Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: 5Z/6gSnH7LZDQnN19D+Uw/Vi/xVxlGS/ESTaBZ0s7J0=
Subject key identifier: DD:D4:F5:97:EC:F6:65:E7:AC:8C:7F:41:D7:C6:84:AA:63:23:73:AB
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 0198D5F1937EE214996ECE16B7B893F17FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 9C
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: /5aPZWQS9SRrHlQc3mfsGy01vo/8MzA9PUfYPRAlvjU=)
2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:93:7e:e2:14:99:6e:ce:16:b7:b8:93:f1:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=ddd4f597ecf665e7ac8c7f41d7c684aa632373ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:f9:2a:a9:3e:ed:6c:7a:55:61:34:6f:44:
f3:e4:30:f3:33:75:85:11:82:ac:9d:54:0c:81:b0:
db:04:d8:2c:ec:a6:87:fd:4c:09:b1:31:b1:29:1c:
f1:45:39:fe:db:c2:2a:c0:5f:7f:fe:b7:87:fb:7e:
1e:4f:32:09:b5:46:d6:92:a4:0b:11:9c:02:74:af:
df:aa:c6:66:a3:d1:cd:5d:8e:b4:48:65:d2:93:5d:
53:2c:fc:9d:86:a0:bb:78:ac:0b:52:d1:a8:f4:53:
dd:08:2a:da:b5:df:2d:c3:ac:28:cc:b9:8a:87:d4:
b6:0d:af:80:a5:1b:fd:4f:18:d9:ed:3f:a0:ac:e9:
53:05:a7:c3:20:48:be:6c:e7:b2:b3:28:09:d7:de:
e4:ff:db:24:6e:1f:28:c9:e9:b1:71:1c:3a:af:d0:
f5:97:bb:b2:61:20:e5:7c:31:a7:57:4a:84:fe:ad:
ff:a4:e1:60:4c:e6:71:ef:99:1c:31:62:bf:4b:1d:
4f:dc:2b:ce:a3:5f:7d:53:93:1d:eb:70:65:b2:e3:
16:16:a4:b7:ad:80:91:a2:b0:d7:ad:22:68:e3:5b:
fb:19:c1:45:45:d8:ee:72:41:4a:d8:60:13:19:c8:
68:61:49:a7:23:d9:f9:5c:66:09:df:51:86:65:54:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:F5:97:EC:F6:65:E7:AC:8C:7F:41:D7:C6:84:AA:63:23:73:AB
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:61:04:08:9f:36:e5:e8:ae:03:fc:69:b3:89:f4:6a:4d:
55:6f:3d:1d:f4:b1:ed:c0:0d:9b:8d:1a:2a:ef:27:4a:ac:e4:
db:f0:a8:ab:dc:7e:80:2e:50:1b:ff:63:60:2c:54:c5:93:c3:
66:21:f1:6a:84:cf:2f:dc:7e:e3:f6:96:8e:94:b9:65:72:e8:
39:94:f7:1a:e7:e6:d0:34:ae:c7:59:f9:22:d0:a9:bf:68:77:
de:a8:6a:21:b9:f0:e5:ec:e2:15:bd:7c:96:47:59:81:ec:79:
dd:06:d1:bb:2e:9b:bb:ee:a3:af:c2:64:83:10:76:a7:1c:81:
73:fa:e3:0c:c1:45:cb:ef:1c:af:c8:2e:0b:24:1a:0b:e4:1d:
e9:31:8d:61:79:12:23:01:d7:0c:96:5c:9a:23:1c:33:ee:a2:
74:f2:85:7a:f5:8d:c5:a0:b3:7b:37:87:62:67:6f:63:49:80:
2f:1e:a7:28:a6:ea:f8:63:fe:cd:52:b1:a3:f8:59:a0:06:c4:
1d:51:fd:f8:f8:38:59:3e:45:ad:39:ab:f3:15:f1:7f:30:24:
d5:f0:64:d6:c6:16:a2:ee:8d:87:64:a1:60:a7:4a:54:c7:6b:
f8:e6:09:47:df:2b:44:b5:aa:d2:f0:f4:92:0f:64:29:14:ad:
6b:ca:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:55 2025 by rpki-client