Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: lJ+Z/6crO1CZmwxY/94F+MkRjlXeol2Cq6Dxc61rGiQ=
Subject key identifier: 4C:FA:E9:A5:E1:3B:48:9C:D9:58:F2:69:88:F7:C5:4B:51:A5:8E:20
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019A04488625A40C34024B3E63135F03FA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0236
Signing time: Tue 21 Oct 2025 01:00:53 +0000
Manifest this update: Tue 21 Oct 2025 01:00:53 +0000
Manifest next update: Wed 22 Oct 2025 01:00:53 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: aKqERJ0ZCTafvk43SB5IQMULTeNzj29zgiHfP30XKi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:86:25:a4:0c:34:02:4b:3e:63:13:5f:03:fa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Oct 21 01:00:53 2025 GMT
Not After : Oct 22 01:00:53 2025 GMT
Subject: CN=4cfae9a5e13b489cd958f26988f7c54b51a58e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:a4:a6:93:52:6f:26:70:d3:33:32:58:4d:
57:90:a0:79:8a:93:bc:66:92:98:4b:f0:f6:0f:d4:
61:53:2a:75:ab:ff:8a:ee:7b:40:2d:19:af:9e:0d:
28:e8:a3:db:e8:ae:48:44:27:2f:36:5e:73:4c:c1:
55:e3:98:4d:3f:7d:7a:37:c8:11:06:9f:f7:a3:00:
eb:86:e4:a1:a5:ca:df:99:eb:7d:65:62:5a:9c:18:
cf:ce:41:e4:64:de:7b:d0:74:2c:4c:4a:37:66:bb:
c8:dd:3a:50:be:b6:a5:6d:54:55:ee:30:cf:37:49:
43:b5:69:e9:c0:bf:b7:31:de:7f:41:86:01:0e:4f:
b0:f2:55:a2:8f:e2:ef:e9:02:77:19:a3:87:d4:0d:
18:13:10:0d:a5:f9:bd:30:b5:af:ac:8c:e8:6f:d1:
db:09:df:d1:36:7d:09:c4:0e:a6:6e:12:29:16:49:
c8:28:8a:ac:95:bf:c9:7b:71:64:5b:39:71:eb:c7:
39:6e:75:20:5d:6d:d9:85:8c:4b:c5:7f:eb:78:c8:
d8:bb:a7:75:3e:1a:07:7b:13:94:e5:e1:87:2b:c2:
99:a1:48:c1:2f:83:12:8c:f7:38:35:db:81:ea:77:
1e:76:ee:da:f3:14:b5:79:a2:94:d7:cb:8b:02:26:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:E9:A5:E1:3B:48:9C:D9:58:F2:69:88:F7:C5:4B:51:A5:8E:20
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:50:bc:94:fb:1b:52:47:ea:f3:95:32:72:b0:bf:91:e6:87:
c0:cc:aa:02:77:d8:4c:11:a0:19:3c:d4:00:67:31:31:0c:1d:
27:3e:ca:b6:f6:dc:8c:be:52:93:10:a1:b1:87:6e:a0:8d:da:
b1:2d:42:45:d6:5a:89:2c:43:56:78:80:3d:68:ce:7f:bc:f2:
5a:5b:b7:88:8a:c1:68:1f:84:d7:5d:d9:e0:1c:d5:b8:e0:32:
80:04:57:11:c3:5f:97:a9:f0:90:e4:5c:6f:c5:22:2b:87:41:
43:e0:02:7b:05:68:7b:e5:3a:fa:5a:78:87:a5:8f:f6:04:dc:
0c:48:c5:88:d2:37:94:85:e4:95:af:6c:ee:4a:2a:02:73:d3:
d7:ee:ae:7c:d4:16:f7:6a:4a:d0:16:75:dc:10:0a:2f:9e:bd:
26:4f:6f:0a:57:7b:20:55:83:02:18:b3:37:a7:41:29:e0:da:
c7:71:f6:80:ca:28:cb:51:20:9f:3e:f2:97:2c:d6:0b:b4:47:
99:6a:1b:4a:bc:83:49:21:19:96:56:ad:98:85:8e:cc:73:6b:
0c:3f:78:aa:9a:13:cc:00:89:65:d3:11:7e:86:a0:d7:53:53:
77:3a:78:c0:2d:4d:00:73:08:4c:64:cc:8d:8e:af:32:2b:fe:
9a:f8:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:39:33 2025 by rpki-client