Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: ShUG1YWZ/oJeX23zQDO2yULU3pgoAG2pTY2XPUmHmyQ=
Subject key identifier: 85:96:8B:56:37:E8:A5:2F:C3:7F:D3:C4:A9:92:74:D2:98:A0:BE:4C
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019A4DE1721488C96590970C64C6E30C6C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:11 +0000
Manifest this update: Tue 04 Nov 2025 08:00:11 +0000
Manifest next update: Wed 05 Nov 2025 08:00:11 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: ws90/YjgafE/+yyrrjcZOyMALDhZx7VS6rhU1EzJvVE=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:72:14:88:c9:65:90:97:0c:64:c6:e3:0c:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Nov 4 08:00:11 2025 GMT
Not After : Nov 5 08:00:11 2025 GMT
Subject: CN=85968b5637e8a52fc37fd3c4a99274d298a0be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:6b:3d:b7:ee:c8:f7:87:ab:cd:f1:65:45:
9b:60:8b:cd:2d:e9:8a:be:ee:96:79:50:8e:9f:ab:
2f:50:16:cf:58:f1:ce:3b:8c:ab:fb:e1:cc:e1:c9:
38:27:68:57:34:0b:b3:86:c8:95:a4:08:ac:c2:f6:
4c:41:9e:8b:7c:04:67:c4:4e:24:26:bb:20:36:61:
3c:5f:4c:ca:db:b5:fb:63:fa:9e:d1:9e:67:6f:f3:
7b:ef:7b:65:ea:b9:46:fb:29:3b:6f:71:92:9e:a1:
ad:0a:7a:78:a2:5d:3c:d6:84:cb:59:26:c8:e5:27:
d0:d7:9a:23:6a:1b:7c:4c:3e:69:fc:ea:e6:de:33:
dd:4a:cc:ae:9f:65:eb:97:0e:76:8f:c4:b6:34:d1:
6b:dc:80:c4:11:4f:ef:3e:5c:15:b4:86:72:d5:db:
b7:73:21:3c:56:34:59:2b:88:48:20:f1:c1:a5:b3:
16:60:f3:bc:eb:bd:4b:ec:0c:e7:c8:c7:7b:c6:01:
27:19:e4:79:ac:23:df:77:e3:0e:30:6a:e8:d1:73:
8a:b3:b4:e8:86:d0:0a:88:cc:2f:cc:53:5b:09:86:
af:48:13:09:32:77:46:b8:9d:c8:b5:46:ca:90:c4:
cf:82:86:5d:55:6a:d6:ac:42:e8:2d:4e:52:1f:60:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:8B:56:37:E8:A5:2F:C3:7F:D3:C4:A9:92:74:D2:98:A0:BE:4C
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7b:cb:d1:a5:f4:dc:19:a1:8d:68:de:b6:fd:fb:e4:a1:7a:
ad:ef:ca:9c:6c:2f:30:a1:fa:d9:c8:c7:e7:c6:87:78:a9:6e:
62:7e:27:fc:d2:a3:10:4d:cd:9f:ec:34:d8:c1:fc:5d:4a:7a:
46:f3:06:c6:c9:96:82:b3:b9:0f:7e:db:f9:f4:ec:b9:de:15:
98:db:fc:ef:34:a2:06:da:ac:d9:77:5f:c0:0d:b2:af:0b:5f:
29:3f:a2:89:9c:b7:02:c0:16:84:15:1e:56:30:b5:11:e0:21:
b6:b5:b6:bf:a0:6a:99:bf:f0:cb:c5:a2:e0:e5:88:83:5b:40:
a2:b9:33:89:46:d4:a5:57:07:f9:29:1c:7c:d2:fd:25:a9:84:
14:05:a2:2c:fb:3d:19:1e:3a:88:04:4f:1e:1e:64:d7:32:c2:
2a:03:19:d4:7a:e5:0e:2a:8b:0a:63:9f:72:ae:bf:13:c1:e5:
39:a2:8a:43:6c:d6:64:b7:cc:7a:b2:c2:7a:8e:1a:cd:18:68:
54:d3:e1:26:9e:ed:55:0e:e6:9c:3e:cf:53:06:0f:54:b5:2d:
f7:dc:c4:f5:2e:58:6c:a2:8f:99:51:3b:51:96:99:e5:3a:a5:
b5:dd:b6:e8:8f:e3:d3:d8:0e:5c:36:a5:1f:cd:f8:a7:10:28:
43:45:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:22 2025 by rpki-client