Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: dxoJuhqbK9GQ8E25cLZZkQXDHUbG7B+SfwQ6aDg5WAE=
Subject key identifier: 03:D5:2F:2F:C8:8D:BF:6E:05:D4:42:8C:BE:46:57:93:21:C4:0E:72
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019A1D2BF887DD7B9E8F404E9CC7EB7EBD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 21:00:12 +0000
Manifest this update: Sat 25 Oct 2025 21:00:12 +0000
Manifest next update: Sun 26 Oct 2025 21:00:12 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: 1K/bLvzx7vqwAGSOnDpQNZ2y6C9Qk9uUn2hgfcUBttc=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2b:f8:87:dd:7b:9e:8f:40:4e:9c:c7:eb:7e:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Oct 25 21:00:12 2025 GMT
Not After : Oct 26 21:00:12 2025 GMT
Subject: CN=03d52f2fc88dbf6e05d4428cbe46579321c40e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:a4:a9:a7:02:87:db:12:d3:81:e2:c5:30:
65:09:d9:70:26:a8:4d:11:14:06:84:10:6e:38:8c:
20:f1:c0:27:ef:08:83:68:fe:31:ac:43:dc:4c:f7:
df:7e:11:b2:7d:06:14:48:4f:93:37:f9:d5:a0:11:
1f:80:83:da:68:5d:84:d1:e6:44:cd:52:57:ef:6e:
63:df:1d:f9:4a:03:ac:a7:74:5a:a7:a5:5f:e3:0e:
a6:76:9c:f0:a9:69:c6:43:ab:a8:0d:c2:20:a9:19:
c8:ab:a7:fb:54:ee:84:8d:95:54:b8:62:3a:18:05:
c2:d5:3f:2d:fe:31:e8:7c:b3:2c:98:e2:8e:77:31:
62:0b:f6:a3:d1:5c:7f:bc:4e:bd:0a:73:ff:7a:0b:
2f:e2:85:10:af:69:2b:b8:da:d7:e4:52:06:26:f7:
86:9e:b7:9b:f4:3a:10:07:21:53:a5:fd:2d:26:05:
a3:b5:b9:e0:3f:d0:33:59:a2:1c:8c:0a:49:fb:51:
90:fc:fe:5e:17:8c:d6:8a:37:58:30:77:a4:8c:04:
f2:d7:ee:75:ae:0a:d3:96:3a:b3:7e:c7:f5:ef:4c:
38:e6:1c:3d:9c:9a:df:b7:63:b1:bc:ae:eb:c0:33:
08:bf:04:fd:8f:8b:ef:50:91:f9:26:cb:1c:61:10:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:2F:2F:C8:8D:BF:6E:05:D4:42:8C:BE:46:57:93:21:C4:0E:72
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0d:30:2c:c6:96:ef:9d:8c:68:83:b9:85:f9:e1:93:50:44:
2f:3d:7a:be:d6:98:e9:50:44:9e:2d:29:05:c5:e0:7e:21:bf:
4c:e1:72:1d:1f:72:1e:96:21:9b:64:d9:5a:91:9e:de:90:4e:
63:4b:70:58:10:d2:21:f4:bd:1d:68:72:84:25:5e:53:1b:13:
08:61:71:d1:b9:35:f8:d1:c8:24:fa:61:4b:cd:b4:46:50:ca:
78:54:c1:4c:4b:72:d6:64:38:36:ad:d5:96:5c:69:03:9d:d3:
89:1a:b9:22:01:43:4a:93:3d:2e:fa:3b:e7:77:9c:d1:0f:88:
d5:f0:81:33:1c:a5:a1:8c:c8:e6:b4:0c:c7:15:c2:46:ee:7e:
c7:23:e5:5b:8f:89:3a:7a:e5:6d:59:4b:23:e8:d3:45:d8:f5:
ef:fa:8f:ea:1e:0c:a9:59:73:02:cd:a4:f2:da:f5:97:2f:ac:
5f:c8:29:05:4e:5d:9e:d9:38:08:13:c4:a2:61:ce:eb:50:73:
7a:54:21:04:2c:67:26:84:34:e1:28:87:ca:9c:db:28:5c:f2:
28:bd:3d:d8:62:c7:3d:cd:72:f8:74:87:34:1b:55:0b:2f:71:
4c:c6:dd:44:55:0f:fe:7c:84:da:94:5a:3f:03:91:68:e3:41:
8f:12:e2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodK/iH3Xuej0BOnMfrfr2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjczYjY4NjFjZjdjZjQ2NDZjYzVlMDQyNzVkNjYxNzYz
NWYwN2IwHhcNMjUxMDI1MjEwMDEyWhcNMjUxMDI2MjEwMDEyWjAzMTEwLwYDVQQD
EygwM2Q1MmYyZmM4OGRiZjZlMDVkNDQyOGNiZTQ2NTc5MzIxYzQwZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIykqacCh9sS04HixTBlCdlwJqhN
ERQGhBBuOIwg8cAn7wiDaP4xrEPcTPfffhGyfQYUSE+TN/nVoBEfgIPaaF2E0eZE
zVJX725j3x35SgOsp3Rap6Vf4w6mdpzwqWnGQ6uoDcIgqRnIq6f7VO6EjZVUuGI6
GAXC1T8t/jHofLMsmOKOdzFiC/aj0Vx/vE69CnP/egsv4oUQr2kruNrX5FIGJveG
nreb9DoQByFTpf0tJgWjtbngP9AzWaIcjApJ+1GQ/P5eF4zWijdYMHekjATy1+51
rgrTljqzfsf170w45hw9nJrft2OxvK7rwDMIvwT9j4vvUJH5JsscYRDHEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPVLy/Ijb9uBdRCjL5GV5MhxA5yMB8GA1UdIwQY
MBaAFD8nO2hhz3z0ZGzF4EJ11mF2NfB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEt
OGI3YzU3YzU2MjE1LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEtOGI3YzU3YzU2MjE1
LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ0wLMaW
752MaIO5hfnhk1BELz16vtaY6VBEni0pBcXgfiG/TOFyHR9yHpYhm2TZWpGe3pBO
Y0twWBDSIfS9HWhyhCVeUxsTCGFx0bk1+NHIJPphS820RlDKeFTBTEty1mQ4Nq3V
llxpA53TiRq5IgFDSpM9Lvo753ec0Q+I1fCBMxyloYzI5rQMxxXCRu5+xyPlW4+J
OnrlbVlLI+jTRdj17/qP6h4MqVlzAs2k8tr1ly+sX8gpBU5dntk4CBPEomHO61Bz
elQhBCxnJoQ04SiHypzbKFzyKL092GLHPc1y+HSHNBtVCy9xTMbdRFUP/nyE2pRa
PwORaONBjxLiUQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 23:31:24 2025 by rpki-client