Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: 2GhE1zB0SyfBvVZzvVWvGcmtH7CxeP5hSwVWnMfUppU=
Subject key identifier: 65:84:F4:17:47:29:DC:B6:DA:00:AB:3B:4F:06:1A:39:38:AC:E8:CF
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 0197B70EEA8D4C4679279D4B0E7371D3AE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: uZYilxf7CkkonC9v34ADPfKhjd0vDmqYqXnylMySLas=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ea:8d:4c:46:79:27:9d:4b:0e:73:71:d3:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=6584f4174729dcb6da00ab3b4f061a3938ace8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:33:ab:e4:04:5a:43:72:48:c1:ef:50:71:
5a:9b:f2:bb:34:5f:eb:ea:92:8a:a0:06:a8:13:d0:
e7:0e:2d:f4:d8:24:07:2e:24:1e:5a:be:78:03:90:
59:84:fb:1d:15:93:d3:b2:b1:a2:74:21:07:4e:03:
9a:1b:ce:2a:9d:39:4c:0c:8e:7a:2f:b4:2a:b4:46:
37:6c:70:a3:68:f2:4d:9b:70:da:fd:3e:4c:48:6f:
7d:72:e6:d9:e7:22:12:b1:5a:e0:15:b0:1e:8a:7a:
ad:d2:8b:92:0a:97:ce:b9:80:19:c9:15:7a:b2:5d:
e6:c0:55:a0:60:eb:fb:35:a0:a6:29:7d:98:43:ff:
41:24:00:1c:3b:fc:ff:28:40:32:9b:da:07:91:c7:
0f:d6:bc:d1:8e:fa:79:00:30:48:58:38:e8:b5:7d:
9c:43:f1:43:fc:a5:f6:1f:fa:9d:a9:1f:38:41:7a:
57:e2:b1:b2:f9:98:b1:fd:48:69:df:a9:e8:0f:13:
49:ca:6c:7e:03:ab:91:05:13:e2:29:03:57:55:c0:
c7:d3:a6:a2:dc:99:99:fc:40:4b:d6:cf:7e:91:3a:
cd:e0:1a:14:a0:49:04:e7:75:8a:61:52:a7:41:ba:
ec:17:f3:c2:92:fd:72:f6:3f:5a:7f:67:45:f3:19:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:F4:17:47:29:DC:B6:DA:00:AB:3B:4F:06:1A:39:38:AC:E8:CF
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2b:87:cf:8d:03:ab:78:12:4a:87:e2:07:1a:a1:37:a2:33:
dc:b1:0c:17:a7:ee:5e:a8:1f:de:d8:c8:f3:de:eb:0e:58:92:
a3:9e:42:1a:40:ef:b3:80:9d:db:96:90:aa:07:ce:29:3a:88:
54:23:ab:fe:c7:11:d2:eb:76:b6:d9:94:9a:43:7f:80:aa:e6:
ca:04:90:85:19:d6:de:5c:0c:cf:71:14:d4:a2:02:98:81:61:
e9:12:e5:d2:e2:bb:75:ee:e2:7b:0e:d5:db:7b:26:55:c1:b1:
57:e9:a3:7b:d6:24:0d:4a:a7:b5:f7:42:08:0d:62:b9:1e:5f:
6d:d6:8e:38:d9:fb:1c:27:b6:f7:4b:38:ce:ae:5d:40:f5:23:
9d:e9:a9:a3:26:f9:0d:b7:32:e8:02:2c:0c:96:cd:97:c2:b3:
c5:b8:8f:7f:62:b6:e8:80:97:51:8f:66:57:bb:d1:98:8a:90:
49:69:dd:60:64:1e:27:e7:e3:93:af:2f:31:a2:4a:51:57:52:
76:7c:a7:18:f0:3d:d1:8a:df:1c:e5:6d:ed:a5:a0:4a:e3:f8:
f0:32:ef:16:98:38:80:49:26:e1:00:e2:7e:c2:82:83:04:13:
e0:63:f6:f4:75:eb:0a:0c:97:77:d9:89:c4:ad:55:54:37:38:
cf:40:54:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuqNTEZ5J51LDnNx066TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjczYjY4NjFjZjdjZjQ2NDZjYzVlMDQyNzVkNjYxNzYz
NWYwN2IwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD
Eyg2NTg0ZjQxNzQ3MjlkY2I2ZGEwMGFiM2I0ZjA2MWEzOTM4YWNlOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Ezq+QEWkNySMHvUHFam/K7NF/r
6pKKoAaoE9DnDi302CQHLiQeWr54A5BZhPsdFZPTsrGidCEHTgOaG84qnTlMDI56
L7QqtEY3bHCjaPJNm3Da/T5MSG99cubZ5yISsVrgFbAeinqt0ouSCpfOuYAZyRV6
sl3mwFWgYOv7NaCmKX2YQ/9BJAAcO/z/KEAym9oHkccP1rzRjvp5ADBIWDjotX2c
Q/FD/KX2H/qdqR84QXpX4rGy+Zix/Uhp36noDxNJymx+A6uRBRPiKQNXVcDH06ai
3JmZ/EBL1s9+kTrN4BoUoEkE53WKYVKnQbrsF/PCkv1y9j9af2dF8xlAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWE9BdHKdy22gCrO08GGjk4rOjPMB8GA1UdIwQY
MBaAFD8nO2hhz3z0ZGzF4EJ11mF2NfB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEt
OGI3YzU3YzU2MjE1LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEtOGI3YzU3YzU2MjE1
LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiuHz40D
q3gSSofiBxqhN6Iz3LEMF6fuXqgf3tjI897rDliSo55CGkDvs4Cd25aQqgfOKTqI
VCOr/scR0ut2ttmUmkN/gKrmygSQhRnW3lwMz3EU1KICmIFh6RLl0uK7de7iew7V
23smVcGxV+mje9YkDUqntfdCCA1iuR5fbdaOONn7HCe290s4zq5dQPUjnempoyb5
Dbcy6AIsDJbNl8KzxbiPf2K26ICXUY9mV7vRmIqQSWndYGQeJ+fjk68vMaJKUVdS
dnynGPA90YrfHOVt7aWgSuP48DLvFpg4gEkm4QDifsKCgwQT4GP29HXrCgyXd9mJ
xK1VVDc4z0BUzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:50 2025 by rpki-client