Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: wbMxR2jvOwKBxIvm9yET3pCJeNmt8jPRZm8ijlEHeDg=
Subject key identifier: EA:D3:6D:BD:9D:6D:59:42:E8:6F:FF:9E:83:A8:8B:DA:8C:BE:D5:30
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0199FBEB744E407BEB58D53DE86CD464F84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: 9n5UC8e4A+0zJPmK+kBWuifVdvqrjoOCsWCMum0X0ls=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:74:4e:40:7b:eb:58:d5:3d:e8:6c:d4:64:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=ead36dbd9d6d5942e86fff9e83a88bda8cbed530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:d8:25:80:19:4c:8e:d6:16:a1:c7:ce:3a:
a5:8f:39:c6:a9:76:d5:50:4a:0a:88:89:2d:42:6e:
7d:c1:f3:a9:70:21:4a:22:cb:19:48:06:8c:26:6d:
a4:76:25:05:ec:20:e8:23:ef:e4:29:d7:ac:be:35:
46:71:50:e5:90:5c:51:19:32:75:1c:48:29:f3:4f:
e8:f8:da:5b:5b:7a:a9:32:ea:2f:14:7d:fd:9f:4f:
8b:11:14:6e:c9:22:7a:ed:f5:26:e4:93:0c:51:ca:
78:b8:72:36:17:64:4a:45:5b:7d:80:2c:88:4a:f2:
77:2d:9d:c3:75:53:57:c2:bb:8b:d7:19:cb:ae:27:
8e:e9:b4:00:67:c5:60:01:30:01:61:40:cd:55:46:
26:e8:59:19:bf:7f:a3:c3:81:8e:53:99:dd:fe:98:
76:11:62:3e:bf:76:aa:dc:32:35:ce:5c:91:8e:2c:
13:fa:52:65:aa:21:f7:48:ae:10:ca:64:d9:5a:15:
68:06:c2:95:3a:96:a3:b3:47:4c:98:42:8d:2a:8b:
c2:e4:f0:cc:92:76:31:11:b3:00:62:a1:d7:15:7f:
73:11:19:45:4e:c0:c9:b2:16:b6:9c:23:50:40:24:
1f:72:cd:52:69:40:a9:95:55:49:8f:5f:03:f7:76:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D3:6D:BD:9D:6D:59:42:E8:6F:FF:9E:83:A8:8B:DA:8C:BE:D5:30
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:59:8a:7e:ac:e7:e3:8d:78:e3:19:7b:7a:5a:d5:c4:0b:
99:93:18:32:d3:51:91:48:4b:63:cd:a9:b4:eb:82:c9:87:88:
aa:7a:ba:7b:7d:49:4d:2c:33:8b:b6:b0:57:15:a5:24:b6:52:
2f:a0:39:51:7f:21:b9:46:5a:90:c3:91:65:3b:c2:2e:c6:46:
c3:fd:5d:c7:96:79:f7:30:16:12:af:e7:5a:52:27:70:ea:b3:
eb:ff:2e:32:5d:b0:01:61:f2:c8:20:12:92:2f:5d:f2:7d:94:
d1:ac:80:00:d4:2b:98:71:dc:46:72:08:e2:c2:38:2f:55:79:
1a:ee:6d:a6:0d:06:1f:28:64:f1:63:22:47:b3:a6:b7:91:d0:
40:84:04:7d:90:60:b0:52:b3:d3:24:10:82:a0:b5:cc:5e:14:
ed:29:1b:0d:da:00:40:c3:e0:48:ac:13:b6:ee:5b:dd:c3:22:
46:d3:5c:9d:8d:59:84:6a:76:65:9c:e8:55:41:1d:f8:e6:f4:
af:f3:73:02:b1:da:90:27:1b:36:8c:95:a6:b8:07:2b:4a:fb:
d0:9b:45:cf:10:60:84:69:6e:17:1a:3e:0b:f4:ff:b1:ef:55:
6b:23:ca:ca:f3:b9:7f:cd:86:ba:11:b3:66:d5:d1:3b:ec:36:
60:fb:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client