Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier: pp5sw7G79Hr0rRAiSyK+8EnGF7RgkMHwOvwE6YJQbdM=
Subject key identifier: 49:68:F5:2C:7A:39:F0:9E:FD:46:AE:FC:CE:4E:87:25:CE:2B:DC:7F
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 019A0D4C1C01934925C034D16BE366BDB9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number: 0FF2
Signing time: Wed 22 Oct 2025 19:01:22 +0000
Manifest this update: Wed 22 Oct 2025 19:01:22 +0000
Manifest next update: Thu 23 Oct 2025 19:01:22 +0000
Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: EtiIj2tK/RfLLnjWkJsD39JhKsQtSco7Id9/aecfT70=)
2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4c:1c:01:93:49:25:c0:34:d1:6b:e3:66:bd:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Oct 22 19:01:22 2025 GMT
Not After : Oct 23 19:01:22 2025 GMT
Subject: CN=4968f52c7a39f09efd46aefcce4e8725ce2bdc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:4d:39:21:a0:65:40:a6:b8:9c:7a:df:df:
5b:80:f0:f2:18:a2:78:6e:00:8d:d6:a6:76:a1:3d:
5e:e5:1a:34:f2:0f:08:9c:4b:5f:2f:eb:f7:3a:b7:
a0:2c:f4:36:fd:ee:e5:0f:32:1e:63:48:6c:96:2b:
be:92:77:f3:4e:c6:7c:36:8f:f9:06:d0:d3:b2:a3:
5a:e2:72:69:ac:d9:29:bf:5d:ca:f9:8b:89:a4:04:
61:8a:3a:08:64:79:83:a0:b9:a9:3a:ac:8e:91:5e:
30:fc:cd:80:da:25:06:e2:8b:12:5f:b5:34:dd:22:
2c:ee:d2:45:fc:47:ca:b0:c1:1d:4a:ef:73:57:25:
7b:41:63:20:50:16:9e:01:bd:09:77:f1:95:dd:1a:
ef:41:7a:1d:84:1c:7a:cd:08:65:10:a7:d0:d7:94:
97:5c:09:a6:1c:3d:b2:2d:5d:be:db:8e:7b:1e:da:
d2:30:35:1e:fb:5b:af:ad:77:2c:6c:04:25:77:bd:
7f:b0:67:9e:cd:27:d9:1b:ef:c1:d7:f1:c9:d3:e6:
a1:1e:e1:f1:41:75:32:63:40:c2:18:a1:56:a9:98:
f5:c7:89:04:72:94:9f:11:76:b5:28:88:4f:13:ef:
42:ec:0b:09:6b:c7:e8:09:9b:15:c2:13:2c:df:d2:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:F5:2C:7A:39:F0:9E:FD:46:AE:FC:CE:4E:87:25:CE:2B:DC:7F
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:5d:df:ce:cd:c3:c8:07:8a:76:55:cd:91:2b:56:98:fd:
d0:8b:86:b4:76:b3:46:7d:35:f4:d4:92:c1:48:68:fc:35:0f:
ad:19:d8:1b:a5:41:d0:b6:35:82:19:12:76:b0:ab:da:04:21:
d4:65:84:1d:21:b9:01:f8:47:e6:be:19:36:75:eb:53:64:47:
9d:ec:b1:a0:d5:45:4c:72:4e:60:1f:89:bf:d1:5f:79:67:42:
16:1a:e5:94:b6:9b:68:b2:54:29:7c:08:64:63:0e:40:a1:01:
6f:a1:aa:54:9c:1e:52:53:9f:1d:5e:c8:0c:00:3b:e5:3d:b3:
e6:76:35:03:db:22:73:31:90:bf:9c:ff:f9:84:f5:60:33:0a:
ea:42:96:bb:7d:69:28:1c:67:d0:c2:4e:5c:b7:64:87:64:f4:
2a:d5:7c:d8:29:38:67:4f:32:6f:89:3e:fa:ee:b6:61:8a:19:
34:4a:5c:56:1c:02:fe:4a:85:48:aa:bd:5c:4b:33:8d:3c:30:
be:59:15:4b:37:82:0a:bc:db:46:88:b2:a0:02:86:02:27:17:
39:74:7e:e7:a9:d0:2e:aa:34:c5:b6:c6:1b:9b:f4:70:6c:65:
66:59:43:48:27:1a:13:02:e3:f2:58:04:64:d8:fc:e8:f2:b6:
80:e5:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:30:14 2025 by rpki-client