Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: oM+GI/XTTIV4qTe26sPwAzxi1gYpkj7FsKMh5KVb1OI=
Subject key identifier: 83:2B:51:26:75:4E:D7:02:28:A8:B9:DD:78:A3:74:9C:7E:B6:7C:87
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 0199225534D7A1FCEA9322336F6160071E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0E0B
Signing time: Sun 07 Sep 2025 04:00:33 +0000
Manifest this update: Sun 07 Sep 2025 04:00:33 +0000
Manifest next update: Mon 08 Sep 2025 04:00:33 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: DUdPVXYa/12/K8QPf56WcYyemxiFMidz2jcdu647P88=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:34:d7:a1:fc:ea:93:22:33:6f:61:60:07:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Sep 7 04:00:33 2025 GMT
Not After : Sep 8 04:00:33 2025 GMT
Subject: CN=832b5126754ed70228a8b9dd78a3749c7eb67c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:d1:6e:bf:6e:28:f0:75:aa:9b:7c:10:78:
3b:e8:96:c6:67:0e:73:cb:ae:b8:fb:ae:d4:4f:dd:
af:48:cb:6a:e2:91:63:c6:83:16:97:84:69:7a:5e:
eb:f6:76:0f:c8:38:1d:30:40:46:11:df:70:b7:a3:
fa:04:3c:a2:1e:da:4e:4d:97:d3:11:15:f5:ee:ff:
e3:60:cc:33:e3:29:b9:b2:76:1b:16:92:9a:be:84:
93:b3:72:51:a1:b0:70:6e:1f:9c:3a:e2:a8:a1:fd:
b1:11:a0:85:90:a1:58:e7:50:f9:e9:3b:0e:53:1d:
62:ae:7b:a1:c8:11:b6:03:94:26:7a:1d:53:50:4c:
83:6a:7e:15:d1:04:2c:2f:79:d5:a1:94:f0:6f:75:
6f:98:57:51:3f:59:fc:55:46:1b:4c:33:68:50:8c:
ee:25:39:29:01:49:2b:e7:c1:ba:c7:7a:2b:60:55:
85:2e:88:fa:8f:b1:b7:2a:fb:d3:24:60:9b:e6:90:
9e:65:f5:f8:22:13:24:bb:42:94:42:26:12:99:d8:
23:34:92:3e:86:f2:5d:5e:c5:5e:5d:f5:10:38:e2:
16:74:ac:9e:58:5b:d6:fe:d0:fe:cd:c4:a5:54:ca:
12:36:7f:23:97:a4:e1:2f:ca:19:6c:fd:64:06:3a:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:51:26:75:4E:D7:02:28:A8:B9:DD:78:A3:74:9C:7E:B6:7C:87
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:73:a7:26:65:a6:af:98:1a:48:21:58:c8:a4:a0:f6:e3:5f:
26:9b:65:a0:67:09:7b:af:fb:ab:e6:d0:5e:59:13:3e:d1:46:
ce:ef:da:30:72:07:16:a8:1d:7a:fb:c1:f2:b7:f6:f3:20:a1:
dd:80:6e:12:8f:9c:2a:cc:9b:e9:54:76:1b:8a:51:d8:8c:76:
72:1e:92:44:a7:af:b9:a5:82:ed:a0:98:07:ea:8d:b2:6a:f3:
3e:b5:d9:e9:01:62:d8:11:3d:c3:53:86:e5:fa:33:d6:d7:a4:
bc:6d:9a:a4:8f:3f:58:70:91:7d:13:a6:cf:7f:c4:e9:7e:7d:
2e:c4:d1:47:fb:e7:c0:c7:49:3a:ef:a1:81:ff:10:0e:cc:3a:
cd:4b:8c:ff:4a:dc:8b:ff:e2:31:63:1c:84:87:16:14:28:3c:
e1:77:ec:17:c3:03:c5:70:1e:dc:d6:b0:8d:35:77:f4:e1:65:
1c:c7:e1:83:2d:fa:91:70:70:2a:af:5e:3f:1c:b6:7d:08:c6:
e5:82:7e:f6:42:fd:6d:51:2e:2e:ec:35:56:f4:5f:43:79:d3:
ff:63:07:c8:8f:4e:27:e1:8f:7f:ca:f6:35:14:8c:da:f2:5d:
0f:a0:b6:15:56:58:fb:2a:0a:b2:ed:6d:93:27:9d:d7:c2:4d:
d9:be:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:04:39 2025 by rpki-client