
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: skXuwBCL54bKf+yO1yGj+hkvCej1yKkn2WXDwjLMeXY=
Subject key identifier: 57:8F:C1:34:10:02:50:6B:12:98:E0:18:47:82:BE:AD:C8:76:7F:5F
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 019923D63A7648EB110F29FDFE3BB84A642C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0E3C
Signing time: Sun 07 Sep 2025 11:01:06 +0000
Manifest this update: Sun 07 Sep 2025 11:01:06 +0000
Manifest next update: Mon 08 Sep 2025 11:01:06 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: LezJtCEAHh9DvoZHtL+k21KYjtCGE5A709p0Wr7TlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:3a:76:48:eb:11:0f:29:fd:fe:3b:b8:4a:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Sep 7 11:01:06 2025 GMT
Not After : Sep 8 11:01:06 2025 GMT
Subject: CN=578fc1341002506b1298e0184782beadc8767f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:81:08:59:4d:99:cf:11:d9:fb:a5:c0:00:
99:6a:67:0a:50:24:40:22:c4:0d:fa:96:f3:e3:5d:
5c:a6:22:b7:c8:f5:87:7d:d1:2e:4b:bb:77:b3:53:
ea:56:da:9d:eb:d3:49:ca:f3:72:c0:a4:99:72:5e:
57:8f:7c:dc:ed:65:c9:59:72:9d:b0:16:4f:dc:e7:
ec:4c:52:b1:69:62:8a:ce:da:ff:1a:64:4a:f1:02:
99:ac:fd:9b:11:9f:3e:41:7f:fe:44:62:92:58:b0:
49:b9:84:cd:0b:dd:50:7f:77:76:09:ca:6b:2a:46:
1d:df:82:d1:85:2a:39:d7:61:64:f4:a0:e2:4a:62:
9b:b9:b6:e4:ed:ff:2a:b8:40:ce:4f:45:86:7c:4d:
17:64:14:2c:aa:ca:84:47:dc:c9:a4:73:26:c6:7b:
e8:50:e7:a2:c1:f6:d0:f6:d5:de:fc:f7:4f:af:8b:
c6:59:f9:aa:af:71:e3:a9:7c:1d:23:3b:94:6e:31:
96:17:5e:1c:c2:96:66:38:ed:6d:56:74:85:c2:2e:
4d:35:bb:4c:00:ae:1e:44:b3:d5:c7:41:48:ae:a8:
d1:09:5c:2f:67:92:6d:db:fa:80:f7:8c:a6:8e:e8:
62:e8:6b:7e:48:24:4a:33:80:35:e8:e0:ad:88:65:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:C1:34:10:02:50:6B:12:98:E0:18:47:82:BE:AD:C8:76:7F:5F
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:e1:da:56:14:0e:20:69:4f:a6:72:07:5c:b5:18:88:ca:
79:a2:be:1e:03:ea:3b:b6:e2:75:71:b8:b9:9d:87:1b:40:12:
f3:10:42:fb:65:42:4e:6b:4e:f3:d1:30:39:4f:eb:0a:63:68:
6f:6d:86:d9:95:8b:74:61:a2:c1:39:66:6c:f2:b0:fc:60:88:
99:0b:68:ad:a9:c7:31:b2:79:16:9f:5d:16:a9:0c:b4:2a:20:
b9:47:b6:c5:d7:da:a1:ec:89:74:2c:45:07:bc:85:f2:c8:5a:
2f:e4:5f:c5:4c:ad:ce:65:9a:50:7e:eb:bc:b3:d6:bd:6f:cc:
3c:c0:c7:46:15:37:f7:0d:c6:f5:f5:40:21:af:7f:50:7e:9f:
3b:02:e8:71:93:37:79:94:5e:1a:a0:a4:4c:89:e6:cd:72:63:
cd:a3:c5:65:b0:66:bb:dd:8a:d9:df:33:aa:ee:da:34:9d:96:
86:d6:1b:f0:75:c8:e5:23:22:24:dc:8e:48:fc:41:65:b0:a5:
48:8a:5d:12:4f:6e:21:2a:22:e9:e9:0f:21:aa:68:2e:f8:e3:
8d:3d:eb:e9:6f:78:ba:85:c3:c1:5b:dd:30:f0:98:62:30:67:
78:c4:f8:6a:69:a2:55:e9:46:ac:8c:f7:89:1f:b4:6c:5a:b7:
e6:76:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:46 2025 by rpki-client