Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier: E5VqH/ZVgGOEkcJdzsVF0QgKGgoIpQRdTKqH+ObVdE4=
Subject key identifier: 43:C5:B2:63:F1:A5:E0:1D:15:71:D5:E2:87:9C:DC:05:2C:24:0D:AE
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 019885443F191CCEEA6C024F9695EE284137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number: 0F27
Signing time: Thu 07 Aug 2025 16:01:38 +0000
Manifest this update: Thu 07 Aug 2025 16:01:38 +0000
Manifest next update: Fri 08 Aug 2025 16:01:38 +0000
Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: JgloP6lhK2d82IzujCJAYQLi3APe50CcSrgMnGRCMqw=)
2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:3f:19:1c:ce:ea:6c:02:4f:96:95:ee:28:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Aug 7 16:01:38 2025 GMT
Not After : Aug 8 16:01:38 2025 GMT
Subject: CN=43c5b263f1a5e01d1571d5e2879cdc052c240dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:7f:fe:d8:ae:62:17:ac:88:3d:47:a2:e9:
3b:90:cf:c3:60:52:8f:72:a1:70:2e:ef:63:db:a2:
a7:e0:36:d8:87:1a:14:8c:db:c8:cc:67:e4:12:62:
78:3b:e1:01:3f:46:8f:9d:7c:e1:7f:80:f3:8a:a5:
3d:f2:2a:26:a4:b6:2a:e1:cb:00:83:5d:2d:83:7a:
3d:78:2a:14:20:17:58:6d:44:d7:5f:a7:fd:21:b9:
7f:cf:a4:cc:06:50:1d:59:72:44:98:c4:dd:07:2e:
1d:d4:e0:bf:c2:aa:f2:a2:db:fc:44:d3:aa:b3:93:
61:e6:3f:d5:7f:df:e3:04:d3:67:c6:1e:a4:80:b6:
3c:2d:1a:fc:b0:4f:06:60:1e:ff:ee:72:2e:1d:3c:
be:d6:fe:90:73:a8:db:4a:de:30:ea:22:62:87:fd:
b3:e8:99:51:b3:48:67:17:ee:4c:6e:eb:bd:6c:40:
0e:97:3b:31:d3:ea:ef:95:a1:61:18:c5:a1:8b:07:
19:4e:5d:e4:47:8b:8a:e4:1c:fb:93:25:0f:cf:54:
2a:9d:fc:76:97:84:57:65:5d:cb:24:1f:ba:a4:ab:
33:f5:1e:6c:9f:78:57:c7:22:4f:38:f0:54:d9:ce:
0d:e5:d5:26:13:48:56:8b:37:c5:2c:ae:46:e1:5f:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:B2:63:F1:A5:E0:1D:15:71:D5:E2:87:9C:DC:05:2C:24:0D:AE
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:19:42:98:a2:3b:2c:f7:94:66:52:b0:d6:b0:4c:82:f7:
5c:c9:ca:a8:33:71:5a:4f:f2:79:da:43:af:78:a9:93:fc:f7:
b8:6b:88:9d:52:9b:eb:1f:33:14:fe:d8:9e:90:23:56:df:d3:
78:06:ad:de:b2:06:0a:a9:8f:3d:f5:47:60:1a:52:c4:01:f8:
aa:a9:57:6a:6a:7f:e4:8e:3a:d1:74:b2:14:36:e7:a3:04:45:
fb:e1:62:7d:49:33:b1:c7:cc:55:90:36:69:f3:ec:78:46:50:
f4:ca:95:e6:58:ef:ce:85:d0:8d:11:f8:d0:77:98:50:08:65:
a4:a8:ec:6e:f1:15:d6:b0:95:82:5b:c2:59:95:11:b6:6a:c3:
bc:d6:78:a3:c3:a4:5d:2a:48:98:e0:94:1f:3a:3e:0e:e8:db:
15:5f:44:a0:a4:19:99:97:4d:f6:ec:a3:03:40:92:5c:78:3b:
18:a9:83:39:5c:6f:f9:77:07:b1:fc:93:a7:ec:9a:87:b4:ad:
76:00:eb:bc:87:24:8f:f0:33:e7:16:b7:b7:c0:15:57:f0:c6:
20:b0:f2:48:e8:dd:8d:3b:c6:1b:59:79:80:74:4c:5f:ad:80:
54:c1:7c:2e:61:6f:ce:30:07:3e:37:79:25:3a:3c:0d:3a:e1:
24:8d:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:48 2025 by rpki-client