Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier: fGp84pqRO4imsKBJMkAohoAkKWAL0058EdsxZ4iG4vk=
Subject key identifier: 91:18:50:FB:43:BB:F4:39:07:99:99:2C:FD:C5:7D:E4:C1:0D:A9:CE
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer: /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial: 0199FFC7315DA9AB42E4591AF4B44513541E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number: 0653
Signing time: Mon 20 Oct 2025 04:01:08 +0000
Manifest this update: Mon 20 Oct 2025 04:01:08 +0000
Manifest next update: Tue 21 Oct 2025 04:01:08 +0000
Files and hashes: 1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: KuWE2K7bW/ROIKNLEs+mXgdjpqLGgsbYz7tJsmFLKxk=)
2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:31:5d:a9:ab:42:e4:59:1a:f4:b4:45:13:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Validity
Not Before: Oct 20 04:01:08 2025 GMT
Not After : Oct 21 04:01:08 2025 GMT
Subject: CN=911850fb43bbf4390799992cfdc57de4c10da9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:14:0d:70:a8:9a:9f:27:79:01:eb:f2:b5:
66:10:30:a4:bf:8c:ff:cd:ea:38:83:d5:20:9a:1c:
de:81:5b:b5:cb:77:8b:01:08:7f:ca:5f:b5:69:d1:
44:1e:40:95:63:c2:b0:6b:99:04:2c:e0:a5:d8:5c:
46:16:b1:54:f2:8b:a8:23:c5:b7:fa:cf:53:e6:5f:
aa:b7:7f:2f:35:71:c2:90:61:7a:fd:63:8c:9a:56:
88:17:80:a7:a2:1f:ce:22:bc:df:d9:38:f9:ec:0b:
69:d1:db:2c:3f:33:49:fe:29:0c:da:1d:02:58:ce:
fd:e1:5f:29:ec:fc:69:5b:0a:f6:68:71:cb:90:0b:
6f:07:60:c4:e0:a5:f6:4b:cd:85:f0:5f:88:3c:f5:
cd:02:af:50:d8:39:ce:47:ef:0b:b4:96:5e:f5:45:
32:15:d1:49:1d:9d:2c:ff:20:47:42:a3:e7:d2:5b:
ef:98:f4:cb:cd:eb:b8:6e:25:e9:92:f0:e7:a6:0b:
ee:54:71:f2:13:2b:e0:e4:e0:cc:ca:39:ce:52:10:
16:86:a8:5b:2a:be:fe:c3:af:96:a8:b2:c7:e6:0e:
73:30:9d:2d:20:9a:1a:b6:54:f4:70:0e:e2:57:16:
cb:bb:43:29:f9:9c:4f:5d:87:96:84:96:4e:76:7b:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:50:FB:43:BB:F4:39:07:99:99:2C:FD:C5:7D:E4:C1:0D:A9:CE
X509v3 Authority Key Identifier:
keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fb:67:d5:12:dc:20:ec:bb:ed:11:32:16:be:b6:0b:6b:c4:
35:f1:ce:86:1c:8c:3b:da:ce:72:77:c3:12:76:79:03:a2:1f:
85:d4:d6:6c:6f:8e:1f:a9:99:11:1a:a7:93:5c:a1:7c:ba:f2:
e8:b3:8c:f4:bc:67:ec:9d:2d:32:63:3c:06:55:d1:15:a0:9d:
4d:d8:a3:b2:aa:8c:6f:e7:9f:dc:15:fa:1f:ed:69:d8:ca:f2:
ab:ac:6e:81:5a:33:94:6b:b4:89:61:ac:c5:09:59:18:91:cb:
a4:99:17:03:09:9d:78:b0:39:45:a8:31:63:ea:40:cd:51:49:
99:22:53:e4:17:72:d5:c3:20:98:e0:b8:34:1b:5e:d6:0a:44:
cc:9a:f7:df:64:70:83:cd:9e:f2:aa:7f:ad:f1:ac:4a:34:a7:
48:2d:ba:e3:19:1e:57:51:02:31:52:43:2b:6e:9c:f2:22:a1:
7d:eb:12:0e:2c:d8:c3:7b:c4:c9:26:4a:eb:18:44:d7:3d:4c:
f5:93:18:dc:e1:0d:f6:2f:52:6f:15:a8:28:3e:d9:5f:49:3e:
bf:86:fa:c9:29:03:73:50:58:14:9a:2c:9e:e2:24:06:15:af:
7b:d2:31:90:a7:de:cf:33:21:c8:ee:ed:cc:c0:62:cd:aa:b8:
3c:49:91:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xzFdqatC5Fka9LRFE1QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjU5NWYyNjY1OWZjNzRkYjg4MzJkNWRhMjNiMGU5ZTM2
N2ZjYjMwHhcNMjUxMDIwMDQwMTA4WhcNMjUxMDIxMDQwMTA4WjAzMTEwLwYDVQQD
Eyg5MTE4NTBmYjQzYmJmNDM5MDc5OTk5MmNmZGM1N2RlNGMxMGRhOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i8UDXComp8neQHr8rVmEDCkv4z/
zeo4g9UgmhzegVu1y3eLAQh/yl+1adFEHkCVY8Kwa5kELOCl2FxGFrFU8ouoI8W3
+s9T5l+qt38vNXHCkGF6/WOMmlaIF4Cnoh/OIrzf2Tj57Atp0dssPzNJ/ikM2h0C
WM794V8p7PxpWwr2aHHLkAtvB2DE4KX2S82F8F+IPPXNAq9Q2DnOR+8LtJZe9UUy
FdFJHZ0s/yBHQqPn0lvvmPTLzeu4biXpkvDnpgvuVHHyEyvg5ODMyjnOUhAWhqhb
Kr7+w6+WqLLH5g5zMJ0tIJoatlT0cA7iVxbLu0Mp+ZxPXYeWhJZOdnuvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEYUPtDu/Q5B5mZLP3FfeTBDanOMB8GA1UdIwQY
MBaAFD8llfJmWfx024gy1dojsOnjZ/yzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUt
ZjY2NjY5MDlkZDRhLzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUtZjY2NjY5MDlkZDRh
LzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPtn1RLc
IOy77REyFr62C2vENfHOhhyMO9rOcnfDEnZ5A6IfhdTWbG+OH6mZERqnk1yhfLry
6LOM9Lxn7J0tMmM8BlXRFaCdTdijsqqMb+ef3BX6H+1p2Mryq6xugVozlGu0iWGs
xQlZGJHLpJkXAwmdeLA5RagxY+pAzVFJmSJT5Bdy1cMgmOC4NBte1gpEzJr332Rw
g82e8qp/rfGsSjSnSC264xkeV1ECMVJDK26c8iKhfesSDizYw3vEySZK6xhE1z1M
9ZMY3OEN9i9SbxWoKD7ZX0k+v4b6ySkDc1BYFJosnuIkBhWve9IxkKfezzMhyO7t
zMBizaq4PEmRRw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:17 2025 by rpki-client