Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: dmH7x+X2ehJBHp9DmNijrohIYm7PaliK1ctdtF9tAAQ=
Subject key identifier: 25:0F:FA:2D:9C:E8:75:1B:C4:84:55:FB:9D:22:03:BF:16:42:4E:59
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019A51510955BDC408D22BFE73F8BFED0A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 00:00:56 +0000
Manifest this update: Wed 05 Nov 2025 00:00:56 +0000
Manifest next update: Thu 06 Nov 2025 00:00:56 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: Dr0xQ2rp4yz8fSA0wj6k4jxiVqLDr4iWLlsfbbIO5AM=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:09:55:bd:c4:08:d2:2b:fe:73:f8:bf:ed:0a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Nov 5 00:00:56 2025 GMT
Not After : Nov 6 00:00:56 2025 GMT
Subject: CN=250ffa2d9ce8751bc48455fb9d2203bf16424e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:b6:40:f0:c1:cf:49:84:f4:0c:c8:ba:e8:
3c:2a:5e:63:35:4b:f3:0f:21:04:8b:92:1f:4b:fa:
5e:06:f8:de:82:e3:6f:08:c6:55:7d:0b:33:64:4d:
da:7e:6b:5e:57:37:f4:98:46:21:22:46:4f:2d:fb:
fe:94:e6:87:f7:6f:a8:47:0b:f8:49:fd:73:a2:4b:
3e:31:a3:ee:ce:38:bf:89:11:1c:5c:7f:80:44:c8:
eb:90:24:41:7d:98:6f:21:3f:f4:7c:84:59:ca:cd:
0f:23:64:3b:20:40:d2:d3:db:15:58:b8:aa:39:66:
ea:b2:17:57:5d:a1:63:f1:f0:cd:69:1f:e8:6d:b7:
b9:ce:57:be:db:7e:12:9e:9f:99:03:c7:57:dc:b0:
66:48:bd:97:6d:8b:7b:f2:1b:38:ed:4c:d9:59:cf:
00:86:8b:e9:41:ae:71:36:51:d5:a7:25:ca:d9:aa:
d6:6a:30:66:1c:bc:53:5a:09:b4:63:aa:ae:7a:2f:
17:45:4b:3f:f5:68:dd:7c:65:34:02:b3:29:da:3b:
8c:29:14:df:de:18:19:f9:98:2b:a7:ca:f7:dc:18:
2b:5b:bd:f6:ce:b0:8d:4c:80:a5:15:90:f9:b3:0c:
78:0c:e3:4b:c7:d3:ff:e6:85:f5:de:69:4b:37:14:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:FA:2D:9C:E8:75:1B:C4:84:55:FB:9D:22:03:BF:16:42:4E:59
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:38:4a:0f:a4:03:70:e9:53:ed:bf:73:f5:00:1b:47:35:c8:
49:ed:18:60:82:c6:16:a6:dc:f6:9e:f2:61:d4:34:85:77:e8:
01:47:d0:79:56:8f:38:fe:af:ba:04:a8:a5:1e:db:c6:cf:b8:
a2:26:b6:0d:ba:0a:ee:c4:1a:43:0b:b7:00:31:4b:a2:53:36:
f0:5e:0e:7c:35:26:8a:07:23:29:86:31:21:02:73:a4:98:67:
09:1c:95:f8:2c:e5:bd:5c:87:43:12:a7:c8:7a:3e:4d:08:aa:
bf:3f:bf:13:e0:ae:c5:8e:43:c3:9a:99:62:4c:ca:6b:2d:bf:
a7:41:57:bf:24:24:a6:dc:f1:7e:dc:80:e2:cb:5d:ff:f4:64:
4a:63:df:04:7f:f4:02:9c:a3:22:44:9d:dc:c7:66:cc:68:f6:
29:74:04:08:96:a7:5a:f5:63:60:fa:4c:28:8f:79:e9:9c:21:
0b:ac:6d:fd:cc:6e:9c:d2:c0:96:33:77:d4:b1:71:dd:f2:7a:
f4:93:87:34:57:14:2d:f1:dc:fa:eb:ea:b4:10:98:4f:8f:21:
c9:85:7b:56:bc:74:2a:e8:09:8e:f6:16:fc:60:39:df:ca:52:
5b:dd:e4:60:dc:ed:ff:df:ff:23:27:9f:7c:4b:87:64:6a:d1:
1e:d1:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:42 2025 by rpki-client