Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: wGNaD7Z76wKdIEA8sQOmexX4A59DqkLg2QyCPj17P/M=
Subject key identifier: 30:4D:95:4B:0F:FB:74:5E:E4:CB:A9:6F:AF:35:51:8B:5A:9C:B6:8F
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 019A725CDFBA222B0EE3E1C4E0A090C89CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0EB9
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: 2LIt6W9n8MV9cvscdsc9ygdqxj0VUHz4dUmJ3r3e8xs=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:df:ba:22:2b:0e:e3:e1:c4:e0:a0:90:c8:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=304d954b0ffb745ee4cba96faf35518b5a9cb68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:61:49:a6:ea:de:57:95:9a:81:e8:f9:e0:
90:55:81:75:d5:b3:c2:30:d8:be:83:1f:c7:26:15:
6f:93:be:9e:c6:cd:78:fe:83:85:71:cc:56:91:1b:
66:10:99:15:42:36:96:9a:77:13:07:bc:29:ae:7d:
ee:e7:ee:73:96:70:e0:aa:e8:a4:ca:c7:ce:63:5f:
c7:cb:6e:37:c8:06:17:de:e4:8e:15:78:02:a5:14:
24:b1:57:c7:1e:c3:95:8a:62:da:3c:86:a4:f9:2b:
68:12:3c:8a:87:e6:30:a9:6f:fe:f8:d0:2b:34:db:
5b:7e:33:78:a1:33:a8:70:6b:a8:57:8b:c3:83:1f:
71:6a:1a:25:9c:a8:a7:4f:18:48:f6:f7:11:d9:e4:
ee:da:d7:00:ce:c0:eb:fb:c5:c5:84:2e:cf:51:34:
aa:80:23:41:34:32:a6:c6:26:84:0f:10:13:18:99:
c5:a4:06:b8:39:58:81:52:d9:3e:31:15:ef:b1:5e:
c0:50:cf:2e:0e:ee:15:fd:45:42:ed:3a:13:45:04:
be:55:dc:ab:15:a2:30:fa:a3:49:af:f0:a5:2c:a3:
36:6d:74:b3:c6:57:aa:a0:2b:7c:c8:93:78:e5:7e:
87:49:2a:0a:a7:a9:e6:21:63:49:f5:c3:28:49:cd:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:95:4B:0F:FB:74:5E:E4:CB:A9:6F:AF:35:51:8B:5A:9C:B6:8F
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:16:ee:8b:37:af:24:85:19:6c:4c:b5:21:25:1e:30:ba:54:
6c:b1:93:a0:17:71:27:25:89:18:91:bc:47:55:47:e4:c4:9e:
ee:62:d8:b8:47:0d:fc:49:3c:21:e6:86:23:95:07:af:be:bf:
48:ff:dd:d4:f4:77:17:7f:3a:0f:d3:cd:3d:f2:a7:ea:99:12:
a1:b7:20:40:d7:18:68:07:ab:d4:07:14:36:fa:48:7a:d4:4c:
c1:8a:de:e0:aa:ed:01:9c:90:64:b8:fe:7d:c2:ad:25:e6:14:
f4:46:6b:fd:09:e1:b3:8e:20:13:64:d8:68:9f:33:b8:84:85:
0e:a0:d9:fa:26:a7:6b:74:6b:d5:cc:33:61:03:b0:23:e3:cd:
9c:b6:a4:a4:c4:63:2d:cc:4d:8b:09:a7:31:27:7b:ed:6b:e1:
ce:d4:c3:f1:18:de:7c:33:dc:c1:ab:df:7e:3f:2b:31:ab:45:
f3:05:2f:9e:bd:84:06:a5:5c:d6:aa:d9:0d:22:77:38:43:98:
42:a0:95:f0:89:35:f3:d4:6d:33:43:7a:16:87:60:0b:92:54:
35:7f:8a:d4:59:c6:58:15:d4:1a:83:dd:71:fb:9b:72:65:92:
ef:c5:fa:26:04:40:bb:68:a1:e4:f1:4d:83:c0:94:8c:76:fb:
40:2d:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:59 2025 by rpki-client