Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: okKjdyInBFgYPEjkEV6LnRGNH039s+9rncbWD8AOTzQ=
Subject key identifier: 21:EE:A3:2A:7C:73:21:F8:8A:75:15:55:43:36:78:74:55:04:B9:B6
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 0198D660D44A0AC3B84D72A0CCE12E6C43BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 155D
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: v0g8PJ2OtshlV7GbzJ+Zn5X8MCBH7hY7Sy8QuUc3XNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d4:4a:0a:c3:b8:4d:72:a0:cc:e1:2e:6c:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=21eea32a7c7321f88a751555433678745504b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:47:09:c9:8c:f5:93:f8:91:06:af:87:94:
97:41:42:d7:16:18:bc:cd:39:ae:d9:59:be:eb:e3:
48:6e:d5:77:3d:25:6f:d7:ee:39:d8:a4:f1:8a:7e:
de:26:a2:74:bf:8d:46:95:bc:c5:7c:98:2f:0b:22:
3e:40:d7:59:1f:2d:aa:f7:62:72:73:4f:d2:08:b8:
40:67:a7:c2:95:84:df:a4:94:c9:20:59:ad:80:f1:
ce:aa:fb:cc:84:d5:a1:50:0e:90:52:47:66:91:a0:
39:5f:f5:c3:22:01:f5:1d:49:fa:30:35:10:df:6c:
5c:dc:0a:f5:8e:de:04:46:61:03:57:9e:91:cc:20:
0f:69:d6:52:1e:2c:80:85:c2:0c:10:2e:bd:d1:b1:
1b:78:d9:a9:c4:24:b6:b7:65:d6:16:66:ba:16:f9:
45:ec:2e:93:f3:70:dd:68:11:15:9e:b2:eb:b7:83:
b1:76:03:18:8b:6a:bb:9c:2d:80:a6:ab:80:5e:1d:
fa:44:d6:b5:8a:39:24:94:29:2c:d9:04:50:73:bc:
7f:9d:27:31:f7:1d:c2:fd:6c:39:e5:60:51:1d:45:
e9:9e:8a:4b:bb:d1:13:39:85:8f:4e:cf:17:49:ea:
28:71:5e:34:cb:70:14:29:a1:6e:ed:e4:bd:6e:39:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:A3:2A:7C:73:21:F8:8A:75:15:55:43:36:78:74:55:04:B9:B6
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:1b:f1:ac:9b:80:b5:d1:7b:15:de:b8:60:ad:d5:d0:cc:
be:70:c9:8e:b0:de:38:e2:ce:90:17:db:57:2f:71:12:cf:75:
0b:7b:d6:7d:c7:23:e8:9f:b8:e1:4b:b0:c4:b8:78:5b:bd:a8:
a7:4b:c9:b9:6d:74:42:cc:b8:09:ba:8a:40:24:97:a1:85:d3:
60:70:a4:48:cd:24:c8:b2:f2:2d:24:33:a4:fa:0b:13:0b:d9:
92:59:59:ba:2a:c2:7d:9d:55:b9:57:c2:3e:36:61:45:e8:6b:
1d:4f:65:a8:c3:ba:b5:2b:13:fe:e6:03:a6:fc:da:6b:ff:d4:
29:da:32:81:19:44:01:65:8c:1c:1b:77:26:7e:97:4a:63:3a:
d9:69:ab:f6:77:b2:82:e2:1e:bf:45:0d:5f:39:e9:fc:6d:fd:
3b:81:1a:bf:82:db:8e:08:7d:d2:13:77:8d:c6:a9:a8:4a:da:
f7:92:65:2a:32:2f:43:a7:ee:92:ef:75:df:b8:cd:2a:76:5f:
60:2a:68:23:6d:2e:bd:29:03:06:69:5d:86:47:df:8d:f4:e7:
2a:24:e5:fa:61:e7:9e:c8:ab:f3:f2:5c:ec:cf:85:52:6a:88:
c0:3e:63:1e:97:6e:bc:d1:c7:1c:be:7e:fc:ca:d5:ae:59:d1:
93:11:9a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYNRKCsO4TXKgzOEubEO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Mjg4NWVmMjZkZTZkM2IyMjYwYWI2M2QyYzVjYTBmODYz
N2RmMDMwHhcNMjUwODIzMTAwMjA2WhcNMjUwODI0MTAwMjA2WjAzMTEwLwYDVQQD
EygyMWVlYTMyYTdjNzMyMWY4OGE3NTE1NTU0MzM2Nzg3NDU1MDRiOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy9HCcmM9ZP4kQavh5SXQULXFhi8
zTmu2Vm+6+NIbtV3PSVv1+452KTxin7eJqJ0v41GlbzFfJgvCyI+QNdZHy2q92Jy
c0/SCLhAZ6fClYTfpJTJIFmtgPHOqvvMhNWhUA6QUkdmkaA5X/XDIgH1HUn6MDUQ
32xc3Ar1jt4ERmEDV56RzCAPadZSHiyAhcIMEC690bEbeNmpxCS2t2XWFma6FvlF
7C6T83DdaBEVnrLrt4OxdgMYi2q7nC2ApquAXh36RNa1ijkklCks2QRQc7x/nScx
9x3C/Ww55WBRHUXpnopLu9ETOYWPTs8XSeoocV40y3AUKaFu7eS9bjnVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHuoyp8cyH4inUVVUM2eHRVBLm2MB8GA1UdIwQY
MBaAFKcohe8m3m07ImCrY9LFyg+GN98DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAt
MGU3MTgwZjk4NzRkLzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAtMGU3MTgwZjk4NzRk
LzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBUb8ayb
gLXRexXeuGCt1dDMvnDJjrDeOOLOkBfbVy9xEs91C3vWfccj6J+44UuwxLh4W72o
p0vJuW10Qsy4CbqKQCSXoYXTYHCkSM0kyLLyLSQzpPoLEwvZkllZuirCfZ1VuVfC
PjZhRehrHU9lqMO6tSsT/uYDpvzaa//UKdoygRlEAWWMHBt3Jn6XSmM62Wmr9ney
guIev0UNXznp/G39O4Eav4Lbjgh90hN3jcapqEra95JlKjIvQ6fuku9137jNKnZf
YCpoI20uvSkDBmldhkffjfTnKiTl+mHnnsir8/Jc7M+FUmqIwD5jHpduvNHHHL5+
/MrVrlnRkxGaYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:52 2025 by rpki-client