Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier: EyYdCkFlWzpOodpUbg1ESDeZB0MwsduxSvyTu5PmTGE=
Subject key identifier: DB:01:58:06:03:1C:AC:68:D7:84:91:D0:DB:FC:7D:0B:3B:7A:1B:F6
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial: 019A533FA96AB8E59A985C4FB30B457D337D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 09:01:12 +0000
Manifest this update: Wed 05 Nov 2025 09:01:12 +0000
Manifest next update: Thu 06 Nov 2025 09:01:12 +0000
Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: ut7pbdu4SfnDjp2Xs4Mue5WX5R/bW5fo16K+SOlNJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a9:6a:b8:e5:9a:98:5c:4f:b3:0b:45:7d:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Validity
Not Before: Nov 5 09:01:12 2025 GMT
Not After : Nov 6 09:01:12 2025 GMT
Subject: CN=db015806031cac68d78491d0dbfc7d0b3b7a1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:eb:f0:a2:53:19:bb:f5:28:b3:6e:dd:db:
e0:85:a2:28:24:fe:a6:1c:7e:32:12:09:25:f9:14:
33:f4:b0:7c:7d:4d:dc:7a:4b:bd:7a:94:c1:4a:65:
b4:ca:aa:39:cf:14:7a:7d:2f:90:12:57:1a:65:c9:
49:7b:3b:d3:f7:5d:ca:45:d3:4c:56:11:de:2e:ad:
29:70:67:67:ca:39:c1:51:cd:04:e3:68:fe:02:70:
ce:a5:a6:f4:fa:ff:50:b5:06:82:e1:88:14:97:d1:
11:a2:3e:be:c7:81:5f:0a:b4:eb:ce:6f:c4:f6:9e:
15:7d:38:53:e5:38:27:38:51:0b:0e:08:2b:28:33:
57:54:0f:24:dc:b1:b9:6a:1d:27:0f:d2:ac:6b:b8:
c5:fc:79:f5:4d:33:a2:3d:f1:7c:5a:0c:40:70:1d:
9d:23:20:c3:15:d2:b7:fb:e1:0c:38:fb:8b:01:18:
46:e8:11:61:ca:0f:7b:b4:84:04:45:8e:7c:40:fb:
79:1c:bc:a7:b5:37:e6:de:5a:bd:26:eb:a7:e3:98:
59:bc:c5:99:17:5c:19:16:c1:72:08:eb:83:f4:11:
3a:72:a6:8f:9b:56:5e:23:9c:ca:ca:41:b7:95:ca:
ca:70:5a:e7:b2:47:52:f4:df:dc:df:f9:e4:d6:4f:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:58:06:03:1C:AC:68:D7:84:91:D0:DB:FC:7D:0B:3B:7A:1B:F6
X509v3 Authority Key Identifier:
keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:d2:61:df:eb:b7:dd:ea:5b:44:b3:c4:c5:d0:2b:89:85:
9c:6b:20:8f:8b:8e:c0:76:57:fe:06:7c:f6:f5:1d:d5:f2:75:
cc:51:c9:ef:ab:4f:09:cb:19:9d:22:59:f1:d6:b1:dd:6a:9f:
35:fb:7c:40:27:39:ff:c5:8f:fc:4a:c0:92:7c:d4:bf:b2:55:
14:5f:90:a8:a3:df:25:95:85:64:d9:03:69:5b:d3:32:a7:b8:
9c:84:34:43:9d:27:7d:0f:9f:d9:75:33:4b:e7:f3:f6:45:56:
01:d6:2a:4d:59:41:aa:f0:fd:6a:98:b6:9d:70:e0:de:b2:fc:
a1:9f:eb:3d:80:ba:77:5e:0d:4f:39:3a:36:fc:ff:3d:4b:df:
9a:00:e8:5a:4b:aa:64:bb:21:01:25:fc:b3:7f:e5:76:6f:c1:
06:0d:2d:63:7b:8d:2b:2f:3a:5d:85:d2:80:8b:df:d5:ef:06:
ac:47:c9:60:a8:6e:53:bb:4a:8b:ec:7f:36:e7:61:af:4c:a6:
e6:b1:05:ed:8b:6c:25:26:09:ca:71:a7:20:59:07:aa:be:50:
69:59:45:24:00:6b:e8:13:cd:29:ab:36:19:6e:e0:33:4b:07:
9b:86:b3:d0:e1:ac:b9:bd:44:af:7c:99:63:a7:9b:d7:e4:ec:
17:47:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:35 2025 by rpki-client