Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: Fi1fn06TjCH+coih0jlm12ZH/1Wu4DdKBPk1pZazJhI=
Subject key identifier: 16:3B:EC:52:20:DB:78:B5:74:65:ED:44:55:22:09:8A:EB:51:40:7F
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 0199FC586DE969587810CA415BC379AC407B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: v7Cb8BR8TMjGmrVmFKd4/2HJQ4RJuPYDClNxB7cUG9k=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6d:e9:69:58:78:10:ca:41:5b:c3:79:ac:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=163bec5220db78b57465ed445522098aeb51407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:94:4b:4b:05:ca:c6:62:a8:c4:59:86:1c:
3c:67:02:41:ab:9f:65:7a:44:7e:29:71:eb:b6:af:
ef:56:57:34:1e:e0:3f:49:07:83:21:34:03:99:e1:
aa:70:1d:31:82:cd:97:d8:8c:9b:59:be:0a:cc:16:
c1:d9:21:bd:75:9a:a7:1b:cc:7e:d5:47:cb:56:8b:
69:07:53:1b:21:e0:39:ab:1e:31:d4:16:2c:61:b6:
be:84:05:bd:b7:bd:60:97:91:02:c7:6a:5a:02:7c:
79:46:ac:30:1a:5c:19:df:a0:ad:71:41:fa:2d:41:
f9:0d:87:96:8b:55:6d:fb:fc:ad:0e:49:4e:fd:99:
b0:92:fd:71:bc:5e:40:ff:a9:a4:6d:2d:ce:60:9e:
d3:53:86:4d:b7:cf:0e:d5:61:48:77:e0:da:42:c8:
ab:a5:91:7e:3b:9a:f3:84:2d:b4:17:26:01:ed:e8:
7f:97:10:07:44:cb:10:43:21:3e:1e:60:55:83:06:
a6:04:7b:84:76:68:9e:a1:d9:55:44:e4:61:b2:f8:
fd:f5:07:64:0c:1d:ea:21:d2:c4:eb:23:24:28:03:
a8:af:10:93:4a:d3:77:e1:16:a9:24:9c:68:39:46:
19:72:7d:44:b1:d3:c6:29:1c:8d:af:48:ac:3f:93:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:EC:52:20:DB:78:B5:74:65:ED:44:55:22:09:8A:EB:51:40:7F
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:c7:84:68:99:18:9f:c9:85:d6:df:52:03:b4:f1:77:d1:
48:e3:79:cd:c3:7e:cc:5a:9e:46:bd:59:d0:c7:c3:ab:ae:6b:
97:84:44:38:b1:45:75:f8:a9:1f:55:25:8f:b0:52:fb:31:0e:
d5:fd:0b:46:9f:b9:6e:2c:65:3c:53:79:46:ab:45:ca:00:f1:
43:00:ae:e5:8c:38:b0:07:9a:21:8e:a5:c6:fc:41:01:aa:93:
38:54:1e:6a:eb:88:4a:d2:71:02:11:72:12:db:1d:77:42:2c:
12:ad:a9:d7:36:2b:da:e4:1d:97:f3:f3:36:be:10:06:cf:54:
c8:aa:16:41:de:3c:ba:3c:f8:ab:90:88:fa:cc:74:96:11:e9:
f5:ee:7b:f9:f5:8f:15:da:e0:1f:55:00:96:50:14:3a:60:fd:
6c:c7:12:87:ae:8d:c7:d3:62:ac:79:16:a0:02:dc:87:91:04:
f8:0e:7b:16:fd:3e:39:8c:c7:2c:90:55:5c:ab:e4:5a:d0:0c:
14:ba:76:89:1a:0b:31:8e:b0:63:a6:70:cd:71:ec:c2:38:b0:
74:f4:c5:c0:83:da:59:11:f1:1b:c5:74:49:19:db:4a:d7:c6:
ab:41:f1:e3:b7:4c:9f:79:75:4d:15:b5:33:82:3f:86:b5:5e:
53:69:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:19 2025 by rpki-client