Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: 9L+b6wJ50T1htbqL7mW/RSvWvKEYQiZhuUOrTkMoewc=
Subject key identifier: D5:98:48:12:5D:E5:04:C4:FA:CA:2C:14:FC:27:E5:8D:EB:43:52:6F
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019922C3221104D8B91A7CFE0F2D298B3431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 0737
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: CDj59C0lHkxIa+DEJV+kGg+mWoWoKmJasZTI9NEEtw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:22:11:04:d8:b9:1a:7c:fe:0f:2d:29:8b:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=d59848125de504c4faca2c14fc27e58deb43526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:7f:4c:56:59:87:e2:c4:74:67:2c:88:c4:
81:7d:59:b7:bb:fb:27:46:f0:4f:06:bd:d9:36:a8:
d3:10:23:43:14:1c:21:f3:27:82:c5:08:15:2f:c8:
38:46:f0:41:2c:df:49:8e:5a:ba:69:49:6c:5a:b9:
22:10:26:d8:ea:3f:f3:c3:92:83:76:58:29:ec:08:
d2:b4:22:1d:6d:ea:ad:8d:48:e6:42:ca:fb:84:db:
1c:af:df:d4:08:a6:d5:7a:a0:51:b4:64:01:f1:c1:
d5:ec:23:36:ed:02:80:12:71:a5:73:aa:5c:20:ae:
eb:40:b1:17:7c:92:92:50:c6:a9:bd:f5:45:cf:ed:
c6:f7:4a:ca:6f:ab:fb:50:fb:7b:4e:5c:24:5a:c0:
c3:44:d8:f5:c1:82:85:1e:11:79:a4:d4:3a:28:31:
93:3a:b6:b5:d1:ff:fb:bb:cc:6f:49:fb:8a:4e:48:
37:1a:b3:16:a1:12:1c:af:80:f4:2b:4e:e8:b6:0f:
ce:e4:c2:eb:57:a3:d3:dd:bc:64:cd:6d:b2:4a:f4:
c6:ac:5e:6a:a1:28:e9:ef:f8:bf:78:e0:40:22:ff:
b6:03:59:4a:a5:b7:02:a8:0b:12:d1:7e:f1:78:ce:
4f:e9:c3:83:02:f6:0d:7b:e7:26:f4:ff:31:c5:e8:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:48:12:5D:E5:04:C4:FA:CA:2C:14:FC:27:E5:8D:EB:43:52:6F
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:15:ef:26:c4:7d:fc:8f:a6:03:23:2b:30:a1:a6:85:08:
6d:0f:36:3a:49:8d:59:13:5b:c3:68:6e:e4:c3:c6:54:4d:2c:
ee:c4:eb:ff:33:85:a7:54:8f:4e:b8:5a:99:7a:db:f3:6f:31:
8c:76:7e:95:b4:a4:b3:52:a1:e8:c4:bd:06:c2:8e:6d:b7:34:
5c:8d:45:52:b4:f6:a9:75:48:77:72:72:03:aa:c1:45:18:59:
22:62:bf:ec:6b:48:79:fd:e2:c5:21:da:ec:36:83:58:5b:4e:
92:d8:8d:f7:98:fa:38:10:1b:91:1a:da:08:2a:5b:a3:e3:33:
ef:02:1d:b1:4a:d2:88:1f:91:03:dd:4f:2e:fa:a9:f5:8b:99:
d2:07:af:f3:a3:06:a1:73:14:19:ad:1c:06:82:aa:d4:7f:f3:
d3:42:f1:ab:ff:e3:57:b3:14:05:e2:85:a5:39:ff:bf:4c:5d:
2f:4f:71:07:28:3c:2c:a5:c3:79:2c:76:ca:1a:09:f3:e8:78:
fb:de:aa:ec:92:c5:23:5a:74:ed:1c:e3:42:db:45:78:5e:fa:
a4:7b:22:68:00:5f:44:54:fb:5a:7b:50:2c:fa:ab:e4:13:4f:
9f:cb:7a:97:49:9f:c6:fb:b4:24:bc:2c:af:1b:57:0a:f3:2e:
9a:d6:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:35 2025 by rpki-client