Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: RUPstAKp+Kc9HanTVitRw6/q6HjFNe63/8ul4JiXOpY=
Subject key identifier: DE:2D:7B:D8:AD:21:20:CA:54:BA:65:43:08:97:6B:17:28:7E:FE:31
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0198D5159308D7B12F0549F852A43A650945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0199
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: U7m4lSgXZNiWK8t1WvHorUhQuzem4zh6UzgHg4taIBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:93:08:d7:b1:2f:05:49:f8:52:a4:3a:65:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=de2d7bd8ad2120ca54ba654308976b17287efe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:aa:5b:9b:40:12:d7:fc:e9:3c:f4:5b:10:
74:40:6b:c3:4f:ef:21:aa:14:42:1d:36:99:ad:5d:
dc:60:c0:58:a5:c2:d9:70:60:9d:0a:65:15:ba:26:
4d:86:da:14:94:fd:a6:c2:d0:30:49:db:97:69:6c:
5b:b6:58:a3:89:3d:e2:27:b4:72:19:58:3a:b0:40:
56:98:18:b3:c6:69:b8:de:e9:07:a5:b1:4e:92:06:
50:dc:2d:7f:7a:6f:f3:18:fa:6b:96:c1:0b:20:bb:
84:1d:bd:b4:5c:e7:9e:0e:d8:d1:46:7d:2b:7b:47:
b3:c1:cf:19:0f:44:72:51:8b:96:09:32:ef:2f:d4:
67:d4:f5:72:de:53:40:60:6a:e7:8a:f3:8f:ed:4b:
67:12:33:b6:69:32:84:43:7a:34:11:41:70:32:d0:
99:05:4f:05:a9:2f:94:d9:c8:36:0e:7c:b5:74:91:
84:95:67:7c:9d:bc:5d:81:4f:02:0d:89:c5:a7:22:
dd:b1:52:27:cd:db:ea:0e:61:e4:d2:71:2b:96:db:
07:3a:c7:27:12:bc:58:ed:0a:5b:75:b2:5f:8d:34:
f3:eb:df:a8:50:bb:2c:54:e9:e2:fa:c2:be:49:12:
03:e7:46:45:a9:ef:6b:8e:f2:8f:14:20:a8:c5:75:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:7B:D8:AD:21:20:CA:54:BA:65:43:08:97:6B:17:28:7E:FE:31
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3f:67:0c:6c:fa:93:ed:f2:95:ae:59:33:df:fa:b0:96:55:
3c:3a:23:77:7a:2b:d7:70:ea:24:b7:81:bb:6d:08:62:ea:58:
b2:9d:cc:57:de:20:29:48:3a:0e:97:e8:e8:9a:f5:01:43:98:
c6:a5:3f:38:68:50:59:c3:0e:a9:5c:a6:c6:b4:8e:cf:99:ec:
2a:f1:1d:e5:c6:02:c2:35:43:42:bb:7a:d3:31:0a:ae:7d:fa:
5f:79:ac:8c:40:0a:13:85:06:75:93:81:21:ea:e2:72:90:ae:
f8:35:ed:c9:06:9c:79:50:cf:ce:7b:94:ac:e5:70:de:75:40:
51:7d:e9:b3:9e:df:f5:62:73:d0:61:61:e5:34:c3:25:3c:72:
ba:c5:aa:86:ab:39:db:55:79:5b:f5:6e:41:44:c3:88:f0:a4:
f1:c9:be:0a:8b:67:6c:da:87:bf:fe:99:af:13:22:d8:7c:1c:
1b:19:21:48:da:0b:7d:0e:b4:17:67:11:bd:25:9d:fc:95:6a:
7b:46:9c:84:69:a0:cf:00:bf:2a:95:82:1e:50:e1:04:5d:5b:
3f:f0:0f:01:65:c9:f3:ec:9b:09:77:ce:a8:7a:cc:5e:c9:80:
c1:70:c1:43:a5:0b:60:34:b1:c3:71:f1:84:45:fc:3b:e1:38:
9a:6e:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:20 2025 by rpki-client