Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: ylbd7GDzEzHTGLmokdIxfTKMmO8ppyMh55fLlZ66hX4=
Subject key identifier: D7:E3:74:B1:DC:5C:F8:19:F0:6F:08:74:32:C3:95:6D:48:91:D9:61
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0198C79293312A258B28715A366E98DABCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0192
Signing time: Wed 20 Aug 2025 13:02:08 +0000
Manifest this update: Wed 20 Aug 2025 13:02:08 +0000
Manifest next update: Thu 21 Aug 2025 13:02:08 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: nYSRU3eEZKk54RnOTNTAr1BH0UW8jjalkyJ1YsQR3U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:93:31:2a:25:8b:28:71:5a:36:6e:98:da:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Aug 20 13:02:08 2025 GMT
Not After : Aug 21 13:02:08 2025 GMT
Subject: CN=d7e374b1dc5cf819f06f087432c3956d4891d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:3c:30:95:2a:b5:b4:c2:5a:dd:13:b0:12:
39:eb:b6:b3:63:04:ef:c7:6c:6d:0e:57:85:de:6c:
6c:a8:3a:80:7f:05:d6:31:6e:4d:94:b7:f1:d7:79:
bd:6c:99:4c:22:f1:fc:4f:bd:c4:75:a0:cd:a4:ff:
3d:56:f2:74:66:e6:dc:09:51:dc:7a:04:e7:46:6b:
23:f3:0c:20:88:9c:5f:43:33:1d:d6:45:c9:63:ae:
52:29:7b:62:be:d2:7f:4f:46:4c:c1:2b:73:af:4e:
14:c6:f2:b9:c0:03:94:cc:e7:e1:52:d7:58:c7:39:
69:9b:ab:48:43:3f:26:ce:87:c3:a9:2b:0b:82:0b:
e7:3f:98:26:db:79:28:c0:fa:a5:31:3c:58:53:20:
d3:43:75:f8:26:1a:96:a4:64:4c:60:88:7b:48:04:
ac:d4:c3:4a:96:3a:ec:2f:65:a5:9b:b6:dc:48:a2:
da:94:16:41:70:e5:62:9b:1d:d7:7a:6c:68:38:83:
a9:5e:65:56:37:54:54:af:bf:f2:e7:85:c3:35:4b:
e0:b7:a7:07:b4:ec:a9:c2:ad:7f:0d:e0:33:ab:2b:
c9:1c:5b:65:4d:14:e5:c7:6c:0a:4b:9e:05:f0:8e:
82:a6:6e:95:18:12:cb:da:56:1d:0d:61:cd:47:14:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:74:B1:DC:5C:F8:19:F0:6F:08:74:32:C3:95:6D:48:91:D9:61
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:be:0e:d1:c0:0c:b3:1d:db:da:47:28:c6:7c:f2:e6:72:
83:a7:cb:54:d2:de:25:67:c4:3d:1d:5f:a2:b9:f7:59:5a:35:
00:01:71:6f:09:6e:1f:c6:ba:76:11:b7:53:26:fa:3a:95:fd:
14:a0:fe:66:a1:64:dc:dc:a2:e5:d8:e5:b3:f5:a2:87:ea:75:
d9:59:2f:66:69:53:33:07:ad:7c:f8:1f:f5:d4:91:60:00:c3:
50:38:b9:ac:98:a1:80:fc:4f:07:15:60:cd:39:75:36:72:cf:
4f:9d:0c:8f:e1:77:02:21:77:77:94:16:0c:87:57:ac:bc:34:
f8:80:93:94:22:b1:74:2d:61:81:ce:c4:46:a6:56:e9:f3:ff:
9d:39:05:d6:82:59:ef:76:8f:02:58:9a:ea:fe:62:96:af:97:
a6:61:99:02:07:72:32:c6:51:5f:8c:de:e5:b2:f3:a4:b0:ea:
ac:fd:73:51:62:1b:6c:7c:5b:f9:9d:07:2b:cc:15:34:5e:ac:
b9:18:c2:f3:20:ee:e4:72:97:c5:6d:0d:72:bd:a4:46:e1:f8:
f9:74:5d:dc:dc:93:9b:df:f6:66:81:ec:f9:82:49:4e:a6:66:
68:01:95:2c:65:74:42:1d:a5:33:9b:3f:04:df:4b:64:12:42:
64:67:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:24:44 2025 by rpki-client