Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json)
Hash identifier: fKw33EEP54g6OLSjAol/udQJQzuFy14NNDRY+uepGi0=
Subject key identifier: 12:EC:66:48:A2:89:B2:16:BB:EF:71:CA:C7:9B:B4:D3:2C:CD:DC:06
Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Certificate serial: 019A5451827960CF462023CB615AC2D27844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
Manifest number: 0162
Signing time: Wed 05 Nov 2025 14:00:19 +0000
Manifest this update: Wed 05 Nov 2025 14:00:19 +0000
Manifest next update: Thu 06 Nov 2025 14:00:19 +0000
Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: /JAR00FDZGZR0gu7/IhoJbFLlON/RLDBOoc3qNwxQKA=)
2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:82:79:60:cf:46:20:23:cb:61:5a:c2:d2:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307
Validity
Not Before: Nov 5 14:00:19 2025 GMT
Not After : Nov 6 14:00:19 2025 GMT
Subject: CN=12ec6648a289b216bbef71cac79bb4d32ccddc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:e1:6d:b6:9c:43:85:39:2d:ae:fe:14:a8:
49:41:5f:51:22:8e:9b:0f:63:b6:a8:0a:af:ba:72:
96:ea:70:fe:e5:5c:b2:74:2f:4d:67:6b:85:a6:c9:
ba:55:ed:cc:85:bc:95:cb:ce:7c:07:71:ff:21:0f:
a6:c8:e7:fc:4a:3b:16:2e:02:0e:5f:cc:7f:df:e8:
62:b6:27:a1:69:c7:de:0a:a8:8c:58:15:fe:0b:e0:
c3:62:31:88:a8:a9:b1:2c:f8:0c:15:c2:c9:7c:c2:
bc:46:f5:74:2a:1c:1e:4c:6a:d5:ba:02:2c:6a:4b:
bb:80:2b:90:5b:db:8f:3d:ad:4b:c0:ab:fa:a0:44:
d3:f9:ba:7f:a1:39:ad:f7:1d:df:01:4d:73:c2:c8:
6d:d2:66:ca:bf:dc:45:96:79:2f:c0:9e:02:e2:75:
2d:6b:15:83:34:88:c7:2e:8a:bd:ec:ea:fb:48:42:
4f:ee:82:fe:3f:e6:b0:a9:09:b2:d0:c8:4e:12:70:
0b:c5:8a:8f:a1:80:e3:a0:0e:b2:ed:7f:55:7f:65:
d9:f1:49:9f:b1:93:fa:31:14:71:b3:c1:b2:3e:34:
c6:f4:f8:3f:ae:e2:fe:4d:33:20:a7:d6:f0:57:34:
ec:0f:96:01:1f:9a:2e:f2:9b:da:f2:0b:23:18:b0:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:66:48:A2:89:B2:16:BB:EF:71:CA:C7:9B:B4:D3:2C:CD:DC:06
X509v3 Authority Key Identifier:
keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:eb:4f:2f:82:3d:4c:ab:8b:a1:3d:38:d7:d4:c5:e6:7f:
ba:b7:4e:bd:e5:27:0c:de:94:b0:03:67:6f:bf:6c:2d:a4:db:
e6:2d:ef:b6:49:79:3e:db:ae:c3:d4:19:cb:7e:77:ce:5a:46:
af:66:5c:77:e3:5e:11:ba:72:dc:30:97:a0:dc:7e:1e:db:29:
75:a9:4b:79:07:43:ef:fc:88:00:8e:0d:89:25:00:dd:e7:8c:
b3:55:0c:52:f7:91:1e:7d:85:a4:a6:bf:24:8a:fe:d6:eb:70:
07:fa:fe:56:f5:f8:e0:c9:6b:85:33:9c:81:5f:61:ba:39:27:
c5:57:11:5b:60:bc:47:f2:5b:9d:20:0b:2c:c1:21:8b:ca:ce:
95:7b:38:8a:33:cc:b0:0d:ba:c3:fc:c5:0e:ae:d4:78:8d:cb:
f0:b0:dc:8c:83:45:96:f5:11:68:91:88:a8:5b:ca:27:d0:c2:
24:94:07:df:f8:90:fc:6b:0a:e3:13:35:db:8a:20:d0:8e:3f:
b9:5d:80:2a:92:12:7f:69:b6:26:dd:92:b6:26:18:78:6d:85:
48:d7:cd:36:39:75:cb:e3:75:c7:a6:97:c1:74:82:cc:04:eb:
60:6d:df:3e:65:7e:c3:c8:43:aa:53:2f:37:9e:94:b1:97:3a:
5c:40:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:08 2025 by rpki-client