Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: KneL/uG8XYHyAErjuEXbiKbcI9JnhOqWwODfSOi7gtY=
Subject key identifier: 4E:0B:AA:D1:76:24:DA:DA:FF:15:AB:C3:CE:69:86:25:E3:B2:8E:E4
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 01987486E4360425AF97B2C085506A8ECD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0DB1
Signing time: Mon 04 Aug 2025 10:00:53 +0000
Manifest this update: Mon 04 Aug 2025 10:00:53 +0000
Manifest next update: Tue 05 Aug 2025 10:00:53 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: nnBayDuOppRTjKHG+rJQ0JWMO+skNl5vULmQ/uBYhTY=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:e4:36:04:25:af:97:b2:c0:85:50:6a:8e:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Aug 4 10:00:53 2025 GMT
Not After : Aug 5 10:00:53 2025 GMT
Subject: CN=4e0baad17624dadaff15abc3ce698625e3b28ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:c7:1c:ae:42:37:15:02:0e:2c:0a:11:94:
23:15:e1:7e:a4:c2:b5:46:fd:da:ca:df:6d:30:13:
ad:b0:d1:fe:53:18:a6:d9:40:8b:b0:0a:82:99:fc:
f1:b1:72:05:17:bb:70:74:21:66:e9:52:0a:b6:c4:
29:e4:88:68:ea:ca:80:42:d9:72:e1:c6:27:23:b3:
2d:3c:74:3b:cb:97:6f:1f:35:db:42:f3:0f:b8:32:
53:53:e1:03:b4:e4:44:2b:37:47:74:f9:be:ef:24:
59:47:57:26:71:d4:26:6e:89:83:54:6d:e4:89:9d:
e5:0e:92:15:8d:c3:72:cf:02:00:c6:24:76:a3:dc:
18:f5:b0:2d:90:c0:2b:44:50:b9:3a:a2:c8:77:6a:
16:20:ec:2d:98:7c:fa:a5:64:42:41:b7:0b:38:12:
1e:84:ec:8f:5e:7a:fb:b2:cd:5f:3a:31:95:b0:96:
df:de:d6:63:cf:44:6e:5f:3e:42:66:8a:dc:3c:7e:
a1:24:6f:9a:7c:3b:af:89:1d:78:7d:1c:87:24:25:
ff:de:4f:42:a8:86:d5:75:b5:cb:3b:3c:c4:f4:a1:
01:31:4e:af:ca:82:ec:d7:1e:38:b8:a7:9c:c0:76:
1a:30:5d:cf:83:fa:d8:62:cf:2a:b9:35:9c:64:d6:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:AA:D1:76:24:DA:DA:FF:15:AB:C3:CE:69:86:25:E3:B2:8E:E4
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:4a:37:a1:84:4e:29:ad:f2:15:24:c1:7e:36:b8:9e:2d:
2a:0d:7c:03:4b:c4:8b:77:92:b4:53:ea:08:91:8b:00:8b:f6:
6a:bb:91:68:38:65:18:cc:1f:71:84:f5:8b:d1:c9:46:40:94:
d2:35:42:2e:39:db:f5:c3:43:3e:e0:ed:e6:c2:72:51:d0:d0:
52:6e:a6:7d:f2:4c:3b:5d:ef:22:8f:c3:5c:57:c3:e8:2f:53:
f6:c3:e5:f3:d9:64:5f:80:03:21:7a:b3:e2:20:8d:43:07:1f:
aa:2a:db:c1:d8:1b:b9:f1:f9:82:a9:ce:f6:37:e7:4a:77:60:
5b:00:b3:fb:3a:d0:df:81:3e:55:dd:36:f1:aa:89:10:45:84:
ee:6f:fb:28:ea:3f:0f:fd:3c:a5:ef:10:1c:b9:19:93:b9:e9:
db:85:60:e2:8e:11:f2:63:2b:64:39:44:cd:64:17:10:c4:ee:
71:58:a2:51:85:fa:9a:ce:26:16:a9:4c:ab:2e:1d:da:0e:72:
21:d3:7f:3c:9c:bd:ab:d3:a7:cf:de:9d:22:f6:00:a5:91:00:
ee:c7:ec:74:1e:1d:45:a5:51:36:f9:c3:68:52:e9:51:64:93:
12:c6:f3:79:19:a0:62:d7:ec:a4:02:58:06:5d:2d:ce:c4:df:
b3:0a:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:10 2025 by rpki-client