Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json)
Hash identifier: +guvM7OCLHZdTz9mHiN4r8sXiGXrZuvBegi2H4PASrw=
Subject key identifier: F3:23:D8:27:81:5A:B6:32:DC:32:C4:29:63:B3:1C:E9:06:96:FC:45
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 019A51876CABD8DE0B8F39CCFFA0B763B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
Manifest number: 025E
Signing time: Wed 05 Nov 2025 01:00:20 +0000
Manifest this update: Wed 05 Nov 2025 01:00:20 +0000
Manifest next update: Thu 06 Nov 2025 01:00:20 +0000
Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=)
2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=)
3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: zAxD92rpmkBhDYJHU8/0kAusuXbpfDDdH2Bgx3zaddE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6c:ab:d8:de:0b:8f:39:cc:ff:a0:b7:63:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Nov 5 01:00:20 2025 GMT
Not After : Nov 6 01:00:20 2025 GMT
Subject: CN=f323d827815ab632dc32c42963b31ce90696fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:42:07:b6:f0:95:e4:63:fa:68:84:4a:5a:
35:23:91:24:7e:1a:d5:f0:3d:d5:10:a1:a9:f3:b1:
89:96:94:e8:8a:80:e7:5e:0d:15:c7:2e:1b:d9:72:
bb:57:de:8a:a1:e1:e0:17:21:a4:ca:b0:47:b8:e3:
ea:5a:f3:18:33:e0:b7:e7:30:f5:62:9e:dc:d0:22:
b5:c9:e4:01:9d:cb:c7:36:f7:9d:9d:df:ca:7e:8f:
f5:d7:01:1f:87:49:2f:98:8d:66:6d:6e:ad:36:b5:
23:92:ab:93:39:23:c0:43:92:78:9a:b3:60:07:70:
8a:bf:e6:0c:80:16:f5:38:01:b6:b6:cd:08:67:53:
99:a0:1e:8b:98:97:d9:47:e6:fe:00:a6:42:b7:37:
fb:a7:46:48:6c:48:45:94:ed:2b:cf:3a:01:aa:27:
53:98:58:6c:01:17:81:74:77:07:da:c3:66:3f:77:
a9:72:d5:21:e9:52:38:52:9e:0e:e5:a7:2e:e1:1c:
63:b4:5a:4c:cd:be:36:fa:9d:f1:94:a9:c3:56:a7:
05:43:89:a8:12:5c:0b:9b:3d:fd:a9:c6:e3:ba:ab:
a2:5d:f0:56:12:3a:cc:78:fb:b5:34:1f:f5:c1:6a:
58:18:eb:db:a9:c5:e9:5d:27:9b:6e:f3:2a:aa:31:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:D8:27:81:5A:B6:32:DC:32:C4:29:63:B3:1C:E9:06:96:FC:45
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:25:d4:1e:7e:b1:b2:27:67:1c:20:aa:87:d7:7a:b1:e1:d4:
d4:35:5c:b5:cd:64:3c:71:2a:a7:77:5e:6b:aa:ad:90:2d:d3:
3c:00:00:3a:7e:c4:09:5d:29:34:0b:52:c5:8f:1c:3d:8a:7e:
31:1d:d8:a3:6e:ed:00:5a:dd:55:10:f4:ea:39:d9:a8:b9:98:
5e:cf:b3:c1:51:d0:18:2a:7a:9c:5f:ab:ae:98:52:74:52:91:
49:36:f2:64:8f:89:82:c1:51:e2:ca:45:44:3f:b8:ad:be:b3:
a3:cb:3b:f8:ae:2c:b8:c8:42:21:bc:fc:95:8d:c8:ac:07:5a:
43:8b:31:1d:28:0d:83:c6:04:b6:e6:7e:a3:1d:e2:57:3c:81:
7b:02:1f:54:ce:14:d1:45:15:e5:c5:c4:e5:ad:76:01:bc:44:
89:49:ff:7f:9e:9c:8a:74:af:53:0c:47:d9:20:39:18:73:62:
04:10:b7:c5:79:75:f7:4f:3e:e4:6a:79:31:29:c3:2a:8f:41:
a6:46:19:a4:59:f8:b9:10:60:50:e4:ce:97:f6:3b:61:39:ca:
0e:6b:00:a1:be:e1:f3:7f:30:43:9d:f3:70:bf:2d:22:db:72:
26:98:39:7c:26:75:81:63:7a:f3:55:30:e2:ff:bb:cc:32:b9:
d8:35:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:28 2025 by rpki-client