Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: 9ONFPL+jheGLIaXtopKer9Jk0Afd7bBGQiRPXzhaprc=
Subject key identifier: A5:CA:2D:A1:E9:37:53:DD:FD:2D:88:25:53:A4:62:22:DC:6B:48:AE
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 01992255CB5D3D079E8EDEAFB603BB15D2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 04:01:11 +0000
Manifest this update: Sun 07 Sep 2025 04:01:11 +0000
Manifest next update: Mon 08 Sep 2025 04:01:11 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: tBJBuloG7axA5sQjFrh6uh2gSUfScqxnvy2RVDQ37Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cb:5d:3d:07:9e:8e:de:af:b6:03:bb:15:d2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Sep 7 04:01:11 2025 GMT
Not After : Sep 8 04:01:11 2025 GMT
Subject: CN=a5ca2da1e93753ddfd2d882553a46222dc6b48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:ef:f0:19:2f:88:0f:cc:cc:5b:39:88:c5:
d3:ba:f1:b1:d1:cc:32:70:46:9f:43:a2:80:f0:e9:
af:6d:e1:2e:43:e8:db:a9:9c:41:fa:7b:a6:f4:22:
e9:bb:bc:56:53:03:c6:c7:03:f9:50:59:74:74:94:
01:ff:3f:d9:9a:79:6f:f3:e3:19:3f:de:3f:94:00:
4a:42:4c:a7:b5:8a:ae:04:a4:03:10:f5:e8:f9:ef:
f9:39:d8:ca:1e:08:65:5b:59:f6:e8:3f:11:b3:b0:
75:a9:1c:86:53:d2:27:02:7e:80:df:aa:8a:26:f3:
dd:5a:ce:52:42:6a:09:f6:02:9d:2c:38:55:80:52:
ae:19:9b:cf:99:95:5c:20:08:73:da:ba:48:b0:42:
86:f8:00:60:ab:6f:8a:44:53:95:33:bd:d2:14:1a:
b3:f2:18:3d:ab:37:ac:e6:e4:be:cd:ff:1e:c6:4d:
f2:20:06:09:c7:8d:f3:b8:46:a2:82:f6:be:2d:08:
71:3b:1d:c9:55:a4:6e:32:c8:c6:45:5a:25:06:3a:
8a:ab:28:c1:ef:ce:68:51:21:0d:87:0a:45:30:16:
91:01:c5:56:6d:0b:c9:7e:c1:4b:f5:54:58:5e:91:
e6:91:03:b8:f9:11:d2:a8:ad:d2:82:9f:d1:65:5f:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:2D:A1:E9:37:53:DD:FD:2D:88:25:53:A4:62:22:DC:6B:48:AE
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:2b:84:62:b7:bc:ff:f1:cd:fb:e2:ff:f1:27:d7:3d:48:
f1:2f:2d:ac:27:35:19:07:78:f7:30:a2:51:6e:1e:1a:a6:11:
d4:0b:5a:b9:ed:c3:8d:52:c1:07:56:52:b1:c6:c9:87:dd:f5:
b5:6d:61:61:e0:fe:aa:b7:6f:60:3c:a5:51:ff:89:35:eb:ec:
53:f6:1f:05:56:91:e0:ac:c9:64:1e:73:75:86:b5:52:8d:49:
4f:98:33:c7:05:04:f5:a5:b1:51:55:e8:aa:77:0d:08:09:f4:
52:a8:12:17:39:b3:66:2f:b5:d8:1b:ca:29:8e:77:36:26:30:
30:a3:8c:41:af:d9:95:ba:18:aa:91:bb:11:46:79:59:e2:f3:
2d:8f:b1:c1:9d:64:a1:2f:2e:1a:55:52:aa:08:0f:fd:37:41:
e8:cd:b0:6b:8a:d2:6d:cf:a8:ca:e4:3a:5f:bb:3f:5a:c1:f8:
03:b8:38:bd:2a:34:db:19:14:64:89:c0:17:98:e7:fa:45:88:
9e:4f:56:5d:c7:7a:c6:cf:6e:95:02:0e:22:b3:77:6f:f8:7b:
eb:84:e1:3d:15:f8:27:08:8c:99:2b:e1:7d:8a:23:6d:06:8d:
32:08:22:7e:43:13:ec:7d:03:14:e0:10:1e:7d:0f:1a:0b:98:
2c:02:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client