Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: 9P9XZCiHg2V6gHhO6YHT3gWJb68eH0R3TaurlxmjfHs=
Subject key identifier: 69:74:4A:50:42:00:22:09:14:06:48:7D:1E:E1:DD:59:63:55:1D:85
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 0198D65F228C48F8620CBFD023B49D471D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: pficfIKMYBaqaN5Z5OkxXiOxjtR2CAnkrAat4fwK6+U=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:22:8c:48:f8:62:0c:bf:d0:23:b4:9d:47:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=69744a50420022091406487d1ee1dd5963551d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:7d:11:c2:2e:ab:67:79:1b:9e:dd:8d:61:
d4:0f:ab:fa:99:1b:90:21:dc:f6:dd:5f:b3:8d:43:
dd:55:63:88:04:15:18:1d:72:ee:4d:e9:c2:df:ed:
ac:ee:74:f9:bb:a1:f0:25:1d:19:15:76:e8:03:3b:
fe:b1:a3:a6:79:ed:7a:29:27:b9:31:5e:39:01:1b:
1f:4e:86:d9:79:82:0f:4b:72:83:5c:3c:eb:00:fc:
e5:2b:2d:60:ce:a5:93:ee:94:bd:ef:a6:37:38:d3:
ef:77:63:98:67:f5:f6:ac:cd:ed:d3:76:db:b8:a2:
2c:3d:b3:44:40:22:51:58:70:88:d3:1d:58:da:bd:
da:73:fd:e7:3e:e9:02:90:6d:7a:45:dd:0d:9a:85:
fc:ae:c5:20:69:6d:da:a0:9c:e5:2b:76:6b:89:40:
1a:cf:ac:a0:e5:8e:83:0d:26:09:f7:73:59:6c:cb:
2f:90:0c:6c:99:48:fa:3a:ce:cf:93:3a:80:c2:f8:
f1:e0:ea:40:bf:91:41:95:fe:71:fe:50:63:69:68:
b6:05:f4:02:79:08:c2:68:d9:46:c8:4c:07:00:03:
9e:80:04:33:6a:ee:03:70:ff:e3:0b:40:a5:0b:1c:
ce:23:68:61:26:f0:56:0b:75:e7:74:7b:4d:15:2e:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:4A:50:42:00:22:09:14:06:48:7D:1E:E1:DD:59:63:55:1D:85
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:30:9c:4f:11:64:44:14:ef:a8:2b:b5:a6:ff:44:3c:f9:
6a:61:04:bb:0f:1c:e8:5b:f6:60:1d:35:28:c2:5a:91:54:69:
d9:73:04:de:0d:d6:28:15:a8:1d:a8:08:eb:6c:95:06:b2:02:
78:66:68:d9:90:2a:a3:23:7c:c4:55:70:be:9a:32:3a:2c:05:
e8:b4:57:2e:10:a0:9b:86:d1:50:b4:67:24:f7:22:32:ee:d3:
78:20:43:9a:f0:42:9e:3f:8a:53:cf:dc:40:da:e4:cc:6f:5f:
5a:5f:69:9e:f1:91:3d:90:ff:87:c3:63:61:6b:68:56:ae:4d:
73:05:34:84:a7:e7:b7:03:89:17:51:73:7e:3d:9b:13:42:ba:
8e:61:86:f5:44:7b:cd:3d:b0:db:01:59:44:44:aa:6a:45:4b:
16:83:61:fd:86:91:c9:69:f6:b3:51:30:d6:ff:42:70:0a:4d:
0b:5c:dd:54:dc:1f:9c:ed:25:40:21:eb:dc:42:1a:cc:23:0c:
78:22:98:57:34:0b:b8:16:92:36:8a:5b:84:41:f5:d7:88:ec:
b3:5f:74:df:16:22:93:1a:e5:c4:c7:f0:b2:97:a5:9b:9d:71:
3e:01:f2:02:63:59:ed:8f:a4:d4:e9:9c:ab:c0:33:27:d4:ee:
f8:c3:61:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyKMSPhiDL/QI7SdRx1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi
ZmUyOTAwHhcNMjUwODIzMTAwMDE1WhcNMjUwODI0MTAwMDE1WjAzMTEwLwYDVQQD
Eyg2OTc0NGE1MDQyMDAyMjA5MTQwNjQ4N2QxZWUxZGQ1OTYzNTUxZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9x9EcIuq2d5G57djWHUD6v6mRuQ
Idz23V+zjUPdVWOIBBUYHXLuTenC3+2s7nT5u6HwJR0ZFXboAzv+saOmee16KSe5
MV45ARsfTobZeYIPS3KDXDzrAPzlKy1gzqWT7pS976Y3ONPvd2OYZ/X2rM3t03bb
uKIsPbNEQCJRWHCI0x1Y2r3ac/3nPukCkG16Rd0NmoX8rsUgaW3aoJzlK3ZriUAa
z6yg5Y6DDSYJ93NZbMsvkAxsmUj6Os7PkzqAwvjx4OpAv5FBlf5x/lBjaWi2BfQC
eQjCaNlGyEwHAAOegAQzau4DcP/jC0ClCxzOI2hhJvBWC3XndHtNFS5G3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl0SlBCACIJFAZIfR7h3VljVR2FMB8GA1UdIwQY
MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt
NzdmODRjNTYyYTVmLzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm
LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4kwnE8R
ZEQU76grtab/RDz5amEEuw8c6Fv2YB01KMJakVRp2XME3g3WKBWoHagI62yVBrIC
eGZo2ZAqoyN8xFVwvpoyOiwF6LRXLhCgm4bRULRnJPciMu7TeCBDmvBCnj+KU8/c
QNrkzG9fWl9pnvGRPZD/h8NjYWtoVq5NcwU0hKfntwOJF1Fzfj2bE0K6jmGG9UR7
zT2w2wFZRESqakVLFoNh/YaRyWn2s1Ew1v9CcApNC1zdVNwfnO0lQCHr3EIazCMM
eCKYVzQLuBaSNopbhEH114jss1903xYikxrlxMfwspelm51xPgHyAmNZ7Y+k1Omc
q8AzJ9Tu+MNhGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:52 2025 by rpki-client