Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File: pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier: hzIS14gGlAC38Nqz0WNVlht2DLp6RcDkdfTGCSLql4A=
Subject key identifier: 85:DE:66:C8:CF:A0:A4:B3:BF:2F:5E:02:28:32:86:65:93:5F:CC:83
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer: /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial: 019A72CA86ED31193C753504D5106BC969F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number: 06F0
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: iX1sEccaiyppsiUFfGQGSDcl5SGUX4K7XAALFBAOa0c=)
2: zq6R1CnWZYXNrJ9Nu3qaClXC_EI.roa (hash: ak8xaUb5ScJnJTZZZkylfOFl3x6iHQeLyCotCjAzekI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:86:ed:31:19:3c:75:35:04:d5:10:6b:c9:69:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=85de66c8cfa0a4b3bf2f5e0228328665935fcc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:fe:70:9c:26:4b:fe:44:80:bb:7b:0b:41:
6b:f2:7d:8f:27:38:85:d0:7d:e3:f2:46:4e:4e:85:
a8:9f:46:71:5c:87:a2:5b:79:8a:3c:f3:a0:71:fb:
cc:1a:08:ca:c3:6a:de:90:53:0c:ba:92:26:3f:aa:
ea:4e:4b:3a:64:95:7d:86:ed:58:37:46:64:71:0f:
17:37:22:80:4a:8c:0f:22:3c:48:d1:04:e6:4c:a5:
4d:09:ed:6c:d5:06:a1:06:78:d8:53:75:08:41:72:
b7:24:44:f9:24:79:76:24:98:e5:10:39:20:1f:e6:
9d:4a:b7:ce:c8:d9:5b:2e:71:b2:b6:91:c7:50:30:
47:a1:db:9e:12:80:95:83:81:98:49:ef:62:f0:fe:
e9:fe:43:f1:b7:f9:e4:d9:2a:80:83:c2:ae:76:39:
6e:dd:6a:b0:85:e5:7b:1d:4c:b3:c2:dd:f9:9a:e9:
98:48:58:bd:02:8e:01:f7:37:a5:cb:b2:2d:5b:c1:
16:ca:69:43:86:f4:77:40:1d:f0:8f:4e:13:ff:ba:
02:69:9d:de:c4:23:5a:ee:48:2c:cc:2e:9d:54:5c:
23:1b:bb:30:21:4e:a6:15:70:22:94:eb:23:6f:46:
95:f8:a1:ce:8b:a5:b3:e4:c3:6e:a5:0f:54:29:ca:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:66:C8:CF:A0:A4:B3:BF:2F:5E:02:28:32:86:65:93:5F:CC:83
X509v3 Authority Key Identifier:
keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:04:7c:9c:0e:88:bc:a8:a4:11:b9:04:87:ec:13:eb:80:97:
c4:63:db:7b:cb:bc:8f:c1:71:cd:70:b3:09:a1:8c:85:f9:b5:
fc:03:a8:1e:f8:04:49:d8:16:ee:4f:05:60:42:34:35:82:8c:
90:6c:29:4f:30:e2:46:62:56:d5:0e:95:62:ba:c8:26:f2:f1:
82:fe:f6:2b:9a:67:30:85:0e:f3:58:b2:a9:a5:bc:30:e1:40:
6c:8c:a9:01:f8:db:9c:1e:bf:86:7d:42:92:09:bf:b4:5f:ba:
66:d8:7c:fb:32:99:d3:ef:72:69:d2:89:72:91:5b:e8:dd:32:
d1:da:02:e1:eb:3b:01:2c:c1:76:ea:a2:96:8b:f4:b4:b8:79:
14:4a:cc:42:2c:76:43:cd:b7:70:87:25:1f:fd:66:38:e4:11:
39:45:d7:95:a3:74:6e:da:43:a5:ef:bc:1f:fb:8c:86:58:41:
4c:d7:78:85:bc:d5:07:b7:33:5b:b1:60:22:89:42:ba:78:39:
22:57:2a:c8:4e:b4:9b:64:be:89:ed:0d:e6:3f:bf:13:cf:df:
14:e0:8a:99:fd:0d:fe:95:06:df:a2:34:aa:e1:b0:99:e1:d4:
c6:ae:98:f8:39:e7:2c:d0:6e:f5:45:d3:46:c8:3a:84:78:e8:
1f:22:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:38 2025 by rpki-client