Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: lbVDJkLSSTLAygNo+gZbZuau6E9oryTrc2ibVw4mUfc=
Subject key identifier: 1A:4D:08:89:80:64:30:61:44:13:02:2E:BA:FE:2C:7F:14:4B:BE:33
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 019873E393F25D5690D657E0E512756611DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 152A
Signing time: Mon 04 Aug 2025 07:02:31 +0000
Manifest this update: Mon 04 Aug 2025 07:02:31 +0000
Manifest next update: Tue 05 Aug 2025 07:02:31 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: V4adHlon6z4Ru+l9oZDx/y3QmtWSDp7Fp4qxgWwP8N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:93:f2:5d:56:90:d6:57:e0:e5:12:75:66:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Aug 4 07:02:31 2025 GMT
Not After : Aug 5 07:02:31 2025 GMT
Subject: CN=1a4d0889806430614413022ebafe2c7f144bbe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:74:89:84:49:ed:59:c6:f0:d7:0c:91:f9:
47:76:02:b0:01:77:92:12:09:85:1d:58:a1:3b:8a:
99:9f:71:e5:5d:40:22:1b:f3:b5:63:ea:62:57:36:
58:e6:d0:10:db:d0:91:e7:de:63:53:77:a1:68:61:
4d:99:b0:01:53:7c:73:30:c6:91:9d:72:25:d4:a4:
0c:d5:fa:cf:c1:cd:d9:70:87:26:0d:26:05:76:35:
5e:d9:13:c2:01:c1:f7:2d:f6:48:cc:fd:a7:a8:a8:
ef:35:fd:8e:ba:5a:68:77:74:60:64:78:3a:56:0c:
06:06:9f:3f:27:66:33:19:e0:db:f5:4a:57:2f:9c:
19:16:32:57:ba:ac:83:94:22:be:64:4a:6d:91:0d:
06:b9:3f:a0:c6:d8:dd:18:b6:52:0b:08:54:db:8e:
47:94:9e:6c:24:6e:93:34:fd:30:8e:a8:67:0d:8a:
a2:9b:56:53:e6:8e:2f:a5:60:f8:7e:27:1c:50:9e:
d8:b2:14:5e:4d:54:8a:40:cf:7e:96:d0:8f:17:c2:
96:d4:3b:79:33:54:1b:ae:2e:c5:62:d9:23:dc:a3:
48:e5:34:37:83:4a:c4:7b:5d:6e:84:27:f6:38:da:
40:b6:9c:96:30:70:c3:79:16:31:23:8f:92:ac:d2:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:08:89:80:64:30:61:44:13:02:2E:BA:FE:2C:7F:14:4B:BE:33
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:a9:3e:a9:be:a8:3e:91:83:cf:d5:86:01:e9:18:fb:55:
ae:8f:d7:10:cf:be:18:57:59:76:a1:34:52:d2:73:5e:34:d6:
74:ca:0d:27:e6:24:3c:f9:75:a4:8a:cf:e5:98:46:56:52:7c:
91:9e:1d:13:34:e2:57:25:cc:ec:1b:34:a3:a3:05:5f:5b:47:
f2:4f:4a:71:ba:4e:9e:89:35:26:2c:fc:71:31:6c:f1:78:ab:
4b:6b:cc:df:5e:2c:53:9d:09:c5:5e:6d:27:cb:0b:f4:08:c7:
44:10:d4:69:0d:93:25:83:19:c0:32:ab:c6:3a:e7:bf:00:79:
98:78:b5:6c:8e:81:5a:3a:49:66:84:73:0d:73:50:37:8e:df:
00:5b:b7:40:14:d5:00:93:cc:3b:48:9d:6d:a6:b8:31:91:bc:
bb:d6:4d:f0:04:a7:b4:50:4e:48:2a:44:77:5b:47:82:13:7e:
2b:ea:e6:aa:45:5a:57:e6:ee:de:b5:8e:db:4f:dd:8f:2f:bb:
67:4b:e9:13:d5:a2:1c:ee:90:92:7c:72:a6:cf:25:75:f8:4a:
ad:e5:38:07:a3:c3:28:f3:9c:71:4f:b0:68:96:f2:e9:4a:7b:
df:38:e1:5f:96:a8:d2:1f:fb:b4:f4:f7:76:84:03:10:c9:7c:
fb:0c:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:30 2025 by rpki-client