Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: GordHwCeTCUuTIpmbJL3DKZoqK22jSiIG7XeZQF5UtU=
Subject key identifier: 2B:06:F7:63:5A:76:11:93:E7:98:95:8D:7F:53:90:BF:CA:87:F8:B9
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 019A4EF50AFC4D7602ACB9C05CADEC719598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 080C
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: SRB3WadAP739ceypZjnb8T6vLKVzOF846BgaPqnS18g=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0a:fc:4d:76:02:ac:b9:c0:5c:ad:ec:71:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=2b06f7635a761193e798958d7f5390bfca87f8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:f0:bd:65:e5:42:e8:74:71:8a:82:0c:c1:
90:55:86:2a:74:df:6d:8d:f1:29:cb:48:15:85:7d:
45:5b:06:0a:54:c0:7b:76:57:e6:74:25:2c:6a:29:
fa:65:41:b4:53:ec:03:73:78:3f:9b:5e:ec:ec:dd:
5c:f5:1e:30:8b:2e:82:72:02:a9:ef:cc:67:68:ea:
98:67:96:74:9e:40:50:e1:5d:53:b9:f1:1d:6d:e3:
1c:7e:a5:5e:00:54:80:e1:c0:60:ce:b8:10:8d:bc:
d9:a5:7c:29:dc:86:e5:fd:c8:f0:0b:a3:93:57:df:
e6:5f:47:11:9b:ba:94:ef:72:ae:47:9c:49:02:92:
90:4d:c9:82:b6:12:96:1a:4a:c6:d5:00:b9:3c:17:
8e:b2:1c:c5:b9:f6:24:43:6d:04:5e:db:6c:d8:c8:
fc:d1:32:b9:ba:e5:2b:91:6a:d7:d8:94:1b:e0:38:
eb:51:f6:a1:f4:47:43:48:28:98:93:8a:ee:dc:3a:
2a:75:42:94:b1:9a:68:9f:84:62:f5:96:a5:43:0f:
78:ec:fb:dd:80:9f:b8:40:36:2c:ab:b2:c5:ed:54:
8c:1d:3b:33:5f:4d:f9:dd:7a:5e:11:ca:c1:f2:58:
a9:dd:29:15:98:4b:db:08:9b:34:10:17:37:78:fc:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:F7:63:5A:76:11:93:E7:98:95:8D:7F:53:90:BF:CA:87:F8:B9
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:f6:50:3f:21:7a:29:1b:8e:76:3b:86:68:02:61:d7:4d:89:
da:9f:65:e5:ad:37:2c:de:25:92:c5:5d:2c:45:14:e0:88:1f:
1c:ff:2c:10:97:57:42:80:57:70:0b:3f:44:e2:03:07:3f:84:
47:c5:d5:be:0c:ae:46:ff:55:8d:3c:82:f0:0e:a5:1d:79:0c:
85:0c:59:3a:65:56:35:ab:75:30:96:a0:47:f8:b3:7e:21:1c:
dd:95:6e:97:26:3d:85:16:6f:05:e3:fe:ad:2c:5f:ad:75:f3:
4d:bb:23:9a:3a:26:a4:1c:19:29:01:38:9f:b5:cb:db:db:1c:
15:ee:b2:3c:60:e7:10:de:05:9c:ea:b3:67:99:26:b2:96:cb:
88:42:53:29:18:f2:70:4d:57:46:c3:1c:19:4b:08:83:de:70:
13:6a:d4:70:c9:8b:3c:05:ce:6c:f8:a1:89:86:a1:31:84:bb:
7d:fc:57:f0:fe:11:71:df:1c:2b:4e:51:e3:53:36:fc:fc:49:
e8:d8:e5:8e:91:aa:bf:60:12:07:86:c4:2d:0a:37:f4:96:f2:
90:ea:96:45:c7:f9:91:fc:c9:cf:d9:89:f1:8a:d2:85:83:01:
e0:1c:98:d8:1c:5b:ba:d5:37:5f:38:6e:b0:c6:78:a6:98:75:
f1:06:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:47 2025 by rpki-client