Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: +lHRZGhl8OA1v1NYSF+D66gsBWh+koeEm+89wOsEhWM=
Subject key identifier: 22:CE:76:37:9C:5D:3F:95:34:0E:13:CA:E1:9C:18:5A:AD:90:2A:7D
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 0198D4A796DBF38CE5B6C418D9DA4D6B563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0748
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: 2+mbDxyN5rSudOHDo8fz/FWLqE9Fb0uRO/8jsGgJO/w=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:db:f3:8c:e5:b6:c4:18:d9:da:4d:6b:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=22ce76379c5d3f95340e13cae19c185aad902a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:eb:92:54:6d:9f:9b:04:96:0e:78:ad:7c:
1b:8c:6c:02:ac:04:cc:f4:9b:b7:d7:f9:ca:38:b7:
c4:b4:f1:6e:65:d4:32:2d:72:eb:0b:bd:9e:9e:0e:
d8:8e:43:9b:fe:0e:ae:71:e8:72:fb:59:ae:58:c6:
d4:cc:89:fc:06:78:ae:14:65:12:ea:b4:8f:fe:32:
5e:b2:b7:87:d2:7e:72:da:66:22:cf:de:cb:e5:72:
4c:85:a5:7e:77:fe:df:8e:fe:4f:26:3e:c4:97:3d:
2f:65:63:27:44:f6:a2:17:63:30:24:6d:a7:41:b9:
2f:02:b2:ba:f2:f9:a5:6f:de:57:08:9b:6b:c6:06:
c7:04:a5:bd:10:d7:0e:17:88:84:ad:bd:e4:12:cf:
a5:fe:2e:7b:ee:95:f7:72:4f:23:2c:e9:bc:1c:36:
8f:de:cb:bb:e2:0c:16:3a:54:d3:ff:11:23:2b:da:
8a:cb:74:7b:ba:f2:af:e7:41:c5:9c:0c:d5:8e:ee:
4e:90:d0:f1:70:4a:72:60:c8:ac:5b:91:cf:70:a4:
5a:41:52:2f:53:11:6a:59:7f:82:20:b5:18:bb:03:
21:ae:1f:1b:5b:75:49:87:1c:a0:b2:0c:af:49:f1:
16:39:20:9f:92:3a:97:f5:0c:a1:41:e8:3c:b2:88:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:76:37:9C:5D:3F:95:34:0E:13:CA:E1:9C:18:5A:AD:90:2A:7D
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:d4:47:94:c5:4a:7c:9a:e8:82:62:aa:0c:e4:92:4d:72:15:
3f:55:9e:45:cf:0d:b6:51:97:e4:05:42:77:94:17:44:dd:1e:
d9:36:96:7f:3c:e8:6a:99:d4:70:9d:9c:9e:6f:90:8a:07:b3:
17:4b:54:5a:d4:1d:71:57:79:fd:2b:5e:f8:31:6b:09:a9:c1:
13:3b:27:ad:ab:37:4d:63:9e:0c:80:49:1f:27:a7:6e:44:ec:
1a:4a:44:9d:2d:a3:11:97:c4:12:cd:35:71:7d:18:7b:79:09:
07:76:b9:94:d6:17:47:10:ac:0f:75:f2:d2:62:4f:4e:02:9b:
03:03:19:24:d4:01:f3:01:05:9b:b6:d9:c3:77:c9:8d:ac:83:
d2:50:e4:e5:65:43:c5:8e:80:d2:d0:81:33:c2:76:e7:ae:44:
2e:e6:d0:1d:a2:c3:b1:39:49:f9:cc:2e:84:aa:f5:a5:37:bd:
4e:7d:be:60:51:8c:26:09:27:f8:82:70:fb:70:ad:ad:d9:6b:
85:d2:03:44:46:ef:ca:94:26:de:04:7d:73:e2:79:78:a0:d8:
d5:8b:61:1e:83:fc:53:bc:1f:e3:c6:3b:b9:e2:eb:3e:79:7e:
23:52:9d:8a:2d:b8:3e:bf:47:12:e4:2d:c3:fc:4a:95:a1:3c:
f5:64:ea:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5bb84zltsQY2dpNa1Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh
YTg2NWQwHhcNMjUwODIzMDIwMDA5WhcNMjUwODI0MDIwMDA5WjAzMTEwLwYDVQQD
EygyMmNlNzYzNzljNWQzZjk1MzQwZTEzY2FlMTljMTg1YWFkOTAyYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHjrklRtn5sElg54rXwbjGwCrATM
9Ju31/nKOLfEtPFuZdQyLXLrC72eng7YjkOb/g6ucehy+1muWMbUzIn8BniuFGUS
6rSP/jJesreH0n5y2mYiz97L5XJMhaV+d/7fjv5PJj7Elz0vZWMnRPaiF2MwJG2n
QbkvArK68vmlb95XCJtrxgbHBKW9ENcOF4iErb3kEs+l/i577pX3ck8jLOm8HDaP
3su74gwWOlTT/xEjK9qKy3R7uvKv50HFnAzVju5OkNDxcEpyYMisW5HPcKRaQVIv
UxFqWX+CILUYuwMhrh8bW3VJhxygsgyvSfEWOSCfkjqX9QyhQeg8soh0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLOdjecXT+VNA4TyuGcGFqtkCp9MB8GA1UdIwQY
MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt
OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx
LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA79RHlMVK
fJrogmKqDOSSTXIVP1WeRc8NtlGX5AVCd5QXRN0e2TaWfzzoapnUcJ2cnm+Qigez
F0tUWtQdcVd5/Ste+DFrCanBEzsnras3TWOeDIBJHyenbkTsGkpEnS2jEZfEEs01
cX0Ye3kJB3a5lNYXRxCsD3Xy0mJPTgKbAwMZJNQB8wEFm7bZw3fJjayD0lDk5WVD
xY6A0tCBM8J2565ELubQHaLDsTlJ+cwuhKr1pTe9Tn2+YFGMJgkn+IJw+3Ctrdlr
hdIDREbvypQm3gR9c+J5eKDY1YthHoP8U7wf48Y7ueLrPnl+I1Kdii24Pr9HEuQt
w/xKlaE89WTq7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:20 2025 by rpki-client