Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: cY27vT1vWoPXRd4Bh80c64NGA6aFAte0rRKvh6BHVCM=
Subject key identifier: 25:51:2E:5E:E0:E7:B2:E3:02:6A:27:15:13:96:29:70:7C:63:DA:5D
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 0198D70595D40B7862119557C25FCDFA59E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0DE4
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: JpMiV0mzC/467/Z5zWtpcGAgAZjIWIqnFc5ta1aR/ZE=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:95:d4:0b:78:62:11:95:57:c2:5f:cd:fa:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=25512e5ee0e7b2e3026a2715139629707c63da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:06:13:6c:6c:31:da:32:08:e7:50:45:ae:
9f:97:6e:a7:da:4c:86:c5:06:04:f4:ce:b4:33:3a:
19:71:30:9e:26:ea:fc:0f:1e:cb:3b:b2:b2:8a:f3:
7b:63:c9:a3:bb:0f:34:73:be:97:28:bf:a0:b3:0b:
6b:c4:74:6a:a0:7b:92:47:63:17:cb:e7:e5:a8:87:
49:d6:b6:f8:d2:d9:03:dc:d6:3f:16:34:41:cc:64:
73:f7:e9:99:29:72:2d:8a:1d:ef:7c:cf:88:11:63:
69:e7:3f:ec:84:d8:57:de:8b:4e:df:b9:d3:42:aa:
fa:3d:91:3e:19:98:96:62:5b:f3:e4:b4:1b:af:1d:
a3:8d:09:fc:62:88:08:a4:5f:ad:55:73:f1:a3:ed:
83:61:ba:f2:79:c1:ee:af:53:bd:73:1e:43:05:bd:
ce:dd:4d:22:eb:68:53:7e:c4:71:f3:aa:05:08:85:
42:58:77:ea:8c:7a:7c:ed:79:34:3e:10:75:5d:ed:
8b:6c:28:9a:f2:3b:2b:ab:3b:70:27:e2:23:7b:ff:
a5:ff:1a:18:b9:d8:6b:92:ed:b5:27:66:50:de:44:
b7:8b:87:9e:a8:0e:ae:b5:7d:69:69:f4:4a:a5:4c:
cd:27:e0:e4:b2:6a:09:99:67:bc:14:3d:67:9c:92:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:2E:5E:E0:E7:B2:E3:02:6A:27:15:13:96:29:70:7C:63:DA:5D
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:52:8d:9b:54:a5:15:96:23:17:81:60:33:bb:39:12:54:
bb:08:6b:74:70:bf:33:8b:7d:a8:dd:c5:69:39:0b:a3:fb:4d:
b9:9d:bf:a7:04:8c:a1:f1:1a:d2:27:89:af:7f:bc:3f:11:2a:
ed:d4:6e:13:fd:98:76:3f:0b:69:84:f2:5d:c8:52:f5:65:22:
20:0c:1b:d6:ed:9b:d6:f5:b1:da:49:7f:dc:05:26:42:6c:28:
34:0b:c6:ea:7b:84:74:f3:31:36:5f:4c:89:0c:9a:f8:18:82:
0e:31:25:2d:50:5a:2e:e3:28:26:0f:14:21:7d:7e:5f:51:fd:
aa:e3:de:91:80:17:6e:f5:22:81:ea:13:f5:c2:41:5a:d5:c3:
c1:ab:6d:83:8a:48:9c:35:fe:5d:ca:3e:ad:10:05:f9:c5:3e:
62:45:63:f3:c0:1b:5e:6e:88:76:bd:b2:6c:9a:de:ca:a3:0f:
b2:51:45:84:7e:52:4f:5e:b8:0f:ac:fd:fd:8a:13:ac:92:2c:
0f:6b:a1:07:4c:03:08:21:9d:01:24:d7:f0:d7:bd:a1:bd:99:
50:ec:5f:81:a3:90:33:0e:7e:cb:82:08:90:38:42:26:37:53:
09:ec:79:50:74:7e:7b:d0:0f:ca:e7:d2:a2:43:0f:01:45:85:
c2:6d:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:25 2025 by rpki-client