Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File: pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier: m65zaTaVmk/A8G2CtG4NOeTbfiEg28BjYP03jntT+w0=
Subject key identifier: AD:8D:E2:7B:E3:0E:CC:2E:C7:F5:4E:F2:A4:F8:3B:26:57:61:64:4D
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 0199FC58BE19F8BBAA2378A11BBFD541E67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number: 0501
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: rSz7eiiup+7eHlzDcrHRIsPjhXMN9DSAtIUKG23A5e0=)
2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:be:19:f8:bb:aa:23:78:a1:1b:bf:d5:41:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=ad8de27be30ecc2ec7f54ef2a4f83b265761644d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:c6:92:d0:23:22:5e:2e:c2:10:df:ef:67:
a8:ca:e8:f5:08:38:ec:a3:cb:9f:92:f2:32:6a:7a:
58:6b:f0:3c:a4:fb:f4:74:2a:1f:86:20:15:cd:2e:
34:5a:e5:9c:8c:23:ff:7b:e8:44:52:7a:1b:f5:eb:
d0:dd:05:48:18:27:0e:e4:de:bd:a7:28:76:ae:2c:
d9:94:ba:ac:60:b1:c4:63:57:38:d0:fb:97:7c:99:
3b:f5:ed:27:76:47:60:13:41:01:91:b0:24:9b:b4:
03:c9:1c:77:8e:f7:02:79:64:4f:13:7d:9d:1b:32:
95:31:9e:d4:5c:80:5e:fb:07:3d:72:2e:1e:8b:90:
76:88:8e:bd:6e:e1:88:95:e0:72:dd:71:f5:81:13:
6f:7a:fa:54:61:84:45:2f:91:0b:20:4c:cf:86:c6:
d3:64:df:58:dd:19:57:c0:dc:e0:26:d0:94:86:5e:
f0:0f:8c:92:f2:6d:d3:eb:43:07:d5:1d:bc:f6:5f:
c1:1d:a3:e3:77:f5:e4:f2:ad:3d:fa:e9:0e:94:18:
22:e3:00:2d:e2:a0:fb:4e:77:cb:d9:dd:14:96:26:
a5:f2:69:7b:df:59:3e:1e:50:68:83:e4:c6:96:c9:
70:07:a0:45:c5:c6:df:ab:0d:df:e2:ad:de:0a:7b:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:E2:7B:E3:0E:CC:2E:C7:F5:4E:F2:A4:F8:3B:26:57:61:64:4D
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2c:91:95:43:95:00:d5:14:f1:d8:14:a7:55:5a:31:3b:e5:
b9:2d:fe:38:9c:54:68:d9:e8:5c:ee:67:37:db:9c:f9:ff:79:
39:2e:d2:02:8f:f1:64:df:4b:44:75:c8:35:67:79:7e:94:e4:
74:94:74:87:65:dc:9c:43:c6:3b:d7:0a:84:5d:46:36:e8:b3:
e4:1d:f9:b3:e4:d7:68:a7:3c:88:61:81:c1:84:ac:3d:b0:4f:
fd:5b:49:1a:0d:d0:76:d1:db:1a:74:f4:4a:0a:84:c1:66:6e:
2f:b3:b4:e7:f9:56:c2:fa:2d:2b:97:d1:b5:ef:94:55:79:c5:
47:8c:0a:2e:68:d3:01:aa:4a:e5:10:dc:56:ed:53:c4:fa:f5:
89:01:a6:cb:fd:04:5a:34:41:25:8b:b2:15:5c:7a:25:5e:d9:
8e:a1:1f:cc:ec:de:c5:92:76:df:04:2b:a1:df:78:dd:6c:06:
7a:5b:7b:fe:cf:38:7d:de:bb:73:e3:d0:d3:8b:6a:7e:e9:1d:
5f:ef:96:cc:d1:5c:a2:8e:80:43:f0:18:f8:39:ca:97:05:10:
16:d4:a7:3c:cc:1e:fe:ae:47:61:9b:20:91:84:4a:87:64:1d:
5b:42:0f:9a:b3:78:8a:5f:e9:ff:12:1b:cd:68:12:dd:70:a3:
8c:26:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:56 2025 by rpki-client