Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: dsL1mpplkH7zEbDWxyrXiGT8iQ4ulMG95PXJvN9FhnM=
Subject key identifier: A1:6C:FC:15:F1:D3:09:FB:64:A0:65:EE:A9:9E:58:2F:C9:76:12:EC
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019A240A2C0650E53E7D92A41B5B0458A718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0149
Signing time: Mon 27 Oct 2025 05:00:37 +0000
Manifest this update: Mon 27 Oct 2025 05:00:37 +0000
Manifest next update: Tue 28 Oct 2025 05:00:37 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: awe+vN+5sfwJlydJgYBI3wgr0GqrjWClZWX2eVhY4LY=)
2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:2c:06:50:e5:3e:7d:92:a4:1b:5b:04:58:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Oct 27 05:00:37 2025 GMT
Not After : Oct 28 05:00:37 2025 GMT
Subject: CN=a16cfc15f1d309fb64a065eea99e582fc97612ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:43:23:ff:e8:4b:1e:d1:71:df:dc:b1:78:
0b:d5:9f:03:15:37:75:62:b0:a8:d2:0b:93:5b:2d:
41:3f:ff:da:d2:ba:e7:fa:7c:c2:58:71:01:a0:9f:
14:93:af:ac:b4:80:5a:72:34:e3:34:d9:fa:15:12:
de:22:c4:0a:13:62:9d:9e:2c:8c:e7:64:87:1e:78:
07:39:18:47:57:e8:e4:dc:76:db:00:3d:ef:14:68:
6c:7a:f6:2d:15:66:75:98:f0:0f:1d:30:de:d8:c2:
55:e2:0d:44:d6:d1:71:c8:4a:ad:d3:46:60:90:12:
11:fc:68:51:04:6d:61:00:8c:d1:65:7d:35:97:4c:
56:41:da:dd:cb:a4:c9:fe:7a:80:03:9a:c1:8b:41:
86:a1:52:ea:10:65:06:03:46:10:fa:98:01:01:d5:
37:3b:78:f4:46:c3:c9:5f:a0:ab:8a:09:57:5e:e4:
30:a0:8d:54:f8:91:d7:48:4b:14:fb:4c:c4:ac:22:
a3:f2:ec:78:aa:44:5c:39:0c:3f:b4:67:a7:a5:34:
ff:38:d2:ad:2b:52:01:cf:b4:57:44:17:00:cf:a5:
6d:d1:7b:e5:80:f3:9e:37:c2:e1:91:38:5f:c5:26:
dc:fa:60:ec:93:70:bd:99:70:ce:67:02:12:5f:2f:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:FC:15:F1:D3:09:FB:64:A0:65:EE:A9:9E:58:2F:C9:76:12:EC
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:83:fa:11:ce:a8:6c:a9:c7:43:06:50:e1:b0:3b:b1:2e:d6:
11:fa:58:72:a5:7b:c6:28:10:03:17:4e:77:7d:28:ee:e9:cc:
73:bf:4d:83:c5:29:54:b0:c2:05:6b:c1:d7:00:c1:d8:db:37:
a8:7b:0d:89:bb:75:9f:df:6b:83:a1:df:9f:00:5f:a0:8f:cb:
e4:b7:82:2c:8e:21:1f:15:5f:14:1d:15:f8:d2:01:af:f5:22:
96:f7:d0:d5:a2:7e:59:3f:15:c5:cb:cb:bb:82:35:54:3d:1f:
46:0e:73:9c:45:ce:da:d1:4a:58:e0:b9:68:ce:83:e6:db:d5:
1e:bc:6b:8c:62:78:e9:ed:0f:bc:6c:f2:d8:3f:a7:d5:cb:8b:
6e:e6:ba:b5:71:9e:00:4f:b8:ab:29:64:c4:8d:33:fa:02:4c:
e2:93:30:50:df:63:0e:e9:17:15:61:58:39:c2:0b:c9:b1:6e:
0a:a5:0a:46:74:0c:a8:92:16:e6:f2:ad:64:20:ff:2d:8e:af:
46:74:74:89:29:cb:bb:0a:5f:f5:5d:ce:72:97:25:ff:3d:ca:
0c:09:dd:ba:c7:9f:bb:4c:ce:8f:39:b7:0d:28:56:0e:32:f0:
4c:65:63:57:32:18:8f:41:a1:b2:d9:ca:53:24:56:4e:a9:69:
ae:58:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:15:46 2025 by rpki-client