Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: s7CWHH67t/+irUJdz3uHGMnfybJVS3nElvZ2bDDUh7c=
Subject key identifier: 57:75:76:56:0C:8D:B4:3B:F6:89:6F:E9:63:0C:5F:65:38:22:D9:EA
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 0198D4E079CD50071C9E112C333BF24FF84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:17 +0000
Manifest this update: Sat 23 Aug 2025 03:02:17 +0000
Manifest next update: Sun 24 Aug 2025 03:02:17 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: KAvnza/hgJCKA8FaH1RA51L3IaPS3QiSErSKD0KIqCg=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:79:cd:50:07:1c:9e:11:2c:33:3b:f2:4f:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Aug 23 03:02:17 2025 GMT
Not After : Aug 24 03:02:17 2025 GMT
Subject: CN=577576560c8db43bf6896fe9630c5f653822d9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:71:ed:7d:2e:3d:12:56:82:f0:44:25:c2:
a4:09:f6:2c:36:b1:e1:40:c2:62:82:8d:0c:59:af:
5b:5d:b0:5a:61:58:c8:43:fd:25:19:e8:bf:31:c2:
93:d8:89:89:86:ae:fd:b0:60:ce:6c:85:dd:ed:dc:
75:3f:a5:9d:8f:3a:09:2c:c0:c4:93:a2:6d:71:8c:
65:04:ca:06:49:a1:08:d2:4a:c6:8f:69:9e:60:fb:
ab:72:95:a8:bd:b2:94:e5:aa:b3:4c:03:ef:d3:99:
5b:02:9c:03:0b:46:0d:0f:5d:0a:f5:66:7f:93:42:
36:93:cf:06:0d:c7:64:0c:b2:ff:e5:ff:1b:c0:8a:
bc:50:4c:2d:b4:5d:a2:6a:0d:18:89:e6:31:56:e4:
51:a5:fc:0a:96:e2:36:c8:36:65:38:d7:34:b3:5c:
12:fa:68:bf:42:ae:61:34:7a:2b:5d:e1:57:39:27:
4f:e2:5a:42:f7:09:77:36:14:56:a4:1a:a7:a3:80:
7a:f5:41:47:b7:45:90:6c:b9:f4:d2:55:d8:3d:60:
30:3a:54:78:c1:48:96:c9:0a:f2:5b:d0:bb:d3:b0:
77:2c:1e:46:87:29:de:b3:ea:e5:4e:06:17:eb:21:
e0:55:bc:00:c3:a2:1a:d3:31:27:59:8e:54:a8:c3:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:76:56:0C:8D:B4:3B:F6:89:6F:E9:63:0C:5F:65:38:22:D9:EA
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1e:4d:b9:f6:d9:35:54:07:c5:92:77:bd:d7:92:13:8d:4e:
a8:f5:ba:4e:0e:19:40:89:9a:a1:3a:a1:2d:b0:95:de:c7:2d:
21:98:9d:96:50:33:37:8a:c9:1d:02:ba:81:61:9f:27:27:bf:
f8:29:78:73:91:ba:07:1e:c1:dc:43:ce:d9:c7:ef:e3:c4:32:
34:55:45:8d:71:f4:de:d4:23:73:83:d2:d8:b1:5d:79:24:ff:
0f:b5:ea:a1:c4:dc:5e:69:42:f9:1a:10:2a:6a:c7:bd:f7:07:
c3:34:fb:0d:dd:df:20:0b:f2:02:97:a0:68:03:fe:4e:16:eb:
26:de:78:d0:04:27:df:3f:1a:e0:b5:77:a7:65:6d:58:d6:89:
43:f5:26:2f:ee:3e:e7:ab:74:10:94:48:a7:75:ab:bd:0c:7e:
5d:cc:78:47:42:0e:a1:27:8f:b5:56:1a:34:75:c6:dc:dd:69:
f6:8c:00:46:e7:90:90:fb:da:11:86:03:fe:d7:bb:82:8c:4c:
ca:6d:6d:fd:21:c1:23:f1:12:69:45:0b:d0:0d:e7:bc:c5:cb:
34:c7:93:42:df:c7:53:61:b5:47:b8:35:da:02:d8:d0:13:b2:
9c:b4:ba:75:26:1a:d0:a9:8f:bf:dc:8e:a3:fe:80:bf:e0:38:
8c:94:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:56 2025 by rpki-client