Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: f6ZFeev4sSgtC/YHkXPSqWry52K9+PAKIoQ4Cmb0pZw=
Subject key identifier: AD:4E:57:5F:72:F6:3E:2E:1A:A1:0D:98:8F:E2:89:A4:36:80:F7:70
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 01977AF95AB98F4DB721DB5FF2252AF0A205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0695
Signing time: Mon 16 Jun 2025 23:00:51 +0000
Manifest this update: Mon 16 Jun 2025 23:00:51 +0000
Manifest next update: Tue 17 Jun 2025 23:00:51 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: 36+A4d09t27+GMd51/DpEwVWsGwRPPW/9X1v61JiG4U=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:5a:b9:8f:4d:b7:21:db:5f:f2:25:2a:f0:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Jun 16 23:00:51 2025 GMT
Not After : Jun 17 23:00:51 2025 GMT
Subject: CN=ad4e575f72f63e2e1aa10d988fe289a43680f770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:22:d4:c5:ac:dc:4c:1e:1e:bc:02:3e:86:
e5:aa:8f:af:6b:ad:7a:34:94:d0:97:94:73:03:ae:
77:a0:29:3f:63:60:97:b3:66:a7:d2:94:27:db:32:
9d:2e:a6:bc:d0:af:0c:40:b7:a2:b3:03:64:d9:05:
62:f7:f0:01:4c:78:59:1c:6b:42:f0:05:c7:b7:08:
21:5b:f4:c0:b7:e8:db:6b:dd:1b:47:ba:64:b6:89:
ce:9b:f3:ca:21:01:ec:2b:22:29:3f:d1:3a:9d:c2:
a5:34:c6:61:1f:2e:fb:d1:7e:8b:07:bd:96:25:ea:
a0:c6:27:8a:e3:3b:ca:35:53:8e:b9:fa:2d:5b:09:
e9:f6:70:d7:ff:4e:6c:c8:96:15:c5:34:b8:f8:1f:
de:7b:f4:4e:36:ac:d4:83:82:f2:66:ca:fa:ec:80:
b5:fc:66:9e:81:44:70:b6:4a:b9:29:ad:40:bd:2b:
2a:91:68:30:e3:12:0b:e1:56:33:f7:de:55:34:cb:
06:ca:64:fd:0c:ad:af:6a:72:29:97:08:32:18:4f:
f4:24:9d:bb:7c:ab:72:12:ac:d3:15:ff:f5:89:37:
eb:25:73:2f:e1:3c:f3:58:36:c1:9b:3c:6a:2f:39:
79:20:cb:b6:02:b4:2b:ae:97:aa:28:ad:17:fa:af:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:57:5F:72:F6:3E:2E:1A:A1:0D:98:8F:E2:89:A4:36:80:F7:70
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d6:4f:a0:8a:e8:61:c6:9b:4b:33:83:30:f3:a5:eb:97:c7:
49:4b:37:4e:40:83:33:95:64:3e:f3:bb:ab:5a:b5:5b:10:48:
62:cb:93:f9:ad:b1:f6:4d:b3:f5:72:23:2b:9e:f1:bc:e0:e4:
de:26:d3:c3:f1:0c:dc:49:89:da:84:d1:9b:16:30:7c:38:1b:
3b:a0:51:fa:0b:94:1e:0d:2c:74:85:d1:93:c6:32:13:0d:4a:
d5:41:30:a9:92:92:f7:e9:d0:fc:e6:e4:1f:30:db:d3:0a:72:
3a:c5:3f:04:81:fb:a9:8e:1a:50:42:a5:ab:95:3b:34:df:00:
97:b2:17:14:2b:d2:ef:4c:de:18:82:68:23:59:7c:1c:37:4f:
df:53:4d:c8:3d:e5:20:5e:0f:33:e0:d4:74:db:1e:3a:a1:4a:
ce:45:be:7e:17:2e:f0:47:e8:96:ae:b4:c4:63:e1:d4:d1:8d:
31:4e:94:e6:34:d7:1f:f6:84:fa:c2:01:c0:6b:84:e0:51:93:
2b:f7:e1:f3:32:f8:0f:a8:eb:86:5d:9e:4e:ab:0f:26:fe:04:
ba:56:93:c4:1d:05:d3:eb:8d:d7:78:52:71:64:d8:b8:8e:15:
cf:56:09:8b:5c:f5:75:9a:c3:55:05:a9:19:f1:d3:d9:5b:85:
10:98:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:56:47 2025 by rpki-client