Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: /zPvDeI8LCRPvDwMCuYNKKKsbW/isuqP01ede53AO/g=
Subject key identifier: 4B:A1:6D:6C:76:E1:51:9A:2E:8E:D9:60:9C:BA:06:42:1A:92:C8:E3
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 0197BB2279AF2FEADEE20D28ECE27762A639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0D51
Signing time: Sun 29 Jun 2025 10:01:28 +0000
Manifest this update: Sun 29 Jun 2025 10:01:28 +0000
Manifest next update: Mon 30 Jun 2025 10:01:28 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: aPxlLMUNLNEe3lDp6ZWDP9jFyvIGTqlpH5awMRL+xCs=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:79:af:2f:ea:de:e2:0d:28:ec:e2:77:62:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Jun 29 10:01:28 2025 GMT
Not After : Jun 30 10:01:28 2025 GMT
Subject: CN=4ba16d6c76e1519a2e8ed9609cba06421a92c8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:1e:44:7c:7e:44:e0:0a:95:6f:d8:e1:03:
4c:b1:26:69:c4:4a:f3:52:17:80:c5:62:76:55:ff:
24:ad:18:c8:aa:3c:94:b5:5e:e1:91:44:f6:01:fb:
2c:dd:dd:a0:43:f9:25:69:5e:80:3d:da:d2:31:fa:
06:ce:89:39:10:26:58:8c:49:c1:bc:c8:e6:46:66:
c6:94:4b:0f:5d:b3:38:b8:f5:be:19:8e:ef:0f:15:
ee:3b:80:fb:1e:e8:cb:bb:ee:f5:30:88:b2:7e:a6:
4c:d3:62:02:1c:18:96:75:98:f2:8b:aa:0e:df:99:
96:42:5d:df:d5:1b:c0:c1:8e:50:4e:bf:d7:77:a6:
2d:47:0c:cd:29:02:28:56:5e:69:5f:9e:b9:dd:6a:
17:f1:ec:9e:ee:35:26:46:74:c0:c9:fb:73:8f:0c:
86:d9:c3:7d:46:ea:85:7b:ec:2e:03:5f:38:50:63:
20:99:47:3b:a8:83:de:0f:cf:94:93:da:33:44:f1:
ea:c5:0d:af:e7:52:9d:31:a7:5b:b1:6f:9e:83:12:
5c:ee:98:21:99:db:81:aa:92:b1:1e:59:05:9a:48:
fe:9b:cd:eb:91:8f:91:6c:a8:e8:a6:4d:d9:8f:2a:
70:f4:c1:ce:9c:b2:26:49:49:2f:f4:90:0e:48:2d:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:6D:6C:76:E1:51:9A:2E:8E:D9:60:9C:BA:06:42:1A:92:C8:E3
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:5a:36:0f:91:12:e7:1d:2a:eb:88:4a:0e:9e:dd:61:bc:
ce:ab:55:4f:c5:80:d1:59:45:2b:16:54:fa:ac:16:00:16:cf:
b4:46:bb:f8:60:89:01:e9:d1:f8:31:31:02:c3:0b:01:43:72:
c1:ce:5d:7f:30:d6:a3:8d:7c:4f:d0:cf:94:8b:3a:d7:ee:ce:
79:e6:a4:78:c3:9d:aa:f2:0b:d1:ad:23:ee:40:cd:61:43:2f:
da:99:cb:5f:63:24:a7:a4:e8:23:97:95:06:66:7c:ce:1c:b4:
6a:c3:3c:aa:92:60:c3:bd:89:37:11:29:7f:5a:5b:d0:cd:8a:
d6:b3:9a:e3:45:ec:04:ed:9a:c3:bb:02:4a:48:82:0c:48:46:
24:6f:f9:99:54:18:28:8b:25:17:51:49:22:e4:3c:41:51:1d:
cc:c4:6d:9d:2c:12:20:a7:99:1a:7f:b9:0f:f6:f0:a8:49:85:
43:47:97:0e:b0:10:8f:92:4f:6c:8e:4e:36:bc:c5:29:b0:f6:
49:b2:7e:d4:c2:f7:c0:a1:d6:5c:c2:cc:63:e0:d4:19:9a:1a:
87:7c:a4:db:47:5b:29:f6:76:d7:35:f6:c3:f1:21:e3:77:18:
10:72:f8:90:2e:5f:32:e4:02:f1:fa:35:49:50:0c:cd:c4:bb:
91:91:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:53 2025 by rpki-client