Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: qcIzEnMUtHrj4BsfeR/HUJEdRY5XbyVriJg0I+oza1s=
Subject key identifier: 2D:5A:9F:65:D2:31:A9:BF:83:D9:51:21:4A:7E:B4:88:35:AD:CD:68
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 019854FBE17D4C3D0A87C349FE3FD5C7BC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 0CEC
Signing time: Tue 29 Jul 2025 07:00:50 +0000
Manifest this update: Tue 29 Jul 2025 07:00:50 +0000
Manifest next update: Wed 30 Jul 2025 07:00:50 +0000
Files and hashes: 1: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: dR0iRpmRkajI6v2S/MEGnUq/8HXNqTDVqvzVr3jZHK0=)
2: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (hash: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=)
3: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (hash: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:e1:7d:4c:3d:0a:87:c3:49:fe:3f:d5:c7:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jul 29 07:00:50 2025 GMT
Not After : Jul 30 07:00:50 2025 GMT
Subject: CN=2d5a9f65d231a9bf83d951214a7eb48835adcd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:ea:2a:b4:ca:8a:81:bb:6e:91:3f:59:93:
9a:d4:75:26:9e:a1:af:6b:67:53:91:a0:8b:e9:43:
06:76:5d:6d:38:07:77:ea:34:3c:35:d0:07:df:24:
9d:c8:b7:60:62:32:0b:ca:27:bc:d0:45:a5:ed:db:
84:df:cb:49:2c:f5:f5:ee:ab:c5:a1:e6:ca:10:79:
58:26:32:d2:e2:a5:7a:0a:28:9f:df:15:91:59:42:
82:96:2a:68:10:6c:69:32:58:fe:77:e4:02:e3:e7:
1e:4a:2c:08:1e:92:fd:ff:f5:c2:0b:1a:41:0b:04:
14:54:78:15:01:d0:8a:e1:a5:89:de:3b:d3:d6:10:
66:41:26:94:2c:d1:c3:e1:14:14:3d:56:96:6b:5e:
6e:4f:46:ec:9f:9f:f8:d2:b3:e0:dc:18:7b:aa:1b:
e3:29:48:39:34:51:76:ba:4f:33:86:06:55:51:53:
3a:63:21:d3:b9:86:a6:d9:7f:ec:66:4b:2a:f0:b2:
5c:b1:f5:cb:23:85:32:1e:11:68:cf:ec:85:56:7e:
bc:61:f8:a3:29:b7:b7:e0:64:0a:e0:23:27:14:68:
12:b2:0d:03:62:3e:3e:f7:8d:dc:6f:8a:c9:b0:5b:
68:45:47:e3:e4:2d:4f:d7:c2:05:94:b6:45:27:08:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:9F:65:D2:31:A9:BF:83:D9:51:21:4A:7E:B4:88:35:AD:CD:68
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:15:ad:24:1e:c2:fa:7a:2a:5e:1a:18:ff:65:c0:b9:72:
31:8d:86:49:9f:58:18:0b:80:3f:df:7f:28:d1:db:a1:7e:d3:
7c:30:cb:b3:b0:09:05:28:45:d5:8b:65:b2:91:07:00:87:61:
8c:f3:ad:55:84:58:a8:40:ad:1e:7f:d6:d8:27:39:00:2f:64:
d2:c0:26:56:1d:7a:82:94:39:c4:18:92:01:df:2b:77:75:9f:
e5:70:22:5c:a9:0e:11:1a:06:be:bf:68:b7:90:e9:2e:a2:6c:
e8:95:83:e1:39:4e:9b:c8:59:01:4c:6b:4a:1f:70:61:f3:ba:
85:d0:e6:77:64:4e:3e:2a:c3:ee:a4:b8:8d:8c:43:97:6a:c5:
13:90:2f:aa:fe:a9:0f:10:d7:54:d6:d4:a7:3f:ee:28:ac:f7:
b2:1c:ac:22:7e:2b:1e:b4:a3:bc:13:15:6d:37:7e:f6:46:53:
6e:5b:e5:74:dc:d9:2b:e1:36:40:4b:7d:7c:0f:ad:f7:44:80:
f7:64:03:05:ac:6a:55:3b:42:d8:7b:07:34:35:9f:24:a9:3a:
1b:17:cd:ae:6b:73:e4:58:a9:0c:6c:17:a2:90:79:81:27:c2:
18:be:c9:08:f2:b2:21:21:6e:2f:be:b2:51:fb:84:f7:f9:9e:
31:8a:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:43:36 2025 by rpki-client