Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier: KVeet44+mg6umfcwg3mPh8sh3bJ1LQ0RhQv0yOBjt+M=
Subject key identifier: 30:4D:12:00:EF:94:7E:60:31:78:6B:45:E1:E0:E3:24:87:D9:8F:D3
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial: 019879AE9F0FCD4C835777AC36EAA662D0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number: 1620
Signing time: Tue 05 Aug 2025 10:02:23 +0000
Manifest this update: Tue 05 Aug 2025 10:02:23 +0000
Manifest next update: Wed 06 Aug 2025 10:02:23 +0000
Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: jj2xcIYNM6Qq5beR8GKRHciPxWmAuuy9p64bwPVBEX0=)
2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:9f:0f:cd:4c:83:57:77:ac:36:ea:a6:62:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Validity
Not Before: Aug 5 10:02:23 2025 GMT
Not After : Aug 6 10:02:23 2025 GMT
Subject: CN=304d1200ef947e6031786b45e1e0e32487d98fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:c9:e7:a7:26:bf:09:3a:4e:3d:1a:c7:a2:
04:3a:90:16:c3:f0:fe:3e:39:d7:c9:28:04:bc:85:
fa:c6:d1:74:4c:25:e3:39:1b:06:9c:58:b2:fc:35:
2d:5e:c0:d2:cd:a2:ff:4a:ff:7f:4c:df:e2:f3:04:
5b:69:7e:f6:7a:a4:2b:68:ef:16:b2:45:e5:b6:1b:
20:ab:af:7d:ee:79:d7:d6:bb:76:d1:9a:3b:86:3a:
99:18:dd:61:05:eb:0a:a8:53:93:b9:33:f4:d6:e4:
3b:98:a1:14:05:fc:c6:bc:12:71:0d:b9:e6:ce:a8:
a5:14:67:db:9d:04:53:c2:d7:5b:01:3e:22:96:2e:
6b:4b:f3:eb:13:62:39:09:f0:c4:a6:18:60:64:2d:
b5:59:bd:c4:79:5a:73:cd:22:2e:9f:6b:ea:ee:73:
41:d2:9c:73:2a:39:14:1d:fc:b3:46:6b:2e:55:70:
1e:b7:01:d2:93:25:90:5e:8d:73:7c:f1:73:bf:ee:
97:15:e4:d9:46:ac:d8:73:f1:60:4a:31:ae:ba:b2:
b1:c5:8c:4e:e4:bc:36:95:a1:84:2d:87:b6:a8:84:
76:f8:04:b4:30:2f:0a:f3:c9:23:ce:e7:e8:4c:e4:
cc:32:55:4e:59:0f:4f:c6:be:e6:ee:9d:e5:e9:c8:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:12:00:EF:94:7E:60:31:78:6B:45:E1:E0:E3:24:87:D9:8F:D3
X509v3 Authority Key Identifier:
keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0d:09:7b:c1:a4:c8:bd:d9:b4:9f:01:c6:ea:6f:5f:9f:d7:
81:22:bd:58:28:be:95:f7:3b:2a:a3:cf:3e:3c:7f:51:60:f4:
f7:88:71:d0:02:04:9d:d3:62:42:a6:fd:2a:7e:bf:6d:d7:7b:
cf:af:4d:e0:a9:37:3d:70:e7:08:eb:c4:47:f1:e2:61:a0:d5:
c8:da:4c:24:f7:7a:1f:5f:d2:49:97:8f:dd:e5:db:54:b7:69:
2d:1a:e1:05:bd:9e:01:de:4d:fd:eb:23:f4:d5:f7:70:e5:b1:
6b:57:9b:6e:fd:a3:47:25:0a:c5:84:d0:a6:b1:5b:9d:89:e2:
21:d4:2e:67:2c:e0:df:70:84:03:d3:9b:11:4c:dd:9a:fc:fc:
3b:7f:24:5e:9d:0c:d2:43:ee:ae:4f:94:c6:b4:42:23:4b:bb:
db:dd:fd:5b:79:e9:47:86:a3:07:78:9c:f8:16:db:39:26:df:
e8:e9:05:cf:ca:19:89:56:8b:f6:c0:70:27:da:a7:f9:86:51:
cf:e4:64:31:41:e3:03:cb:54:7f:6e:ec:8c:dc:14:94:c3:98:
2e:23:62:4a:d2:b6:ea:b0:66:f6:f7:b8:f8:a9:09:12:9f:fd:
28:c4:b7:6e:09:b1:6a:42:98:b9:67:6b:15:18:df:3e:33:13:
7d:b0:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:46 2025 by rpki-client