Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: Il0BZ33iXYSUNRiD8LYdKlECJ/GH9S0fjJIxrTNruxs=
Subject key identifier: B9:1D:C4:9C:CF:3D:04:8A:50:48:D8:E4:33:25:1F:57:EC:55:01:B8
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 0197B6D760033FA7278D002A123EB3CD606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 06B4
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: wlUH8Wg1MF8FBwketqgdhOg2oKfoyZKDuLWCwLoIVVg=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:60:03:3f:a7:27:8d:00:2a:12:3e:b3:cd:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=b91dc49ccf3d048a5048d8e433251f57ec5501b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:d3:0f:9c:ae:0a:81:f9:60:24:1d:44:64:
ee:d7:83:76:c5:48:b3:98:56:8c:dc:9a:32:9b:a1:
47:2f:4e:fb:30:9e:3b:cd:59:57:c3:3b:b2:de:96:
28:24:e9:b1:bd:8b:ca:84:18:8d:1b:11:44:f8:48:
fb:e6:3c:df:84:5a:cc:ba:00:c8:56:0a:55:39:44:
5f:bd:24:51:80:84:8e:22:75:69:db:d8:ab:e1:7f:
68:2c:c4:64:1e:85:ef:05:a5:38:66:11:87:66:12:
aa:26:87:1f:a7:7d:8b:b8:30:4a:c2:0a:36:de:44:
9d:13:b2:b2:cb:93:c0:65:1e:03:0f:8c:b5:75:0d:
fb:da:08:ca:4d:ad:8f:88:0a:30:72:e4:17:3a:42:
7f:5d:7c:fe:c3:04:36:ad:8b:66:15:15:30:ab:e1:
b1:39:9a:65:c1:eb:b0:47:22:26:c1:53:d2:85:20:
d9:cf:7b:9e:df:5d:3a:3c:a0:11:99:4c:28:25:dd:
c9:2f:c2:4f:d0:fe:52:5b:2a:48:d4:86:cb:0a:d8:
d0:77:85:35:76:61:35:62:c0:c0:17:06:68:97:63:
8a:b8:08:37:95:07:f1:38:fe:d2:48:5e:13:07:ba:
b4:ba:04:04:92:f5:b7:b0:7f:6d:b1:d3:6a:83:35:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:C4:9C:CF:3D:04:8A:50:48:D8:E4:33:25:1F:57:EC:55:01:B8
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:79:9f:3d:1c:40:a6:ae:eb:e9:6a:bd:fd:18:5d:46:bd:
0e:c7:ca:3b:24:fe:19:0a:e4:af:f5:71:fe:f9:f9:e8:1b:60:
28:67:f4:98:21:82:80:fe:4b:da:61:d9:c7:3a:71:f0:97:59:
48:b6:fb:09:a4:b4:ff:18:e3:31:dd:cc:4b:c7:42:ee:92:24:
03:65:56:d8:3f:16:c7:36:cc:ac:9d:99:fa:40:77:8c:56:52:
c9:cf:cd:5e:8f:56:a1:56:07:3c:74:e3:3a:59:9b:c3:d4:ef:
3e:09:eb:4e:6b:bd:92:af:3f:91:17:4c:3b:e7:90:c1:8e:a6:
84:fb:46:0c:7f:b4:99:a0:1c:a3:42:cf:99:89:be:e5:cf:ab:
3b:3f:01:67:4f:55:3c:28:26:b3:17:04:4e:cd:74:b4:fd:f1:
1a:3f:b2:3f:39:d1:95:6b:c9:6f:cd:93:58:74:a2:c2:c5:47:
10:cf:29:0e:13:02:c8:e7:f4:58:7c:c6:67:07:88:36:d3:59:
de:1e:bd:1d:a0:07:d4:df:1f:54:a7:c7:ba:02:c1:0d:85:50:
11:80:59:0b:17:5e:70:78:42:ca:38:ab:f7:65:22:74:c9:be:
62:6c:c0:4a:08:cb:e5:fe:dd:95:7f:39:62:ad:03:c2:fc:ea:
0b:e2:d7:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212ADP6cnjQAqEj6zzWBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh
YTg2NWQwHhcNMjUwNjI4MTQwMDU3WhcNMjUwNjI5MTQwMDU3WjAzMTEwLwYDVQQD
EyhiOTFkYzQ5Y2NmM2QwNDhhNTA0OGQ4ZTQzMzI1MWY1N2VjNTUwMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyvTD5yuCoH5YCQdRGTu14N2xUiz
mFaM3Joym6FHL077MJ47zVlXwzuy3pYoJOmxvYvKhBiNGxFE+Ej75jzfhFrMugDI
VgpVOURfvSRRgISOInVp29ir4X9oLMRkHoXvBaU4ZhGHZhKqJocfp32LuDBKwgo2
3kSdE7Kyy5PAZR4DD4y1dQ372gjKTa2PiAowcuQXOkJ/XXz+wwQ2rYtmFRUwq+Gx
OZplweuwRyImwVPShSDZz3ue3106PKARmUwoJd3JL8JP0P5SWypI1IbLCtjQd4U1
dmE1YsDAFwZol2OKuAg3lQfxOP7SSF4TB7q0ugQEkvW3sH9tsdNqgzWMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkdxJzPPQSKUEjY5DMlH1fsVQG4MB8GA1UdIwQY
MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt
OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx
LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/55nz0c
QKau6+lqvf0YXUa9DsfKOyT+GQrkr/Vx/vn56BtgKGf0mCGCgP5L2mHZxzpx8JdZ
SLb7CaS0/xjjMd3MS8dC7pIkA2VW2D8WxzbMrJ2Z+kB3jFZSyc/NXo9WoVYHPHTj
Olmbw9TvPgnrTmu9kq8/kRdMO+eQwY6mhPtGDH+0maAco0LPmYm+5c+rOz8BZ09V
PCgmsxcETs10tP3xGj+yPznRlWvJb82TWHSiwsVHEM8pDhMCyOf0WHzGZweINtNZ
3h69HaAH1N8fVKfHugLBDYVQEYBZCxdecHhCyjir92UidMm+YmzASgjL5f7dlX85
Yq0DwvzqC+LXYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:53 2025 by rpki-client