Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: 6/yAyfgq42vTLwFUNIDIbmvdrRGx1JDXoVUoBuoQC1Y=
Subject key identifier: 0A:25:11:6A:DC:51:30:A4:69:C6:11:F0:0A:10:44:70:30:11:18:24
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0199FC8F565DC9039917CD1F7E1E47115D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0232
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: rQ/RuNBFL1yB+lv7vxkaw8oz5yVo6l6190FIF6kDmc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:56:5d:c9:03:99:17:cd:1f:7e:1e:47:11:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=0a25116adc5130a469c611f00a10447030111824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:7f:80:7b:82:84:e5:52:a5:21:3c:bb:0f:
71:29:8e:a3:32:30:c0:28:fa:7a:2e:78:e6:7c:ba:
ac:1d:76:00:c3:8f:c3:05:f4:d0:5c:19:74:f9:02:
94:dc:b2:1e:43:ab:57:da:91:d0:ed:eb:3b:cd:b9:
57:4b:6c:47:76:f3:5a:c1:47:01:3b:8f:c9:f3:a2:
6b:b3:b0:bc:2f:1a:66:29:73:47:81:e7:48:35:e9:
8b:99:7b:63:e9:a1:73:f8:d5:45:82:d2:57:61:5c:
06:1e:d9:fa:08:e2:55:12:e7:fe:de:5a:68:13:b3:
f9:e2:3a:13:30:45:b4:a4:2f:81:52:ce:36:d5:8e:
3c:25:58:ba:a3:57:e4:b3:2e:9e:e9:26:57:3b:2a:
e7:13:69:0c:1b:2e:10:8f:f0:07:5a:c4:23:48:b8:
32:49:4a:73:18:c5:d1:e7:52:b0:6c:52:43:c8:3c:
cd:b9:c0:38:2a:35:25:72:a0:55:70:c9:db:46:67:
95:e2:0a:db:af:bd:ec:b5:9f:7f:0c:d0:b9:05:21:
f9:45:a3:98:cd:4b:9c:cf:4a:a4:28:de:ab:57:84:
e8:ab:2d:cf:05:75:87:f8:5b:81:0d:d7:60:4b:32:
fc:45:a5:9e:d4:32:e1:cb:7e:e3:fb:82:ea:d5:45:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:11:6A:DC:51:30:A4:69:C6:11:F0:0A:10:44:70:30:11:18:24
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:66:31:32:b2:6c:b0:a0:8c:93:48:3f:6c:94:cf:d9:df:b5:
52:1c:f2:31:f8:9d:2f:a9:ae:9f:24:21:b2:33:65:d8:40:95:
38:78:dd:95:b1:22:fa:80:bf:0d:fc:d7:28:02:49:1c:ad:66:
ae:08:9c:f9:8e:3f:43:56:40:de:ae:a0:f8:a8:f4:f3:76:a3:
db:e0:8f:e1:00:94:ea:d5:6a:42:49:e4:fc:a5:a8:b9:22:eb:
83:ec:6f:96:99:5d:19:22:6b:72:1b:80:7f:b8:46:33:fe:f5:
21:17:8e:31:c6:70:82:15:81:f5:0d:ec:8f:a4:cc:dc:7f:7f:
61:61:49:f4:82:ba:06:a9:10:03:9f:38:27:bd:39:48:fe:f7:
3c:66:5e:fa:bc:66:0c:59:22:51:75:37:41:7a:d5:ee:8b:87:
85:dd:65:99:0d:49:3a:2a:6d:e3:ed:25:2e:6b:d7:bc:d4:30:
65:69:f0:08:bf:cc:1d:eb:03:a2:e0:e9:9d:e8:e8:b1:b5:f3:
4e:b7:c4:a9:6a:06:86:39:df:0a:a9:67:a2:72:c5:7d:b4:f6:
51:81:ac:72:ff:dd:7e:f6:cc:f8:86:8b:f5:77:6e:c3:f2:6d:
6f:7e:42:93:2a:a4:ca:0f:ec:4b:41:2a:2d:50:98:6c:e9:d2:
a7:2e:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:12 2025 by rpki-client