Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: egFGKduUgTCg8e/l3vCOHI9l3c8fdrPEVOINRvA2QDE=
Subject key identifier: D2:8F:70:F0:3D:0A:D6:EA:0B:70:50:06:48:52:3D:09:DF:D8:EC:48
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 0199179AFF428D7B9F414FB680C24B66EB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: BE
Signing time: Fri 05 Sep 2025 02:00:57 +0000
Manifest this update: Fri 05 Sep 2025 02:00:57 +0000
Manifest next update: Sat 06 Sep 2025 02:00:57 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: hP10RyHxvXV8i0QYhqSXPtqNYPmYdpcOXG9IdW5bDSs=)
2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:ff:42:8d:7b:9f:41:4f:b6:80:c2:4b:66:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Sep 5 02:00:57 2025 GMT
Not After : Sep 6 02:00:57 2025 GMT
Subject: CN=d28f70f03d0ad6ea0b70500648523d09dfd8ec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:9f:3b:42:5b:48:20:4a:60:6e:52:3a:63:
99:ad:c7:bb:62:74:5e:dc:5f:78:91:b3:25:3a:ad:
72:8a:22:6e:0e:ad:90:1b:a5:f5:fe:40:f1:35:43:
56:de:91:91:8d:53:eb:e9:33:80:35:bb:63:e0:89:
6d:38:20:3a:17:eb:1e:b9:1c:b2:fa:0c:4c:db:b5:
08:ab:19:28:51:75:c0:2a:d2:11:52:c0:6f:86:c0:
5e:b9:cc:04:7d:a7:05:c2:3e:e0:31:2e:26:c3:64:
bd:2e:51:f0:dc:7d:df:fa:84:f8:65:1f:fc:42:f5:
bc:83:b1:fd:c9:7b:51:7f:26:bd:c4:78:ac:07:94:
fc:a9:01:f5:30:93:19:8e:76:93:82:60:ea:6a:8e:
85:75:fb:82:d8:d5:4d:f0:b3:6b:b1:b2:26:a4:c0:
55:0c:ed:66:a4:e1:5d:6f:61:7d:54:55:86:c3:2d:
09:ba:4c:96:18:d4:46:ad:42:1f:c9:a4:5a:7f:a5:
47:1d:89:7a:f3:20:0f:de:a8:a6:6e:b0:11:5c:e3:
60:cb:8d:3e:af:0c:d3:53:68:aa:99:c1:7c:c1:e4:
d0:1c:dd:fc:3d:e7:d9:c9:fe:c2:89:2d:57:48:46:
0e:34:06:55:7e:7c:ee:e4:38:63:03:b6:e3:7a:94:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8F:70:F0:3D:0A:D6:EA:0B:70:50:06:48:52:3D:09:DF:D8:EC:48
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:f2:13:53:01:a0:6b:c5:06:60:86:31:12:27:f2:90:d9:
0b:d0:37:9c:66:b6:4e:ba:ae:26:f6:3e:4c:be:a2:43:e9:47:
60:9b:95:22:8a:3e:3f:32:f2:c2:b4:cb:75:b0:06:9e:ef:fe:
7c:4b:68:b2:94:e5:26:6e:b4:cb:56:96:fe:ea:65:15:1c:45:
ce:09:4e:f6:2f:57:b0:7c:ed:33:68:09:e4:97:9e:87:87:3e:
43:6b:d0:3d:33:9a:b7:e5:eb:26:9c:38:33:e1:d7:ad:6e:b5:
3c:79:40:54:9d:4f:bc:14:ee:de:62:6e:a2:63:88:b3:a2:2e:
47:a5:46:37:a6:c5:89:05:b7:65:ab:01:0e:b6:ce:26:00:58:
01:5a:03:8d:2c:04:48:e9:c3:ba:76:d3:90:e1:57:dc:dd:03:
e2:d9:ae:4b:c3:bf:e9:03:5b:ef:82:4d:28:0d:f8:4f:f6:3f:
3a:47:31:78:0b:38:18:1a:74:73:4c:88:d2:02:85:15:4d:46:
df:eb:14:eb:b4:0c:4d:5e:e3:d9:aa:a9:43:4d:51:c1:a3:94:
d5:86:7e:08:d3:53:19:90:51:39:64:3b:f2:d4:2b:07:78:56:
ed:fb:b1:e2:02:87:b0:06:1e:c5:97:42:77:22:10:e7:b5:5d:
92:4b:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:30:22 2025 by rpki-client