Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: rGUf1Y3sqBG6WEmX12He3918CoU5VKt0xYCMqJFaEfs=
Subject key identifier: 64:E2:59:60:4D:93:B0:CB:99:10:32:65:7B:60:E9:B2:65:8B:F0:75
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 0199FDD9206C7BB5FCFAFBAFD51A3F60415D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 0A0B
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: 6K0FYnb5fJ/KwMLGhG/HVHFgjibWJOfDO5P3k/MzfH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:20:6c:7b:b5:fc:fa:fb:af:d5:1a:3f:60:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=64e259604d93b0cb991032657b60e9b2658bf075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:2b:25:6a:76:cf:44:8e:fd:85:20:f0:46:
a1:90:0e:b7:8f:17:79:c6:5c:6f:f0:cf:5f:e2:d1:
fb:ff:cf:42:23:b7:ac:77:91:b0:51:40:a9:3a:44:
7b:30:ed:05:88:52:ae:08:cd:7e:75:b2:bd:b0:b2:
3a:0a:dc:f6:a7:a5:7b:8c:02:47:b1:d8:38:a2:2a:
67:f2:c2:3c:3f:2e:fa:97:72:cd:97:75:ff:9b:5f:
da:af:c3:08:e6:9e:30:ac:b2:d2:9e:4e:a3:f5:95:
81:44:15:d4:4f:6b:36:78:83:38:06:46:21:21:00:
e4:24:9d:9f:20:fb:41:5a:40:eb:6e:70:c0:c0:d7:
05:0c:27:a2:8e:f8:c6:98:46:bc:14:83:1c:e7:9f:
8f:60:53:74:7c:d2:fd:dd:18:8b:50:e3:ef:4f:ac:
97:53:a1:59:ce:bb:02:51:93:0e:2c:7d:06:a5:44:
d4:be:bc:89:9c:e4:28:bd:99:c1:71:7a:f5:15:64:
42:4f:db:9a:d4:1b:4b:a3:94:a1:40:06:7c:ce:39:
29:3b:c1:1f:5e:be:6f:4b:d9:2b:88:68:17:2c:70:
0a:4b:6d:dd:c6:a2:d9:ea:50:fb:51:e7:ec:a5:f1:
3b:b4:6d:bf:b0:3a:92:d2:12:f6:93:17:b3:ce:41:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:59:60:4D:93:B0:CB:99:10:32:65:7B:60:E9:B2:65:8B:F0:75
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:27:61:a7:fa:f0:c0:30:44:3a:0d:14:db:6b:33:81:aa:
3c:21:04:d3:7e:fe:ba:d6:34:03:a5:eb:0d:44:d6:e4:b7:b3:
17:52:f3:91:eb:25:f0:6c:75:c2:da:36:67:1e:99:19:6c:03:
dd:77:49:b4:cf:1a:49:a4:87:76:50:19:f6:6b:97:6f:3e:8c:
b3:4e:05:a3:d2:b2:1a:8b:f9:3e:25:b6:74:1c:aa:7f:e0:57:
47:31:33:b4:45:44:6f:c4:80:bd:ec:75:6d:40:6d:38:a2:17:
7c:7f:fb:2a:dd:91:fd:a3:13:6c:e6:68:f3:df:5b:98:b1:17:
eb:e6:94:e2:c8:ef:7f:52:21:81:31:88:06:8c:d0:e0:7e:b8:
d5:c5:12:59:ee:22:14:0f:02:63:46:65:f6:ac:f5:43:7d:23:
6b:72:d4:16:78:c8:7a:11:08:1b:39:bf:55:1e:d9:a8:41:55:
7f:cd:81:b8:73:cf:4e:84:6f:77:50:e6:2c:8d:26:f8:5f:9f:
16:3e:0e:94:3f:5d:9b:de:85:dd:0b:f2:fa:6f:92:b5:71:d7:
65:f2:85:14:a5:c1:be:1c:00:76:d4:e4:ef:a6:35:ba:75:7c:
45:c6:d8:43:c0:ad:7c:7f:ca:a8:0d:af:e5:5b:27:a5:8d:c3:
ac:ae:b9:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92SBse7X8+vuv1Ro/YEFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGIzYTQ0MGFiN2VkNzk0MWUyYzQxNDg0NzU0NmZkNjNm
ZjEzZWEwHhcNMjUxMDE5MTkwMTI5WhcNMjUxMDIwMTkwMTI5WjAzMTEwLwYDVQQD
Eyg2NGUyNTk2MDRkOTNiMGNiOTkxMDMyNjU3YjYwZTliMjY1OGJmMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1IrJWp2z0SO/YUg8EahkA63jxd5
xlxv8M9f4tH7/89CI7esd5GwUUCpOkR7MO0FiFKuCM1+dbK9sLI6Ctz2p6V7jAJH
sdg4oipn8sI8Py76l3LNl3X/m1/ar8MI5p4wrLLSnk6j9ZWBRBXUT2s2eIM4BkYh
IQDkJJ2fIPtBWkDrbnDAwNcFDCeijvjGmEa8FIMc55+PYFN0fNL93RiLUOPvT6yX
U6FZzrsCUZMOLH0GpUTUvryJnOQovZnBcXr1FWRCT9ua1BtLo5ShQAZ8zjkpO8Ef
Xr5vS9kriGgXLHAKS23dxqLZ6lD7UefspfE7tG2/sDqS0hL2kxezzkEbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTiWWBNk7DLmRAyZXtg6bJli/B1MB8GA1UdIwQY
MBaAFD2LOkQKt+15QeLEFIR1Rv1j/xPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMt
NzhhYzkwZTQ4ODkyLzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMtNzhhYzkwZTQ4ODky
LzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB68nYaf6
8MAwRDoNFNtrM4GqPCEE037+utY0A6XrDUTW5LezF1Lzkesl8Gx1wto2Zx6ZGWwD
3XdJtM8aSaSHdlAZ9muXbz6Ms04Fo9KyGov5PiW2dByqf+BXRzEztEVEb8SAvex1
bUBtOKIXfH/7Kt2R/aMTbOZo899bmLEX6+aU4sjvf1IhgTGIBozQ4H641cUSWe4i
FA8CY0Zl9qz1Q30ja3LUFnjIehEIGzm/VR7ZqEFVf82BuHPPToRvd1DmLI0m+F+f
Fj4OlD9dm96F3Qvy+m+StXHXZfKFFKXBvhwAdtTk76Y1unV8RcbYQ8CtfH/KqA2v
5VsnpY3DrK65Tg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:23 2025 by rpki-client