Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: zv1eHsnZ4vnSQRUOG6D5j5vBixyyDFCI20i9wJ2bdYM=
Subject key identifier: F6:21:90:32:5C:B3:65:CA:B6:57:FE:66:CC:DA:0F:D4:8A:2F:90:03
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 0198D65F26E95D32CB99F85DDA7D647D10C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0BB7
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: 5hNQYKbNIF6Au//7mAVgTYve+KJnnImNfgkUaiC6lqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:26:e9:5d:32:cb:99:f8:5d:da:7d:64:7d:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=f62190325cb365cab657fe66ccda0fd48a2f9003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:7f:79:56:fa:7d:23:39:a1:b3:83:b5:15:
4d:73:96:2c:2f:0a:d1:08:35:80:ab:1a:65:87:f1:
ef:7d:d9:38:ad:77:36:73:1c:23:0a:0d:6f:5b:8d:
63:d0:3b:7c:c1:4e:21:e8:6e:9a:28:52:a2:15:ef:
02:af:40:fc:e9:09:26:3a:d0:00:a9:fc:38:bf:42:
f6:a1:a6:ad:f5:c0:a7:93:b2:a8:d3:d1:19:29:39:
96:9b:bc:8b:ed:9c:c7:f5:b6:e5:a8:c9:d4:97:d3:
d0:e9:fa:10:94:a5:09:00:60:3b:c1:9b:d1:0d:e2:
72:9f:8a:d5:d2:b3:26:9a:cf:39:2b:35:2a:7d:31:
5c:9a:f1:83:68:97:44:01:af:5e:3d:25:e4:6a:8b:
8a:72:c9:1e:0d:ee:d3:71:e7:c7:e6:e5:03:22:43:
22:5a:ac:af:2b:05:90:15:89:04:9b:e9:7f:29:37:
dd:9b:ef:1e:30:81:8c:43:1d:04:42:0c:b3:c3:18:
4c:ac:64:fc:70:11:4a:b3:73:c0:a0:6a:e1:35:19:
1a:c0:ed:2b:21:e0:1a:b8:f3:8e:de:6e:23:36:09:
63:bd:1e:e8:e3:16:1e:f2:84:3f:16:c6:34:64:ec:
91:87:74:c2:0d:38:8f:16:b7:3a:6d:ee:a1:08:6b:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:90:32:5C:B3:65:CA:B6:57:FE:66:CC:DA:0F:D4:8A:2F:90:03
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:f7:77:e3:cd:30:bc:36:58:92:c8:c7:58:6e:c2:04:71:
d1:17:c6:8d:a7:0a:75:e8:be:0d:59:54:23:89:33:6e:f3:10:
89:cd:68:87:79:f5:fd:22:34:f7:a7:f4:4b:8f:8c:49:80:7d:
64:90:cd:2c:28:83:7b:d2:d7:12:fd:53:65:30:ad:ce:88:cf:
a9:d7:d7:58:27:14:64:30:f6:e4:10:04:aa:18:c1:80:24:60:
43:b2:82:5c:33:d3:eb:3f:cf:5e:0d:02:9e:5d:b3:b1:c5:34:
dc:eb:62:fa:9f:ac:9f:ac:45:fb:05:55:66:af:ec:a5:08:22:
a9:33:58:db:53:75:d3:6c:0d:af:7b:ea:32:1e:58:6c:b4:0f:
49:73:26:de:a9:b7:0a:67:5c:fe:f5:c3:c1:bc:c0:56:ec:c8:
6f:fd:a3:da:3b:a2:14:ac:13:c0:54:45:28:4a:d8:06:0f:ef:
b5:e1:17:69:9a:a4:6b:18:45:12:76:a9:4e:c8:c4:ac:0a:9e:
7c:07:b6:32:d4:6a:e5:3a:78:72:a5:03:1c:0f:af:d6:23:77:
6c:11:97:12:26:30:41:93:de:73:64:07:bf:ff:99:b9:8a:d5:
05:6d:06:31:3a:a7:db:5d:d1:ac:1b:5d:ca:4b:02:59:56:95:
7f:90:5c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXybpXTLLmfhd2n1kfRDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGNhOGZhZjNjZWUxYTVlNTFhNWM1Y2RiZjk0ODJhMDAw
MjdiNjUwHhcNMjUwODIzMTAwMDE2WhcNMjUwODI0MTAwMDE2WjAzMTEwLwYDVQQD
EyhmNjIxOTAzMjVjYjM2NWNhYjY1N2ZlNjZjY2RhMGZkNDhhMmY5MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFJ/eVb6fSM5obODtRVNc5YsLwrR
CDWAqxplh/Hvfdk4rXc2cxwjCg1vW41j0Dt8wU4h6G6aKFKiFe8Cr0D86QkmOtAA
qfw4v0L2oaat9cCnk7Ko09EZKTmWm7yL7ZzH9bblqMnUl9PQ6foQlKUJAGA7wZvR
DeJyn4rV0rMmms85KzUqfTFcmvGDaJdEAa9ePSXkaouKcskeDe7TcefH5uUDIkMi
WqyvKwWQFYkEm+l/KTfdm+8eMIGMQx0EQgyzwxhMrGT8cBFKs3PAoGrhNRkawO0r
IeAauPOO3m4jNgljvR7o4xYe8oQ/FsY0ZOyRh3TCDTiPFrc6be6hCGv7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYhkDJcs2XKtlf+ZszaD9SKL5ADMB8GA1UdIwQY
MBaAFD2MqPrzzuGl5RpcXNv5SCoAAntlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDct
NGUxNWI4NGVlNzA2LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDctNGUxNWI4NGVlNzA2
LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiz3d+PN
MLw2WJLIx1huwgRx0RfGjacKdei+DVlUI4kzbvMQic1oh3n1/SI096f0S4+MSYB9
ZJDNLCiDe9LXEv1TZTCtzojPqdfXWCcUZDD25BAEqhjBgCRgQ7KCXDPT6z/PXg0C
nl2zscU03Oti+p+sn6xF+wVVZq/spQgiqTNY21N102wNr3vqMh5YbLQPSXMm3qm3
Cmdc/vXDwbzAVuzIb/2j2juiFKwTwFRFKErYBg/vteEXaZqkaxhFEnapTsjErAqe
fAe2MtRq5Tp4cqUDHA+v1iN3bBGXEiYwQZPec2QHv/+ZuYrVBW0GMTqn213RrBtd
yksCWVaVf5BccQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:35 2025 by rpki-client