Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: nvu2/HZHVlFgUep+b6uoBCYmFD6bOGF/zRr/nu0fX1c=
Subject key identifier: 5E:FA:2D:01:3E:C4:1B:4D:70:61:AE:43:2B:8A:B6:28:70:67:28:4C
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 019A4EF5D38710AB1D1AC2AB2CB9F813CC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0C7A
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: PlRDXNP9y4YdQM3NIqn/q4MR/8Lv322wbyWCH/pgAgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d3:87:10:ab:1d:1a:c2:ab:2c:b9:f8:13:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=5efa2d013ec41b4d7061ae432b8ab6287067284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:f0:64:d3:ea:a9:2b:b3:6e:97:6b:b9:b2:
85:30:ee:cb:12:51:fb:01:0a:9d:24:8c:0e:0c:74:
f7:92:20:0d:76:97:8f:07:4c:6a:c4:a7:e5:24:89:
7b:60:bc:5c:ab:38:02:bc:f9:b6:7b:c0:aa:f8:bf:
59:61:b3:db:39:f4:e8:fa:00:fb:bc:e5:36:4d:79:
38:d0:d8:f2:47:cf:3c:1b:b7:33:21:13:ca:29:67:
38:03:f4:40:ee:b4:0c:8c:f7:f1:4e:75:b1:f9:51:
53:ad:f5:99:2f:70:45:7d:3f:3d:0a:08:7e:d8:80:
90:99:a2:ea:eb:5a:f5:8b:04:b2:32:ad:64:d8:3b:
92:87:69:75:fd:94:d3:94:66:0a:6f:a4:63:9f:6b:
04:64:c0:bd:d4:a8:8c:a1:c9:ed:11:90:e7:21:6b:
46:e7:11:18:fd:6a:a3:e2:37:78:84:5f:ce:da:40:
f4:a3:8f:73:2c:42:5b:f1:f1:87:ae:e8:9c:37:b0:
ae:28:97:90:56:7f:7d:e3:d8:e2:53:15:b9:c4:2e:
69:2e:63:10:07:b8:a0:65:71:cf:cf:2e:8d:5a:28:
75:57:6f:d8:9c:05:e6:92:2c:9e:46:20:50:c8:83:
4b:2b:e2:3f:84:b6:55:7c:f1:d9:f1:4d:98:e6:7d:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:2D:01:3E:C4:1B:4D:70:61:AE:43:2B:8A:B6:28:70:67:28:4C
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:40:2c:1e:d4:80:73:93:7c:9d:ea:74:a3:dc:84:1a:6b:
32:8a:5b:96:1f:50:06:de:71:55:41:ae:2d:e5:3a:d7:7c:3d:
26:b8:88:71:b5:e2:c7:d7:b8:cb:db:f6:a0:26:34:1f:d6:01:
f6:ae:ff:d9:d0:4b:c7:19:f0:47:66:5b:4a:7a:dd:2c:77:8c:
04:b0:11:80:5c:52:bd:cf:a7:87:d7:57:ad:19:64:ef:74:d4:
eb:06:95:d9:62:40:01:25:b4:60:83:41:84:40:59:bb:60:8b:
dd:8a:2d:39:76:dc:8b:3f:bd:0b:02:22:88:02:5f:ee:63:27:
77:c7:a9:8c:b5:c0:69:fa:db:5e:ae:57:9b:30:e0:7c:e0:25:
37:3c:96:3a:d6:de:b1:b0:55:8f:b2:1d:b8:db:2d:58:52:f9:
91:ff:88:c7:e3:73:98:11:92:a9:00:0b:af:79:0d:be:6b:a8:
eb:ab:71:a8:ce:4c:75:11:e5:a9:70:5c:5d:d1:f5:b0:e8:fb:
f9:cc:4e:8b:8e:5c:47:0d:7b:ed:d6:d6:2f:eb:e7:99:5b:f7:
44:3e:38:cb:89:36:aa:00:2d:36:f0:c5:95:ee:c0:94:1b:64:
c1:0e:59:6b:b0:fe:a2:ea:3b:62:53:21:23:ec:bd:0d:6e:d9:
ce:f0:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:12 2025 by rpki-client