Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: oVUWxdrC8JD0OFNcUG4Wt564ICYwOT1MRa7Z3PRyyw8=
Subject key identifier: 8E:A5:A5:DE:58:03:E3:0A:CB:E9:24:6A:53:07:32:73:50:A1:81:36
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 0199FBEAD1C121D1820CD171A2E8BC1CBB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 07E1
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: OxOgMHKLBlyTZuLNj3zPLiwW9H3pggY9nq6F5GCNXpA=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d1:c1:21:d1:82:0c:d1:71:a2:e8:bc:1c:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=8ea5a5de5803e30acbe9246a5307327350a18136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:8f:ce:77:e4:93:57:3e:de:14:f1:7e:05:
fb:54:16:a4:5a:b4:ab:2c:4b:cb:92:d3:54:c9:8b:
f2:7f:c0:f0:cc:1c:cf:05:4c:68:2d:1e:a4:02:57:
d5:a7:27:27:26:c1:7f:47:8d:2e:c6:be:82:d8:0b:
cb:25:e1:fd:0c:ff:11:87:a4:c9:4b:88:78:2d:4d:
a6:45:32:7b:e4:2b:9e:92:d9:14:48:ab:af:13:84:
e4:1c:2b:6b:bc:e3:6b:a3:06:05:bd:15:85:90:ea:
8c:26:05:fc:91:5f:db:ae:95:12:36:66:84:71:9a:
d6:9c:e3:08:6c:21:11:96:0c:84:db:95:ab:90:a2:
36:b0:5b:5e:2f:8c:2d:48:de:5c:75:cf:c9:6b:ff:
fd:3b:c3:d3:03:21:f5:c4:df:5d:ae:ca:ff:2c:07:
0c:00:ed:f2:f0:0d:0e:de:4f:a0:48:02:1f:e8:cb:
20:40:ed:7f:f6:01:8f:b9:92:37:61:dc:ef:4c:9c:
89:69:24:11:9a:a2:96:c0:51:32:82:9e:e3:b5:90:
7d:3e:4f:76:41:ec:00:23:4a:40:ec:bf:84:1d:40:
88:76:81:84:d5:81:dc:1c:08:4a:7c:f8:86:ee:9b:
8d:ca:25:01:ef:29:2a:5d:b2:91:c1:59:ac:8c:d3:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:A5:DE:58:03:E3:0A:CB:E9:24:6A:53:07:32:73:50:A1:81:36
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:0d:d5:01:02:42:0e:36:65:1c:bf:a9:3a:a8:27:d8:a2:86:
44:50:66:3f:88:3a:bc:af:f3:27:73:4c:77:b4:ce:22:e9:0c:
de:35:e1:6d:64:e7:d3:14:28:46:55:db:0e:3d:64:58:60:70:
d5:de:bb:14:e3:ac:75:1b:55:3b:93:8a:d9:fd:95:a4:68:ba:
ea:42:44:f2:04:40:b4:03:7e:54:fb:da:af:6c:78:9d:f5:52:
3f:7c:fc:25:bc:b5:f1:fd:cc:e6:53:a3:e5:9a:81:3e:4a:08:
d8:a8:5c:7f:60:36:db:a6:d5:b7:1b:78:c0:02:54:6f:57:f8:
c9:42:c1:dd:b2:cd:a6:31:5b:09:15:ef:fb:f4:e0:d0:6a:de:
00:fa:49:a1:7a:d7:6c:07:9e:7c:e8:01:86:6c:c7:47:9a:bc:
8b:f7:83:a8:16:6c:35:14:9a:cc:7e:59:61:1f:c6:3a:d4:6a:
17:70:5e:64:17:58:9e:a7:65:c8:3b:6b:bd:5e:28:f6:c2:5f:
2e:e9:8b:ec:c7:9b:e3:7d:87:44:8d:2a:7e:9a:a5:ad:1d:c9:
65:e4:bb:9c:7d:65:17:38:ff:43:0f:e4:59:f9:fc:ab:1a:b0:
cb:fe:8b:7d:4e:77:fc:cb:26:08:44:de:8e:1d:d3:b2:9a:5c:
46:06:10:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tHBIdGCDNFxoui8HLs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh
YTg2NWQwHhcNMjUxMDE5MTAwMTM0WhcNMjUxMDIwMTAwMTM0WjAzMTEwLwYDVQQD
Eyg4ZWE1YTVkZTU4MDNlMzBhY2JlOTI0NmE1MzA3MzI3MzUwYTE4MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBuPznfkk1c+3hTxfgX7VBakWrSr
LEvLktNUyYvyf8DwzBzPBUxoLR6kAlfVpycnJsF/R40uxr6C2AvLJeH9DP8Rh6TJ
S4h4LU2mRTJ75CuektkUSKuvE4TkHCtrvONrowYFvRWFkOqMJgX8kV/brpUSNmaE
cZrWnOMIbCERlgyE25WrkKI2sFteL4wtSN5cdc/Ja//9O8PTAyH1xN9drsr/LAcM
AO3y8A0O3k+gSAIf6MsgQO1/9gGPuZI3YdzvTJyJaSQRmqKWwFEygp7jtZB9Pk92
QewAI0pA7L+EHUCIdoGE1YHcHAhKfPiG7puNyiUB7ykqXbKRwVmsjNMb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6lpd5YA+MKy+kkalMHMnNQoYE2MB8GA1UdIwQY
MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt
OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx
LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0w3VAQJC
DjZlHL+pOqgn2KKGRFBmP4g6vK/zJ3NMd7TOIukM3jXhbWTn0xQoRlXbDj1kWGBw
1d67FOOsdRtVO5OK2f2VpGi66kJE8gRAtAN+VPvar2x4nfVSP3z8Jby18f3M5lOj
5ZqBPkoI2Khcf2A226bVtxt4wAJUb1f4yULB3bLNpjFbCRXv+/Tg0GreAPpJoXrX
bAeefOgBhmzHR5q8i/eDqBZsNRSazH5ZYR/GOtRqF3BeZBdYnqdlyDtrvV4o9sJf
LumL7Meb432HRI0qfpqlrR3JZeS7nH1lFzj/Qw/kWfn8qxqwy/6LfU53/MsmCETe
jh3TsppcRgYQBg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:44 2025 by rpki-client