Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: 4qBlrgelaJeG9ji7C+fs6axvn8D79zy6yyFrmnSac4c=
Subject key identifier: 5C:DB:97:8E:C5:12:83:81:3F:36:B5:F9:B3:57:F3:22:1E:F5:99:71
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 019A4E864F0B2077839D7C922DFFFB32BC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: Z/Ge3fd/CSlFSeampZNiIzKWfYQzB8YZyufTAwjHW50=)
2: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (hash: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=)
3: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (hash: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4f:0b:20:77:83:9d:7c:92:2d:ff:fb:32:bc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=5cdb978ec51283813f36b5f9b357f3221ef59971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:d9:56:76:97:04:49:b0:0d:ec:5e:f9:98:
62:ac:bd:79:c3:e6:c8:bb:b1:b4:07:cf:15:c6:08:
13:06:e5:59:12:f2:83:27:d8:be:15:80:95:0d:3e:
05:86:85:6a:7b:91:c4:0c:ef:cd:a6:30:e2:ce:4b:
cd:0c:39:22:54:60:0b:6d:e0:80:08:ea:9f:7f:da:
77:8a:7d:21:25:db:98:c9:9d:0a:d5:78:74:0c:27:
d0:25:9f:e2:d0:8d:10:d2:81:2a:e6:50:01:6f:6c:
82:32:47:8e:31:97:a8:11:e1:68:19:bc:8e:6b:a3:
8a:80:5d:a0:de:5a:27:d0:83:96:e3:90:ad:4e:39:
e4:79:55:dd:6a:2b:b1:7e:a3:12:63:71:b7:5b:09:
7c:28:a2:52:4a:8d:f3:2e:3a:91:c0:a0:8c:ae:0e:
81:c6:0d:5c:f9:64:cd:6b:dc:f1:51:f3:e0:61:cb:
07:94:66:2c:f5:71:12:00:ce:bb:a9:53:7b:82:1f:
2c:dc:26:1a:56:a3:7f:ec:39:6d:cd:90:91:e8:04:
b2:64:68:4f:73:a7:60:1a:2f:55:b7:67:90:5f:76:
5c:14:02:94:69:d9:fc:e5:ed:fb:44:ed:56:ee:5e:
66:72:31:b6:1e:82:d8:45:5b:71:2b:27:13:e1:9b:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DB:97:8E:C5:12:83:81:3F:36:B5:F9:B3:57:F3:22:1E:F5:99:71
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:cb:1a:d6:a3:1a:a2:dc:ae:76:47:59:43:fc:33:62:04:
ee:7a:3a:a6:52:6a:0e:26:e0:4d:50:6c:ba:f6:2d:90:8e:d2:
b5:41:6b:96:fe:4a:3e:24:90:51:11:02:a0:d9:b3:93:ef:73:
67:da:94:67:c0:a7:78:4a:9c:6e:06:99:d9:ec:33:83:f4:a1:
b3:0a:5c:9a:e5:f8:41:6a:ad:05:d8:d6:3d:02:ec:85:92:f6:
e4:74:17:4f:50:b9:ae:d6:b9:a4:75:38:fe:64:b7:13:17:b9:
5f:5b:37:b7:14:62:d8:ee:0f:43:1a:5b:6b:fd:6a:3d:f2:ea:
d6:4f:68:d3:a4:2a:91:c7:b5:bb:a1:38:42:94:76:f1:81:e9:
cf:c7:ce:e9:e3:5e:6c:67:d8:03:a1:a5:bf:cf:ea:01:ca:78:
84:7d:7e:35:95:61:53:ec:d4:c3:e1:42:7e:0a:07:30:d0:ed:
63:a2:dd:72:eb:2e:b1:ce:85:d1:f6:59:6b:7f:85:ae:06:a6:
b2:dc:8f:81:50:95:67:f4:fc:52:b7:a0:cc:67:6c:11:4e:46:
0a:d1:2e:92:a4:74:ef:f0:39:3e:ea:92:14:2a:f9:f4:a8:9f:
0e:d9:ed:9f:ce:22:0c:57:58:fe:d0:42:cb:e3:2b:d3:6d:7a:
21:1d:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:58 2025 by rpki-client