Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: dyI0q3BZC6nuqguBLSuplHDCinLzL6lWP16TVX8YmYU=
Subject key identifier: 7E:E6:2F:09:A4:F0:D7:56:28:FF:44:E0:FB:50:37:5D:54:8F:3B:8E
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 0199FAD7EFEEEE8755E41849ACA2B9733920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: XkSyrSMwbfyAsHU8AwdGxWQLHUwobsKjRwS/hwQfsJM=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ef:ee:ee:87:55:e4:18:49:ac:a2:b9:73:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=7ee62f09a4f0d75628ff44e0fb50375d548f3b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:39:48:34:c7:8f:b5:d2:93:a6:db:eb:04:
8f:6e:f9:94:2b:77:32:ec:24:03:d2:2c:58:e5:f2:
f7:24:11:ad:d0:7e:7f:7a:7c:08:89:64:eb:94:40:
9d:7d:50:a5:c8:7b:78:75:5a:10:fa:67:43:d5:35:
e6:e1:ab:25:ce:1f:3d:40:87:6e:c0:13:77:67:e8:
dc:10:f0:4f:96:7b:a5:9a:29:e3:df:20:bf:a4:99:
1a:7c:a7:61:f0:f2:e1:ee:97:09:d9:5a:09:da:8d:
47:64:fb:a1:d7:46:4e:31:ce:90:31:44:2e:b8:c2:
b3:a3:66:2c:ed:b3:b3:e2:23:36:81:94:c8:bc:46:
3a:51:59:60:65:ce:3f:0b:ed:0a:ab:f0:19:9b:04:
39:41:ed:80:1d:5a:93:82:25:4d:a8:5f:74:9e:e2:
12:48:31:1f:95:ea:2d:c1:5c:ce:28:44:cc:16:8d:
68:d6:e2:7e:e0:ea:c3:6e:6b:ce:c4:1a:e2:10:18:
04:48:95:55:f0:cc:24:79:b8:f3:71:1e:9f:b4:3b:
30:73:0a:4f:f5:9f:5a:14:c2:ab:9b:d9:7d:ad:68:
e7:c5:0f:42:6b:1d:a2:f8:28:6f:bc:43:35:a3:fd:
df:84:a1:e2:e9:ed:a4:d6:47:e9:98:ba:84:0a:a2:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:2F:09:A4:F0:D7:56:28:FF:44:E0:FB:50:37:5D:54:8F:3B:8E
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:4e:4c:53:af:38:e1:8e:b7:c5:d9:ab:c7:d3:c2:f6:1b:
88:8c:80:7b:90:7b:3b:c9:8d:37:d7:e5:2c:2a:14:38:e3:a0:
ea:b6:6a:75:a9:41:31:0b:a3:97:b1:dc:e5:f8:11:f6:75:db:
65:8e:04:fb:35:0e:c3:1a:c0:aa:91:d2:88:a0:27:25:69:cb:
ac:3a:8c:20:47:65:b3:be:f6:3f:12:88:da:e8:64:41:0a:13:
b1:f2:70:0e:1a:91:a3:ba:37:5b:c9:5a:bc:94:a6:e2:c5:57:
9d:ff:39:4e:5d:d8:c7:d6:ba:87:d0:68:ca:a0:4f:00:e8:f5:
63:a1:a2:3f:a9:3f:5c:32:4a:f4:ac:61:6d:ec:57:7e:b0:27:
72:35:48:67:e9:6c:c3:56:36:5f:b5:11:2c:c2:fc:72:aa:ce:
a2:06:37:e4:83:d2:c4:25:16:61:69:a8:1e:80:98:68:09:c9:
3b:51:29:ff:26:c0:61:d2:19:4f:83:c4:cf:23:6d:7a:1a:2b:
73:8f:d9:3b:32:7e:8d:9b:44:37:62:9d:dc:d5:c5:9c:22:b0:
61:02:f3:f9:1a:2a:40:a4:16:ba:73:67:47:95:92:cc:41:fe:
8e:f1:e6:3f:28:37:7d:ac:58:80:a1:af:4b:72:70:4d:e2:81:
7b:6b:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:27 2025 by rpki-client