Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: GOAz4IuIwKQ+P+3rQ5Y0+yDem1cuqHTOw5QY5q89A/E=
Subject key identifier: D4:33:CD:01:20:9A:28:ED:FC:54:AA:90:58:9E:C2:21:95:11:9C:5E
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 0199221E4EAF4D16231C8F66FC11BE13B7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: rT/uHLAnvTGiJtwEW/zJtW851wDSJiPmRiKMdP62EjM=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4e:af:4d:16:23:1c:8f:66:fc:11:be:13:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=d433cd01209a28edfc54aa90589ec22195119c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:8c:56:72:df:f6:78:8a:a4:08:e5:c6:ee:
75:5e:06:ec:98:0d:b3:94:51:01:27:8a:ff:2c:be:
94:b0:43:c3:06:a2:f6:79:58:2b:d1:54:81:84:da:
c4:f6:a0:1d:ab:a2:cc:d2:9d:6e:41:a7:8b:10:87:
27:3a:91:d8:9f:44:24:31:71:b5:b2:2a:47:d8:f0:
5e:25:5f:6b:53:30:a2:0a:7a:8e:4f:c8:33:11:c7:
bd:94:8e:2c:c2:e0:0d:91:36:0c:12:30:1d:35:8a:
08:46:f4:6b:5e:b6:97:a6:24:91:15:ca:6b:dd:f5:
a0:32:7e:c0:d4:1a:be:99:bc:dd:b1:e3:74:40:62:
79:e3:bf:2a:ff:22:dc:a2:6c:dd:1b:3b:d7:8a:39:
f3:8e:0c:e2:4d:6c:d9:39:0a:a4:c1:89:9b:64:63:
b8:41:e3:9b:d6:27:b4:5d:79:1f:59:29:b3:3e:ce:
f0:f5:4c:7c:4d:f8:df:52:7f:7a:f3:e0:45:c6:90:
ac:22:80:90:b3:6d:55:13:9d:03:7a:66:e3:d8:fb:
7a:c6:c6:ec:6c:cd:c9:55:88:c4:8d:45:be:21:69:
e8:09:5b:dd:93:ec:75:22:06:72:2e:6f:de:04:c5:
76:ca:74:21:63:41:f4:0f:e2:c3:93:4b:73:d5:9b:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:CD:01:20:9A:28:ED:FC:54:AA:90:58:9E:C2:21:95:11:9C:5E
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:12:7f:74:5e:8e:43:b6:20:ab:50:57:d4:56:2c:6c:4a:c1:
8c:e1:07:1b:f9:bf:a7:4e:77:13:37:77:41:cb:e0:60:84:e0:
2e:c7:f4:e7:32:18:14:c3:85:56:3f:34:0c:a6:41:0a:65:81:
1a:b8:48:13:bf:7d:96:6c:e0:13:44:7a:ca:c9:74:03:6c:d2:
56:5e:ce:82:de:ac:67:f7:82:cc:07:52:33:9e:b0:d6:8e:38:
2a:ab:11:dd:ba:eb:25:08:2b:0e:89:f9:4c:7e:64:5c:ff:5f:
1a:d2:9e:e5:bb:72:35:d1:79:0e:7b:44:39:8a:2e:b7:42:3c:
c6:c6:e1:40:79:42:60:fa:bf:d7:33:c5:ac:93:77:21:59:ea:
35:94:df:8e:e2:15:91:57:47:2f:3e:ca:2c:ee:0c:09:5a:2b:
ea:d5:b8:73:c0:d0:c9:56:13:ce:15:83:22:c0:92:6a:d9:a7:
42:ed:67:e9:a8:53:ce:69:4d:da:de:29:99:ab:50:3c:fb:6a:
14:3b:fe:59:8a:03:d1:09:30:81:c1:29:a5:4d:22:fa:b7:10:
0d:e7:25:76:b3:7c:c2:80:a5:1b:bb:9f:57:4e:f4:80:99:9f:
b3:ce:a1:be:6f:9b:38:e8:18:30:30:65:46:d0:f5:fe:1d:17:
64:a4:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:19 2025 by rpki-client