Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: bG/LAUczRcuIoXx4ZjAFMh1TX/26hlzA+jO2YeYZ8GA=
Subject key identifier: C2:CF:18:46:D3:B6:05:3A:07:C5:DE:0E:07:60:98:9E:5E:C4:E1:DE
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 0197B6A0A7FD0FB47849FDB2E80D78743988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 12A3
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: OFnuQ1UyQAGFRxif2Tdu1viiMfF2SI1VIrKfye9tG68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a7:fd:0f:b4:78:49:fd:b2:e8:0d:78:74:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=c2cf1846d3b6053a07c5de0e0760989e5ec4e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:a7:e1:af:01:10:40:3e:b3:6a:ce:f0:e6:
ae:79:a5:ae:55:4b:8c:ae:6e:99:3b:36:7d:84:0c:
d6:a0:38:ae:ab:85:50:53:7e:4e:bd:29:41:61:89:
a1:35:d9:51:d5:e3:53:28:f2:fd:81:75:70:20:b9:
22:2e:f9:0f:36:70:71:05:ff:34:61:df:96:02:ac:
d5:6b:73:23:9c:da:04:0b:6c:f3:78:a7:13:33:7a:
9d:b1:47:e0:8d:2b:6a:a7:96:b0:fa:04:95:36:56:
1b:b9:ee:89:ec:7a:7e:be:f4:a4:f1:9b:a1:9e:ae:
2c:21:14:82:d5:4d:0e:9d:ae:a1:73:87:f4:89:f8:
58:c3:0a:5c:42:d0:64:b1:ff:ec:4a:c3:3d:ca:84:
63:b9:16:29:50:b1:71:27:bb:0e:2e:63:10:dd:83:
4e:db:10:db:fe:e0:10:c0:e4:ca:39:5c:18:02:62:
5f:a3:a2:4e:8c:7a:17:0c:f8:05:60:d5:12:d7:ab:
21:9d:79:c5:2d:84:74:95:7c:09:72:10:9f:5b:2f:
7b:f4:0a:e3:e8:b8:a6:a8:08:3e:aa:e0:ef:e2:6e:
12:71:b3:11:f5:56:87:22:07:ef:02:8e:a0:9a:df:
da:2c:a7:ed:84:bc:e4:2b:14:42:17:6a:b9:fb:1e:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:18:46:D3:B6:05:3A:07:C5:DE:0E:07:60:98:9E:5E:C4:E1:DE
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9a:72:ca:24:3f:27:e0:3f:45:77:c5:ea:d2:02:86:67:42:
bd:ec:2a:df:20:69:30:62:00:be:3d:a4:9f:8c:5c:38:6b:10:
41:fc:96:b9:10:9f:a7:69:85:02:18:67:d1:7b:ec:73:77:19:
20:a9:8d:33:0f:69:6d:0a:5b:e7:29:05:f6:5b:6b:c5:74:bb:
3d:c9:b6:45:52:0a:3e:c9:46:9f:ff:07:6a:d4:e6:f1:ac:25:
04:4a:f3:60:cf:04:49:35:95:9c:77:95:4a:6d:f4:a9:83:80:
39:2d:b2:fc:26:8f:fc:c4:16:a6:11:9f:ff:62:b3:d1:2c:4e:
0e:dd:82:88:cf:41:39:52:73:c3:09:b7:3b:74:fd:74:13:46:
28:4b:b4:e1:c6:ea:c5:51:73:0a:56:e3:f4:e5:35:cc:e8:2a:
0c:38:f0:b7:2b:00:0d:ab:ee:4b:61:aa:05:96:d5:4b:df:88:
9d:28:78:99:eb:66:4c:14:4c:24:5f:05:23:73:31:b1:e4:1a:
94:d6:cf:84:5d:8f:6c:df:92:ed:ac:ad:4a:b1:eb:3f:c4:e0:
90:dc:f0:db:cd:5f:29:81:03:c9:df:c4:d6:37:03:f9:fa:38:
d4:9a:ef:45:e0:76:d3:6f:d4:f4:cc:e3:1f:e4:65:e4:b4:89:
cd:cf:d5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKf9D7R4Sf2y6A14dDmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4
MjE0MWEwHhcNMjUwNjI4MTMwMTExWhcNMjUwNjI5MTMwMTExWjAzMTEwLwYDVQQD
EyhjMmNmMTg0NmQzYjYwNTNhMDdjNWRlMGUwNzYwOTg5ZTVlYzRlMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAWn4a8BEEA+s2rO8OaueaWuVUuM
rm6ZOzZ9hAzWoDiuq4VQU35OvSlBYYmhNdlR1eNTKPL9gXVwILkiLvkPNnBxBf80
Yd+WAqzVa3MjnNoEC2zzeKcTM3qdsUfgjStqp5aw+gSVNlYbue6J7Hp+vvSk8Zuh
nq4sIRSC1U0Ona6hc4f0ifhYwwpcQtBksf/sSsM9yoRjuRYpULFxJ7sOLmMQ3YNO
2xDb/uAQwOTKOVwYAmJfo6JOjHoXDPgFYNUS16shnXnFLYR0lXwJchCfWy979Arj
6LimqAg+quDv4m4ScbMR9VaHIgfvAo6gmt/aLKfthLzkKxRCF2q5+x5NbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLPGEbTtgU6B8XeDgdgmJ5exOHeMB8GA1UdIwQY
MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt
MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy
LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIppyyiQ/
J+A/RXfF6tIChmdCvewq3yBpMGIAvj2kn4xcOGsQQfyWuRCfp2mFAhhn0Xvsc3cZ
IKmNMw9pbQpb5ykF9ltrxXS7Pcm2RVIKPslGn/8HatTm8awlBErzYM8ESTWVnHeV
Sm30qYOAOS2y/CaP/MQWphGf/2Kz0SxODt2CiM9BOVJzwwm3O3T9dBNGKEu04cbq
xVFzClbj9OU1zOgqDDjwtysADavuS2GqBZbVS9+InSh4metmTBRMJF8FI3MxseQa
lNbPhF2PbN+S7aytSrHrP8TgkNzw281fKYEDyd/E1jcD+fo41JrvReB202/U9Mzj
H+Rl5LSJzc/V7g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:12 2025 by rpki-client