Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: wx0ScikJCO3Hl2pdN06QED7lU+kDiGDyyVU7PfZZYNQ=
Subject key identifier: 80:18:FA:4E:3C:E5:6F:8B:10:C2:96:32:61:0C:6C:C8:4D:4E:AB:CE
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 01976FD10C5E4BCD38C7060CE869314F82A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0D2A
Signing time: Sat 14 Jun 2025 19:01:00 +0000
Manifest this update: Sat 14 Jun 2025 19:01:00 +0000
Manifest next update: Sun 15 Jun 2025 19:01:00 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: ekBZeljx9F7Kvm8qRE9bK4Hs+ZbjSARqkGbk0wkzK7s=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:0c:5e:4b:cd:38:c7:06:0c:e8:69:31:4f:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Jun 14 19:01:00 2025 GMT
Not After : Jun 15 19:01:00 2025 GMT
Subject: CN=8018fa4e3ce56f8b10c29632610c6cc84d4eabce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:34:67:c7:a1:1f:d0:e4:72:86:56:2b:6a:
30:66:04:9b:64:7c:d3:21:1b:19:92:0a:e2:11:89:
34:55:99:2d:cf:05:ad:c7:5e:a8:c4:ec:56:44:4b:
4e:78:96:d5:3d:0b:c5:96:71:1c:f5:4a:bd:b9:58:
78:aa:83:5b:d7:ed:67:e4:05:14:ac:f9:8d:f1:f0:
28:a9:70:9e:7d:d7:29:fc:9d:c8:69:a8:92:d0:40:
19:73:dc:ae:31:23:07:84:fd:a5:b6:e7:f0:32:5d:
84:95:a7:75:3d:d2:d8:92:f6:ac:30:b9:8b:9d:7f:
60:f1:97:80:56:b4:1c:35:43:5e:4c:f2:87:ea:21:
76:52:f4:a9:a6:88:8f:7d:24:56:1a:41:01:7d:41:
51:f6:05:a2:08:f5:83:e6:6b:b1:4f:29:83:20:85:
7f:a4:2d:ec:29:7d:ae:7f:32:1b:a0:74:32:e2:b6:
91:04:a5:eb:f5:d6:17:ff:e5:69:01:ca:72:3d:1d:
84:5e:93:e5:8f:f3:f6:e6:12:c0:d0:57:5a:2c:bc:
30:ea:5f:11:c5:a3:34:be:8e:bf:23:b5:62:f2:e3:
d9:b7:3b:cb:46:7c:fd:86:34:a8:06:89:f4:c9:6a:
a3:62:f2:76:69:3d:b4:d1:77:98:f3:a7:aa:32:d6:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:FA:4E:3C:E5:6F:8B:10:C2:96:32:61:0C:6C:C8:4D:4E:AB:CE
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:11:4b:38:30:c5:48:c3:e3:c8:90:0e:7e:2a:68:98:bf:
b6:be:65:b3:9a:3f:7d:9e:c5:19:30:13:b5:c1:15:56:6a:c9:
4a:07:17:5e:2c:95:ff:f1:16:b5:1f:e5:fe:20:bf:d4:77:d9:
a0:49:5b:fa:12:a0:6a:07:6d:3f:6a:b3:10:44:f4:de:97:e0:
fc:40:5c:33:d9:01:9f:14:f7:1b:2b:b6:c5:23:1e:d7:36:bc:
9e:de:10:72:c2:19:07:b8:42:d4:f0:b9:a1:29:db:ce:4a:6e:
60:ae:e9:c9:89:e7:d4:cc:82:85:53:c5:d9:86:2a:6e:20:32:
16:66:69:22:62:1b:33:69:9f:ab:46:58:84:d5:33:c4:20:04:
ed:b8:a1:d0:1f:89:33:0b:f5:21:a7:95:ad:3e:bd:d0:d2:b2:
11:3f:7c:0a:9d:8f:1c:7e:2a:15:31:29:e5:cc:e7:a8:e6:1f:
b8:d6:ba:82:d8:1c:27:ce:75:6b:9a:57:2d:a9:6a:35:c9:b2:
6e:9b:52:5e:7c:6b:59:f8:5c:d8:ba:5e:40:e9:9a:65:24:c0:
87:ad:ba:80:60:ad:a1:c8:ac:ff:e5:e5:41:fe:43:b3:e2:3e:
00:d3:55:98:63:3c:11:30:b9:3a:2f:5e:7d:e3:f6:8b:85:14:
a8:4d:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:47:23 2025 by rpki-client