Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier: 9BLZMsNKivq4Qcx8Eq1oEvGBoy1gyzOHnlXzPjySPLE=
Subject key identifier: F9:3D:86:89:8D:D4:78:EE:84:45:3C:EE:75:7B:11:23:2E:56:52:63
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 0199FBEC3F380FCEBBCBF44162BE50D51AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number: 0FE9
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: g7/boXYlbAo+QfhlVwhGZxAJ1o48xtXZGxHLQqnXHM8=)
2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3f:38:0f:ce:bb:cb:f4:41:62:be:50:d5:1a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=f93d86898dd478ee84453cee757b11232e565263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:0d:84:0d:63:58:e0:5d:62:83:67:3d:04:
8c:b7:a4:37:eb:ac:a4:62:02:52:30:f6:94:6a:11:
f6:80:e0:18:4a:14:04:4a:b0:44:3e:2e:73:f4:5d:
d0:33:e6:5d:34:5e:84:22:87:3e:53:b9:7b:04:5f:
88:ed:b5:8c:03:a3:10:d6:62:69:c8:e7:cb:67:18:
a8:4e:b1:54:0a:50:42:ca:01:65:29:66:1f:43:44:
fe:ee:53:e0:c1:5b:35:3d:0e:69:96:60:bd:ce:ea:
c6:ce:1b:ba:d4:ec:37:fb:ec:4d:4e:fb:44:3f:6f:
a0:25:83:d6:b3:4d:31:f8:de:54:eb:35:72:be:2e:
05:00:a5:93:e4:36:9f:ce:b0:e3:85:da:1e:3c:02:
83:b2:7b:97:b2:b6:af:ad:9f:a9:18:59:44:09:b1:
fb:e5:01:72:7a:58:1f:c5:a6:63:34:f8:2b:e8:ed:
82:d3:e5:1d:a4:b7:23:83:16:dd:70:06:17:d2:09:
47:d9:dc:ae:77:90:b6:59:81:5a:2a:83:e7:a1:53:
fd:73:79:89:e6:66:91:55:13:06:dc:5b:37:3d:f7:
33:a9:90:2c:04:b2:2f:68:e2:0d:44:b4:d8:64:6f:
9b:8e:9d:bd:ad:d9:da:67:00:63:8c:80:c5:b4:e3:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:86:89:8D:D4:78:EE:84:45:3C:EE:75:7B:11:23:2E:56:52:63
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:39:55:b1:de:9d:ca:16:eb:4a:dc:f9:69:b8:43:5a:47:
56:d6:3c:5c:ab:c8:51:cf:68:02:1c:b8:14:15:cc:bb:dd:97:
0f:41:cc:e5:0d:53:e0:f0:8a:e6:db:5b:7f:39:80:4d:47:ce:
75:10:fa:8e:e1:1f:22:48:71:4f:da:ce:d6:ad:31:cb:c1:c1:
1b:55:fa:45:3a:fc:61:d0:fd:10:07:56:73:2e:ae:1e:99:16:
d0:f1:69:33:a9:96:6b:77:f8:7e:a9:b5:d8:8f:1c:d3:f8:49:
87:ea:b3:f2:be:d3:14:5f:c4:48:c2:fa:59:95:3d:a5:c3:5e:
7c:d3:1f:94:9a:96:f4:dc:ed:48:b7:07:9c:1b:32:a9:de:57:
e6:40:83:6e:85:3b:f3:c6:e9:97:c7:46:6f:be:40:28:c9:7a:
71:0a:75:45:da:26:26:6e:8f:8b:24:4f:7a:b1:c2:1b:40:ae:
31:01:f9:9b:1b:f0:04:b5:19:fb:27:81:82:80:35:5f:4f:a1:
8a:12:e8:b6:a4:09:11:01:e7:57:a7:85:05:15:5a:f3:05:a7:
a8:71:d4:cc:36:ea:22:2d:b1:a8:b9:1d:71:58:67:4f:bd:1d:
0f:74:61:78:d0:ae:25:a9:40:b1:82:77:12:ea:d5:77:23:bc:
06:c6:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:08 2025 by rpki-client