Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: fQ1tSTSyDRcpbjt5MY7+3HnlyIPAz+Q5YHVdYAFcsX0=
Subject key identifier: 1D:3A:3A:5F:51:DB:2E:A5:8D:FB:21:87:AC:94:25:55:1C:DF:91:02
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0197B745AC56A5F5856829BFDA0DC6305224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 0105
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: xu5L2II7z/tmOjNrbkIbOxYQqw4l0ulr6kChbEdhPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ac:56:a5:f5:85:68:29:bf:da:0d:c6:30:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=1d3a3a5f51db2ea58dfb2187ac9425551cdf9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:1b:43:8d:cf:c7:e2:98:6b:f8:85:5d:b3:
e9:8f:c5:d6:4c:a1:dd:c7:77:ee:c2:48:20:f1:f9:
3b:59:3b:55:c9:64:db:65:a3:f4:a6:a7:49:67:c1:
e9:af:3a:00:15:6c:91:7a:68:60:d8:6a:60:ba:3f:
f3:c4:64:c7:0f:3a:9e:cd:c8:b1:51:6e:b9:68:d8:
5e:35:e8:e1:2b:54:82:8c:25:fb:64:d5:6f:45:cd:
5c:2f:f1:a1:60:99:ba:5f:b0:e8:24:74:8b:5d:37:
70:86:85:f9:b3:32:2e:47:77:fb:94:f2:41:31:69:
d6:d9:66:72:cb:5c:bc:dd:37:34:2f:21:81:f3:49:
36:ed:dd:8c:2d:d0:7b:00:de:e1:f2:d3:d6:29:0b:
75:a7:e5:0b:27:a8:3c:b2:46:21:ee:f1:98:8e:4e:
37:a2:22:be:87:47:95:9b:ac:fb:1f:a4:02:aa:0e:
5e:6c:79:5f:17:68:4c:1a:1b:30:a8:b1:e8:c8:6a:
7c:7f:85:e1:7e:33:89:02:f2:01:1d:84:a2:d7:66:
c6:5c:b4:99:0a:14:ff:52:7e:07:43:33:f8:64:55:
b8:f2:83:fa:e6:df:7e:a8:40:73:ee:49:db:22:8a:
25:00:54:c6:f8:e0:a7:de:1e:73:25:2f:0c:b2:87:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:3A:5F:51:DB:2E:A5:8D:FB:21:87:AC:94:25:55:1C:DF:91:02
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:88:56:a8:20:40:d7:37:0c:3f:e4:7e:4d:4e:c6:d2:1f:30:
51:44:a2:d9:0a:a9:c6:b1:6e:28:05:ec:ec:94:6e:ee:d9:46:
53:8e:fd:bb:63:b3:a4:f7:4c:67:e3:80:b9:0d:4a:1b:4a:7a:
47:b9:af:d2:d3:14:2d:a5:c1:06:c4:f9:7e:64:9d:01:7c:1c:
b1:f6:53:7e:b6:64:07:53:46:c9:ab:c7:60:4b:8e:87:3c:22:
d8:5e:a0:3b:f0:40:a9:e1:25:ec:7b:12:99:6e:fc:0a:6a:8b:
d1:39:42:28:06:5e:39:36:98:86:4c:ae:0b:ec:30:c3:3a:0f:
3d:95:1a:f6:7e:5c:98:29:2f:71:36:e8:cf:09:63:78:ac:44:
d4:e0:03:9e:9e:5b:ed:fa:b2:bc:a2:aa:cf:df:03:19:79:74:
45:3d:c7:08:bb:1b:bb:63:0d:88:2e:45:19:aa:24:7b:a9:a6:
bb:b6:04:13:09:70:9e:47:6d:78:ce:97:09:2f:52:8e:f9:0f:
15:84:68:d4:9d:39:8a:65:fa:88:fd:89:77:6a:23:60:1d:57:
f0:2f:99:3e:54:6d:c8:21:a6:f7:ba:55:16:09:e3:0a:ab:eb:
f5:84:97:ef:3a:1c:69:bf:1c:aa:f4:c3:09:46:75:92:33:3d:
b8:71:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:27 2025 by rpki-client