 2025 GMT
Not After : Jul 28 10:02:01 2025 GMT
Subject: CN=e4f14d87d86c8cee64d22322bc24b80d5d2318f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:e1:49:62:2a:9a:23:78:7c:00:5c:d0:53:
50:ce:7d:54:3f:74:1c:7e:9e:f6:69:65:8b:d4:7f:
57:6c:6e:d2:21:2f:6a:c7:d4:ff:02:72:0e:33:2a:
9c:32:6e:f5:c3:33:e3:5f:3a:40:35:3a:09:4a:7a:
42:21:66:45:4f:83:45:d6:34:92:fe:ad:6d:15:56:
47:b7:79:e2:f4:b6:76:8d:3c:fd:23:d3:6d:0e:b3:
9e:62:2e:a4:62:5b:41:13:5a:6b:9f:72:42:66:7b:
bd:81:69:e5:54:57:d0:2e:cc:de:2b:f1:43:12:82:
5d:23:e0:ac:15:e0:20:81:ba:8e:dc:6f:fe:26:d4:
a2:e2:47:f5:31:de:6d:b7:95:1c:07:e9:22:15:ad:
46:26:30:ea:d6:8a:c4:31:8c:55:95:3d:9d:bb:24:
a9:8c:4c:91:54:fb:6c:51:65:37:5b:13:01:2d:49:
4e:1f:b4:f7:5d:6c:a2:25:04:88:cd:c6:bb:45:b0:
68:43:76:6f:a6:43:77:e4:ca:06:6f:87:55:5f:50:
02:2e:ac:2f:02:76:ad:db:03:ed:a3:32:02:02:60:
56:fd:a5:f8:86:a0:cd:54:e6:8b:50:61:b6:89:a8:
dc:1f:d4:36:ed:aa:c9:49:b4:86:70:c4:2f:d3:9d:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:4D:87:D8:6C:8C:EE:64:D2:23:22:BC:24:B8:0D:5D:23:18:F1
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f5:d1:19:90:03:55:4f:a6:91:f6:62:8f:d0:02:7a:27:76:
56:46:b6:52:6a:43:04:d0:7c:b8:3a:25:59:8f:a6:e9:be:63:
55:e4:79:68:c1:2d:68:d7:c8:9c:0f:da:60:e9:e0:bd:41:86:
32:fc:c9:63:4f:04:61:48:94:9c:15:70:cd:30:f4:84:bf:1f:
76:6f:90:e2:01:3d:94:d8:2a:f5:6a:d8:05:8e:33:10:8d:74:
f7:ce:c3:57:3d:a9:7b:ff:ca:ed:e2:e9:d6:3e:9b:2d:7e:e3:
f9:ed:4f:80:fb:d8:94:07:58:00:b6:0c:59:eb:4c:e6:23:22:
a9:fa:9d:0b:d5:5f:ae:d7:92:f4:85:46:8f:7b:8c:a9:f1:1f:
e9:de:33:a7:cc:25:a6:88:c2:46:48:d8:c1:ad:82:3d:35:c9:
10:13:b0:59:2c:24:b1:fe:f6:ff:16:39:ca:b8:07:01:bf:7e:
5a:66:ff:e6:00:f1:39:18:e4:4a:a0:b2:0f:c6:d9:70:01:09:
c0:4f:2e:e5:35:9a:07:54:42:a6:de:d9:d9:69:a5:e6:58:c8:
cb:09:7d:53:32:a2:c2:b4:0f:f2:e6:38:e7:cf:24:10:60:fb:
12:c4:b0:a4:00:e2:4d:86:3d:b3:76:95:73:46:4b:68:77:81:
6c:a7:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:31:48 2025 by rpki-client