Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: fqabGtZWUwHBE/iSa6o5JQidYG+DMbuxvVj2cpAx6ws=
Subject key identifier: BD:7F:F9:27:98:A2:5E:D5:CE:F3:A4:61:53:B5:24:03:E2:FA:09:A8
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019A003560B28487A65D56FBB208A54D040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:29 +0000
Manifest this update: Mon 20 Oct 2025 06:01:29 +0000
Manifest next update: Tue 21 Oct 2025 06:01:29 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: E65Er36X5EH6n5YVxDCNYuH0vYW9hqPpa+kTuXmDEEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:60:b2:84:87:a6:5d:56:fb:b2:08:a5:4d:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Oct 20 06:01:29 2025 GMT
Not After : Oct 21 06:01:29 2025 GMT
Subject: CN=bd7ff92798a25ed5cef3a46153b52403e2fa09a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:f7:12:cc:11:b3:78:4d:65:60:fe:9c:81:
8b:72:e9:0f:47:8c:e8:43:f0:64:b4:60:18:a3:f6:
7b:3d:56:34:f3:97:4e:33:0b:ac:31:ee:7c:61:41:
f7:38:04:0e:b5:e3:23:d4:37:ae:69:ca:5d:bf:06:
ca:f2:d0:de:4d:80:d7:59:4b:a5:71:72:6c:05:17:
09:1c:b8:83:cf:8b:b1:a4:dd:9f:68:96:76:a0:c2:
50:a7:21:34:cb:f2:f8:dc:c1:31:e3:1b:dd:c2:cb:
58:d0:e1:bf:be:d7:ac:a4:da:cf:f7:c7:d0:40:1f:
bb:67:4f:c9:f9:55:d9:55:4e:d6:c4:15:cc:79:5f:
f7:86:1b:78:6d:e9:12:df:e8:50:5e:82:47:4d:e7:
98:d1:49:01:cf:b3:f8:a4:4c:78:28:a4:66:03:0c:
7c:2d:4d:67:f5:0c:3a:1a:63:49:99:7a:6f:15:b2:
d5:7b:19:2a:44:2d:70:de:a0:16:b3:71:e8:7b:9a:
c7:91:1a:35:8b:b9:ff:2d:81:39:39:14:4b:13:7f:
d4:45:d4:9a:aa:f7:8a:a7:77:fb:c0:85:4d:3d:09:
63:c8:ab:57:24:02:58:3f:be:de:d3:5b:66:53:53:
4f:71:96:2f:96:f4:b2:20:ec:46:3e:a3:82:ee:52:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:F9:27:98:A2:5E:D5:CE:F3:A4:61:53:B5:24:03:E2:FA:09:A8
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6a:51:f4:ee:ed:b4:b0:9f:5d:6f:02:16:0d:4a:16:f0:2a:
0e:30:06:05:ba:86:30:7a:47:1b:a5:68:5b:1d:39:45:4a:08:
ac:dd:47:e4:7c:5b:14:3d:28:cb:5e:1d:a9:04:f3:7c:05:35:
86:ba:f7:81:68:a6:e5:c5:c5:7e:8f:de:05:ae:23:70:3a:13:
a1:e5:0a:33:10:a6:46:5d:a7:bd:fc:e0:01:a5:d5:ec:19:ff:
03:34:66:73:5b:a0:d7:db:ad:2f:ea:0a:a4:b5:d4:c3:6c:87:
ab:a6:21:d5:83:9d:5c:d2:6f:7a:c1:0d:e9:52:c8:cc:4b:9d:
34:6a:2a:91:a6:13:91:74:00:3c:2a:61:38:ca:20:73:c1:a2:
b1:ee:fb:46:38:fa:1e:2e:75:78:07:da:43:aa:64:9d:21:03:
22:40:7a:f1:6a:a9:0d:51:9c:48:82:b2:5c:7c:59:68:c0:cd:
68:29:5b:3c:e7:ce:81:b1:e0:09:28:ad:53:de:42:66:1d:1d:
ad:87:b1:dd:f6:ae:f4:20:7b:f6:64:1e:02:e3:0b:12:c4:e8:
dc:02:ab:72:94:d2:fd:72:7a:e4:11:fe:98:6a:f9:a2:9a:59:
0d:26:24:32:67:5d:ae:56:08:4b:c8:52:c6:74:f9:3f:53:fb:
73:3d:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:34:02 2025 by rpki-client