Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: SE7JiUbgBXHBINn7T/4ksT7LuWODroEf8q5AKI/6iP8=
Subject key identifier: F9:53:D1:56:B9:83:AC:50:E4:A5:19:68:95:F7:49:92:A4:8C:89:0C
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 019A71B8C87B560D58C6E3AA2252DE938614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0EE9
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: Fm8lZRSKmNQe0LYUiyWM/uUGsybwPhAbBRQlW75RbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c8:7b:56:0d:58:c6:e3:aa:22:52:de:93:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=f953d156b983ac50e4a5196895f74992a48c890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:5b:17:1e:cc:d4:96:3d:16:a9:65:da:c5:
61:1f:ea:c9:3c:38:6c:48:bb:e8:7d:65:a7:ef:ef:
0c:6f:9d:fb:ee:6a:69:eb:d1:da:ce:82:49:86:97:
28:03:e6:22:2e:fa:74:8b:8c:9e:90:4e:70:e8:6a:
c4:fb:19:b1:96:d8:71:8b:d0:22:ba:f7:41:4d:cd:
10:60:e2:c3:54:ed:08:f2:c0:bf:bd:d7:6e:5f:d6:
19:63:77:63:e1:d6:60:df:63:e6:4c:b0:65:5d:9d:
48:bd:a5:ca:b0:56:fa:b5:52:8d:b6:a7:36:b5:2a:
1d:ee:e6:9a:9f:a7:dd:33:ea:7a:7e:d0:e9:e3:d7:
5d:4c:08:6d:d8:9f:05:11:7b:3d:74:e5:d1:0c:0c:
ad:dd:45:c4:3e:28:9c:41:2f:f7:81:c7:fc:72:6d:
ac:c3:50:3a:ac:cc:af:00:b7:43:06:53:e6:2f:95:
aa:59:f7:a8:5e:9c:13:dd:a8:89:bf:ca:67:07:43:
70:81:b6:a6:bb:89:c5:34:07:df:a8:10:9e:e5:3b:
1b:01:2e:05:40:f1:ec:1c:97:92:c3:b1:d8:ed:6e:
52:86:2d:c4:da:8a:a6:5d:e7:03:fc:9f:5e:fd:f3:
54:23:36:1c:2a:56:e1:71:6b:1b:88:aa:d2:4a:d6:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:D1:56:B9:83:AC:50:E4:A5:19:68:95:F7:49:92:A4:8C:89:0C
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e3:00:e3:0a:04:8d:bc:65:04:5b:ce:37:01:5f:e9:51:0c:
31:25:a2:ca:d6:e5:fd:0c:72:66:94:d3:4a:c5:0e:fa:08:41:
78:bb:51:fe:ed:3d:6f:69:fa:e4:94:66:57:a4:4c:45:79:ff:
06:ce:80:cb:8f:53:5d:ef:7a:dd:d9:46:2c:1b:98:ce:af:87:
86:0e:4b:58:31:07:82:61:dd:56:25:0e:8a:16:ea:9c:c7:7a:
61:16:26:4a:ee:a8:c7:38:33:42:85:84:e6:2c:83:3c:15:e1:
da:a0:7f:ef:34:48:2d:33:0d:20:90:f3:8a:d8:02:62:ee:3d:
ff:f9:7e:b1:63:ef:6b:83:f4:61:29:a2:ec:fc:54:3b:56:9e:
ec:46:fd:20:09:3c:df:ea:d3:cf:e0:c7:99:5a:a0:2e:d3:63:
91:3f:38:37:13:29:d3:70:3a:7b:1a:ce:ee:67:f1:40:ed:37:
ee:04:10:b4:01:36:36:44:0a:f1:46:26:16:be:46:8e:e0:00:
8d:48:3c:6d:0b:9d:08:18:a2:83:8b:4a:8a:56:54:0b:12:aa:
85:62:42:68:61:cc:cb:7e:f4:bb:11:95:e5:dc:4f:82:5f:35:
ad:d2:50:86:58:6f:88:74:30:7e:22:68:83:5f:c0:80:fc:32:
8f:63:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:11 2025 by rpki-client