Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: HE2F7qWygoKpaitCmVjzinYCfk5oxi1AWqkpRj+zcsY=
Subject key identifier: 35:08:12:70:0B:B7:9F:FF:CE:8E:88:C8:18:10:6F:87:0A:00:3E:46
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 0197B6A0B44A982D0BBB9F501E21D7A5D351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: o7j9+WQfXFJyo8dVI60vZEceEsko+w70qHXXmYqCx2Q=)
2: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (hash: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=)
3: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (hash: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:4a:98:2d:0b:bb:9f:50:1e:21:d7:a5:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=350812700bb79fffce8e88c818106f870a003e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:33:70:34:7d:da:1c:50:e4:b7:ef:2a:67:
ff:df:78:f4:11:30:f8:a8:9d:28:e6:a5:70:d8:85:
95:c7:c1:7e:9b:fc:46:f3:50:f6:3f:86:fd:de:1a:
91:b9:5b:d8:cc:e8:90:0f:a3:f3:4c:04:1b:e6:d2:
e7:7d:6e:b5:0a:b6:03:8a:d2:91:5a:59:1a:20:95:
68:9a:89:5e:72:eb:41:07:37:82:a2:1e:59:7a:83:
d9:ab:3b:7b:07:be:b3:97:a2:f9:f3:1f:50:d7:6c:
a6:53:a9:ee:d2:6e:90:ea:c5:af:c4:e1:14:7b:00:
57:88:bf:c3:33:2d:ec:89:92:72:83:d7:c2:83:4b:
b6:a0:a7:a1:61:b6:e6:24:d6:8b:5c:19:7a:e6:c8:
5c:09:01:21:ff:18:71:f5:c4:4c:54:9f:a0:29:e3:
8c:8b:c7:36:da:be:38:ce:cc:bf:b1:8d:6c:95:f8:
a9:37:09:6c:92:ae:9f:fe:22:f9:98:8b:12:10:46:
97:9d:52:8a:96:5b:c0:f2:78:9d:ed:1c:e0:b0:52:
33:fa:f3:06:49:70:93:de:41:a0:82:b5:e4:2d:fe:
56:39:94:a4:48:bc:0b:e2:71:1f:8d:50:33:c3:d6:
68:ff:a4:b8:f5:f9:81:f9:a0:72:05:cd:a3:da:dd:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:12:70:0B:B7:9F:FF:CE:8E:88:C8:18:10:6F:87:0A:00:3E:46
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:e1:78:3d:9e:54:bf:cd:02:65:16:a4:5b:fb:f9:17:8c:
be:8a:67:c2:91:16:38:68:3b:4f:ec:28:c3:63:45:f4:83:32:
c9:64:a6:da:bd:dc:1a:4e:cd:b0:60:19:6c:20:95:11:ac:2e:
66:fe:17:9a:6e:10:b2:28:ac:94:e8:8c:8a:35:ae:fe:10:2d:
e7:b2:d7:7e:0f:c0:cd:74:fc:7f:32:30:d0:90:3b:fe:03:5d:
66:da:4b:21:6f:f9:ab:bb:e6:61:5d:19:3c:c3:d3:f2:80:0e:
ce:f9:80:54:fc:45:31:ab:d4:a0:97:75:19:94:c3:93:a0:a6:
79:7f:87:23:69:0a:61:70:69:f1:70:1e:0a:21:33:51:43:87:
de:0a:ca:bc:af:39:d4:ea:d6:db:f8:df:7e:87:f3:6d:fd:59:
58:7d:3a:46:76:21:7a:75:45:6e:6c:2d:3b:12:f1:3a:97:7e:
88:2c:46:f4:b8:82:e2:f7:84:8f:65:ed:d7:71:95:90:16:52:
20:2a:17:74:98:15:c3:74:03:bf:68:98:5e:93:54:fe:68:4a:
5c:f0:8a:43:91:b7:3d:ed:3c:ad:14:54:63:b3:55:5d:0b:bb:
81:95:e6:23:89:8e:75:2e:4f:e9:57:79:b5:57:49:e2:b7:94:
81:1f:82:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLRKmC0Lu59QHiHXpdNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjk2ZmU5NDVhMjMxODA3NTNmNjdmNzc0OGU2ZjI5OWQy
ZTY3MmEwHhcNMjUwNjI4MTMwMTE0WhcNMjUwNjI5MTMwMTE0WjAzMTEwLwYDVQQD
EygzNTA4MTI3MDBiYjc5ZmZmY2U4ZTg4YzgxODEwNmY4NzBhMDAzZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyMzcDR92hxQ5LfvKmf/33j0ETD4
qJ0o5qVw2IWVx8F+m/xG81D2P4b93hqRuVvYzOiQD6PzTAQb5tLnfW61CrYDitKR
WlkaIJVomolecutBBzeCoh5ZeoPZqzt7B76zl6L58x9Q12ymU6nu0m6Q6sWvxOEU
ewBXiL/DMy3siZJyg9fCg0u2oKehYbbmJNaLXBl65shcCQEh/xhx9cRMVJ+gKeOM
i8c22r44zsy/sY1slfipNwlskq6f/iL5mIsSEEaXnVKKllvA8nid7RzgsFIz+vMG
SXCT3kGggrXkLf5WOZSkSLwL4nEfjVAzw9Zo/6S49fmB+aByBc2j2t0LkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUIEnALt5//zo6IyBgQb4cKAD5GMB8GA1UdIwQY
MBaAFD8pb+lFojGAdT9n93SObymdLmcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQt
OGY0ZjI5MWIyM2I2LzEvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jYmQzNjItNzY5NC00MTgzLTkxNWQtOGY0ZjI5MWIyM2I2
LzEvUHlsdjZVV2lNWUIxUDJmM2RJNXZLWjB1WnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9zheD2e
VL/NAmUWpFv7+ReMvopnwpEWOGg7T+wow2NF9IMyyWSm2r3cGk7NsGAZbCCVEawu
Zv4Xmm4QsiislOiMijWu/hAt57LXfg/AzXT8fzIw0JA7/gNdZtpLIW/5q7vmYV0Z
PMPT8oAOzvmAVPxFMavUoJd1GZTDk6CmeX+HI2kKYXBp8XAeCiEzUUOH3grKvK85
1OrW2/jffofzbf1ZWH06RnYhenVFbmwtOxLxOpd+iCxG9LiC4veEj2Xt13GVkBZS
ICoXdJgVw3QDv2iYXpNU/mhKXPCKQ5G3Pe08rRRUY7NVXQu7gZXmI4mOdS5P6Vd5
tVdJ4reUgR+Chw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:19 2025 by rpki-client