Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: 1cnYSRWEug6Os4HXsH6d5S3TZ2OMqh8ncUlr3WR9OO8=
Subject key identifier: C9:B9:15:3C:33:18:5C:07:F8:44:83:6C:3A:B0:FB:63:53:9C:D0:4D
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 019A006BFADB0713102F5FD304E92D32FE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0E7E
Signing time: Mon 20 Oct 2025 07:01:07 +0000
Manifest this update: Mon 20 Oct 2025 07:01:07 +0000
Manifest next update: Tue 21 Oct 2025 07:01:07 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: Xd0LykZSrskPLOaIKgWsi4gGWY38/z675saznmrGM10=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fa:db:07:13:10:2f:5f:d3:04:e9:2d:32:fe:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Oct 20 07:01:07 2025 GMT
Not After : Oct 21 07:01:07 2025 GMT
Subject: CN=c9b9153c33185c07f844836c3ab0fb63539cd04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:38:51:fc:ef:02:17:15:fa:c1:d7:28:45:
25:f7:f8:b3:a5:70:15:5e:26:4f:d8:0d:27:81:dd:
5a:7e:b3:21:71:ea:45:0b:ef:6f:c7:10:5d:3e:17:
f2:23:86:17:bc:d0:01:00:ae:ae:67:3b:3b:0d:92:
55:1d:a8:8e:ab:2b:24:82:ee:03:f6:e1:45:f3:11:
f1:17:eb:62:c5:e6:70:d2:b2:79:df:02:4f:e9:6c:
f5:77:05:d2:6b:d9:25:82:85:9f:e5:63:20:f6:4c:
93:bc:3f:a0:76:4f:5a:3b:e0:45:51:78:f2:85:f6:
5d:c9:84:74:8d:cd:e6:6c:b8:64:c0:bb:1e:ff:a9:
3d:fb:d1:d2:ab:15:f8:c6:43:cd:a9:65:21:7a:aa:
08:1b:b5:9d:9b:55:9f:f2:1b:3f:52:ac:90:d2:99:
7e:cb:63:07:ab:1b:72:3c:60:27:0b:6b:2e:5a:5e:
2a:4a:e0:8e:7a:64:84:d8:43:31:52:fc:c8:5f:c4:
9c:de:33:1b:3b:1b:cb:3a:f0:06:f8:43:49:f5:c1:
2e:f5:62:aa:3a:df:70:8f:74:80:bf:7b:bc:61:72:
3e:c8:1c:1e:0d:61:87:65:53:76:9a:c2:5d:f5:58:
ec:46:bd:84:ec:33:29:c4:5d:a1:96:40:f5:ca:0c:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B9:15:3C:33:18:5C:07:F8:44:83:6C:3A:B0:FB:63:53:9C:D0:4D
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:20:d1:6e:1f:b2:6b:ad:90:31:22:a7:e2:7f:9e:09:f2:
d2:4d:f8:d0:f4:f8:ee:31:d2:6c:ed:3f:27:3f:32:a8:2f:cc:
7e:14:ea:3a:2d:61:33:e9:c5:d9:21:c6:21:69:56:e2:1e:d2:
1b:d2:ac:9e:f4:3c:2d:7b:97:d5:25:c7:93:8d:43:50:eb:e9:
2f:bb:31:25:36:15:69:5a:a0:dc:fe:0c:e1:79:2f:63:08:78:
b3:14:66:ce:a3:c1:a4:5c:06:02:56:39:2a:a7:16:30:91:2f:
70:1f:dc:51:9c:a7:ad:08:26:50:aa:73:c9:04:8f:d8:80:2a:
9b:22:ae:cd:01:c8:c1:9b:d4:d7:a5:92:c5:21:aa:c7:4f:40:
4a:30:23:7f:f2:fa:02:dd:d8:5a:4f:49:65:06:77:ad:91:78:
31:80:b4:a2:fa:4d:24:4d:f0:64:87:cf:e3:b3:40:25:dd:6c:
94:e3:21:c9:4c:50:41:3e:21:33:87:28:f8:20:db:08:25:17:
b8:fb:17:17:e2:6e:d7:62:6b:a1:3f:04:a0:c2:61:a2:b1:f7:
dd:70:16:38:d1:8f:7e:d1:03:9d:67:d0:71:44:aa:44:1a:fd:
4e:28:99:b3:cb:ba:1d:64:c7:2a:8f:db:b4:03:b1:a2:5e:95:
21:9d:d7:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa/rbBxMQL1/TBOktMv6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5
OTE2Y2UwHhcNMjUxMDIwMDcwMTA3WhcNMjUxMDIxMDcwMTA3WjAzMTEwLwYDVQQD
EyhjOWI5MTUzYzMzMTg1YzA3Zjg0NDgzNmMzYWIwZmI2MzUzOWNkMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIU4UfzvAhcV+sHXKEUl9/izpXAV
XiZP2A0ngd1afrMhcepFC+9vxxBdPhfyI4YXvNABAK6uZzs7DZJVHaiOqyskgu4D
9uFF8xHxF+tixeZw0rJ53wJP6Wz1dwXSa9klgoWf5WMg9kyTvD+gdk9aO+BFUXjy
hfZdyYR0jc3mbLhkwLse/6k9+9HSqxX4xkPNqWUheqoIG7Wdm1Wf8hs/UqyQ0pl+
y2MHqxtyPGAnC2suWl4qSuCOemSE2EMxUvzIX8Sc3jMbOxvLOvAG+ENJ9cEu9WKq
Ot9wj3SAv3u8YXI+yBweDWGHZVN2msJd9VjsRr2E7DMpxF2hlkD1ygyPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMm5FTwzGFwH+ESDbDqw+2NTnNBNMB8GA1UdIwQY
MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct
NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4
LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqcg0W4f
smutkDEip+J/ngny0k340PT47jHSbO0/Jz8yqC/MfhTqOi1hM+nF2SHGIWlW4h7S
G9KsnvQ8LXuX1SXHk41DUOvpL7sxJTYVaVqg3P4M4XkvYwh4sxRmzqPBpFwGAlY5
KqcWMJEvcB/cUZynrQgmUKpzyQSP2IAqmyKuzQHIwZvU16WSxSGqx09ASjAjf/L6
At3YWk9JZQZ3rZF4MYC0ovpNJE3wZIfP47NAJd1slOMhyUxQQT4hM4co+CDbCCUX
uPsXF+Ju12JroT8EoMJhorH33XAWONGPftEDnWfQcUSqRBr9TiiZs8u6HWTHKo/b
tAOxol6VIZ3Xrw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:42 2025 by rpki-client