Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: 0anvmQHqo3K/7Gs7aMDAtPoQe/CGJtZXVzuHP+ZRsrY=
Subject key identifier: 98:BB:B8:19:45:E9:FE:95:D9:3A:47:A2:34:25:04:35:6A:83:DD:BC
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019A722628CAF1AAC9FA3621505C7BFAE76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: 2Mt074N/GBPAimrbf3byiqthIi6A0W4gsrr00mG0IX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:28:ca:f1:aa:c9:fa:36:21:50:5c:7b:fa:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=98bbb81945e9fe95d93a47a2342504356a83ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b3:fa:93:2c:df:01:8c:02:1d:d4:b0:8b:
a3:4c:12:1c:48:48:f7:b3:42:00:52:21:fb:b7:bf:
04:a1:43:50:c1:4a:14:a3:07:19:d9:6f:3d:ce:9b:
e9:8f:de:ce:24:5c:3b:2e:e7:54:63:f6:6d:63:50:
c7:f6:69:bb:19:78:e4:ee:05:a8:9b:41:99:7e:1c:
d7:9f:d3:1a:d2:a7:fe:c9:13:da:bf:78:75:7d:a1:
0f:9e:20:f6:5a:26:2a:be:cb:da:90:a4:1a:59:c3:
7c:3c:1d:f6:1a:8a:50:c9:77:55:71:77:1f:42:ca:
95:a3:11:28:c8:82:67:52:cd:c9:93:a3:74:38:ce:
00:f5:4b:2c:a7:de:7f:63:5b:80:e2:7c:68:fb:db:
75:09:45:06:9a:f1:ef:e7:4a:7d:ab:34:d0:01:10:
8f:32:f4:84:9d:c3:1e:75:ae:06:2a:22:0e:36:61:
b0:ec:2f:c6:fa:54:88:00:8b:8b:38:15:67:ed:58:
d8:f4:01:a3:fd:e2:b6:8d:5a:2e:5e:bf:f5:d8:70:
42:d0:37:d0:1e:96:3b:63:00:9b:ab:d0:19:40:ad:
05:ef:03:70:5a:31:94:f6:28:e0:46:4e:82:6c:10:
46:0c:ed:b7:a2:6b:f0:d3:78:3b:e2:85:c1:31:80:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:B8:19:45:E9:FE:95:D9:3A:47:A2:34:25:04:35:6A:83:DD:BC
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8d:16:4d:fe:19:af:96:36:e3:8d:b6:ec:71:dd:95:77:93:
ee:28:79:d9:2e:5f:9a:4c:87:d4:fa:ea:53:38:77:31:cc:a5:
10:e1:34:ff:2d:cb:9a:06:7a:1c:f4:8d:fe:24:79:2d:44:3e:
8f:54:eb:ea:03:13:fa:b0:fa:c5:d9:fa:f8:34:43:2d:c2:1c:
f8:23:21:01:51:a1:96:1e:2a:b1:88:b6:fd:05:b7:11:ea:b4:
20:0d:c0:af:35:d8:d6:ff:eb:7d:38:3a:07:91:75:a8:84:44:
be:62:64:b8:8e:d4:f8:b6:9b:df:1e:b5:3c:90:18:17:78:4a:
e1:b0:6d:c8:24:23:70:b8:ef:8f:c7:69:d3:75:a7:81:27:c0:
f2:a1:ab:00:7b:a3:4e:97:45:2a:10:93:68:95:8e:0f:3a:5b:
f4:98:5f:b1:37:69:77:25:03:ff:88:13:c5:5c:36:d0:a4:05:
46:05:2d:10:ff:48:73:4a:53:5d:f8:92:58:87:a1:6a:4a:f4:
e0:cc:d1:03:78:f7:c5:f8:6e:39:36:20:f2:f2:96:57:9d:b6:
0e:bd:39:24:67:0a:f6:bf:6d:dd:03:d8:31:9a:6c:ae:43:d4:
a9:81:fe:00:14:e9:79:ba:0d:6a:12:c2:2d:bd:a9:9b:a8:18:
ec:79:82:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJijK8arJ+jYhUFx7+udrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjRhNDMyMmU4ODMxMmM4MWY0NjlhYzlmZmE3MzBkZjE0
YjMzODQwHhcNMjUxMTExMDkwMTM0WhcNMjUxMTEyMDkwMTM0WjAzMTEwLwYDVQQD
Eyg5OGJiYjgxOTQ1ZTlmZTk1ZDkzYTQ3YTIzNDI1MDQzNTZhODNkZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscGz+pMs3wGMAh3UsIujTBIcSEj3
s0IAUiH7t78EoUNQwUoUowcZ2W89zpvpj97OJFw7LudUY/ZtY1DH9mm7GXjk7gWo
m0GZfhzXn9Ma0qf+yRPav3h1faEPniD2WiYqvsvakKQaWcN8PB32GopQyXdVcXcf
QsqVoxEoyIJnUs3Jk6N0OM4A9Ussp95/Y1uA4nxo+9t1CUUGmvHv50p9qzTQARCP
MvSEncMeda4GKiIONmGw7C/G+lSIAIuLOBVn7VjY9AGj/eK2jVouXr/12HBC0DfQ
HpY7YwCbq9AZQK0F7wNwWjGU9ijgRk6CbBBGDO23omvw03g74oXBMYCxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi7uBlF6f6V2TpHojQlBDVqg928MB8GA1UdIwQY
MBaAFD8kpDIuiDEsgfRprJ/6cw3xSzOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDkt
ODkyYjViODJkNjY0LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDktODkyYjViODJkNjY0
LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvY0WTf4Z
r5Y244227HHdlXeT7ih52S5fmkyH1PrqUzh3McylEOE0/y3LmgZ6HPSN/iR5LUQ+
j1Tr6gMT+rD6xdn6+DRDLcIc+CMhAVGhlh4qsYi2/QW3Eeq0IA3ArzXY1v/rfTg6
B5F1qIREvmJkuI7U+Lab3x61PJAYF3hK4bBtyCQjcLjvj8dp03WngSfA8qGrAHuj
TpdFKhCTaJWODzpb9JhfsTdpdyUD/4gTxVw20KQFRgUtEP9Ic0pTXfiSWIehakr0
4MzRA3j3xfhuOTYg8vKWV522Dr05JGcK9r9t3QPYMZpsrkPUqYH+ABTpeboNahLC
Lb2pm6gY7HmCLA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client