Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: haddNI72dvox8xoJUVa5RSFWi4nvoz8jWQo32nQam6g=
Subject key identifier: 1A:6A:8F:68:A4:F8:27:50:71:5B:01:0D:A9:8A:8B:E6:9A:FC:DA:36
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 0199FDD92104CE2167B9D7E8BE61F3EC98E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 0EAD
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: ibKmOj8xfaZSenExuzraFP6Nile1Q8XIe+89hko9Ztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:21:04:ce:21:67:b9:d7:e8:be:61:f3:ec:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=1a6a8f68a4f82750715b010da98a8be69afcda36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:40:2f:25:a1:7a:4b:50:85:66:79:a7:fe:
6d:f5:ee:eb:de:2c:6c:9e:a2:54:9e:21:e4:55:e2:
df:d3:ce:84:b4:8b:64:a2:e8:76:bb:21:58:1e:ce:
47:cc:92:ea:e5:2e:55:d5:e6:c1:b4:ae:ec:53:71:
b8:37:1a:8e:50:96:b6:d3:a2:84:a2:c9:2b:5c:d2:
4c:1a:86:32:1b:fa:cf:5a:7a:f9:46:9e:8c:c4:f9:
e8:91:46:4b:8a:18:1b:e5:01:45:90:53:b2:4a:4b:
40:ad:a7:05:63:83:3c:b7:46:fd:59:b2:02:5b:71:
fa:6e:93:9a:6e:3f:60:f4:aa:ed:cf:8b:75:71:58:
89:98:52:36:9f:f3:5e:3b:b8:bd:46:7e:79:3c:5e:
d8:56:67:7d:75:3a:a0:22:d4:72:34:10:5f:a7:01:
0a:d7:5c:61:d1:45:e6:77:0a:fa:b4:e8:b6:35:39:
50:03:54:a4:83:1e:b9:7a:e9:6a:69:be:60:f7:a0:
b6:a1:2b:09:a2:39:78:68:d4:be:cf:e7:05:ad:01:
09:25:60:35:42:94:a6:f3:aa:d1:50:11:89:29:36:
4c:00:8d:69:2e:de:8c:ef:91:e9:ea:87:b5:7c:dc:
62:4f:31:e5:79:42:55:1f:76:da:62:90:f2:74:57:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:8F:68:A4:F8:27:50:71:5B:01:0D:A9:8A:8B:E6:9A:FC:DA:36
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:8d:fd:b3:38:dc:b2:84:57:1e:f7:98:31:f0:ca:94:73:
7a:19:24:0c:f7:66:40:dd:a5:a9:8d:22:8c:80:c4:0e:22:37:
e4:de:3c:c7:b7:3f:07:e8:6e:39:05:32:4e:24:78:c4:28:6f:
fd:cb:0b:ab:ac:5e:7d:39:09:4a:79:84:0d:87:25:ce:d2:87:
49:aa:c8:16:89:fe:25:68:25:97:00:20:83:05:2e:b7:83:56:
a9:c5:fe:de:86:e0:75:6f:70:68:6d:1f:28:8f:8f:c7:69:f7:
2c:d7:ea:78:5c:8f:42:d5:06:f6:0b:a1:7a:f9:1c:d3:52:e9:
47:7e:73:b8:39:40:9d:91:46:c6:d7:4b:6c:83:e3:2f:64:c2:
3c:19:ae:6b:36:6c:32:ba:45:55:ee:a0:6c:0c:96:a8:cb:ab:
8a:27:b6:6d:84:fc:9a:15:f8:c5:06:da:2a:90:fa:7a:4f:40:
f4:55:91:12:0d:23:98:05:fc:07:a2:fc:a1:03:56:38:91:4e:
77:cf:4d:42:87:65:82:bd:83:37:44:5f:be:d4:37:16:8a:34:
ad:5e:80:d6:8e:9e:22:63:06:f0:39:70:0c:af:3d:02:71:a8:
b8:b0:2f:2a:79:18:eb:20:a9:66:94:cb:23:ec:31:46:91:30:
67:6f:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:24 2025 by rpki-client