Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: esucniKT6DXjJFfONXh++iI5b3aGOjzXTJKgGFMYAGk=
Subject key identifier: 51:2E:CF:D1:D1:8F:FF:F8:8D:E4:92:C7:5F:48:43:14:62:2D:E7:B6
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 019A4EF5BD87EADC7B936731E0D74E1F5F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 13FB
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: tXShyXNCmfRQ4bmL9AEwLcCeNnQxm+tfM/WH18ORq3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bd:87:ea:dc:7b:93:67:31:e0:d7:4e:1f:5f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=512ecfd1d18ffff88de492c75f484314622de7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:2a:80:c8:f0:e7:84:43:0e:1c:23:f7:a4:
06:44:a1:9d:bf:b4:94:8a:ff:54:1d:84:f8:af:39:
fb:cd:a0:45:07:fb:79:52:d8:51:a9:cc:b8:e4:a5:
15:ea:8f:79:7e:94:77:73:0c:50:e8:5f:95:bc:21:
62:55:eb:73:ba:c7:f4:18:2b:84:76:16:bc:c3:b5:
18:91:e9:77:ca:e8:41:a0:b3:30:ea:07:b4:f3:c0:
5c:4a:67:cb:ad:0a:9b:f5:db:89:7c:30:e0:b0:b9:
c5:7a:db:e2:55:80:8a:62:74:33:66:58:73:85:fa:
24:2d:44:c7:26:ff:5d:45:61:27:c3:c9:f6:55:55:
6a:9d:12:fd:88:4c:47:0a:53:ae:68:8f:b1:fb:04:
7c:80:82:5c:36:f5:dd:b4:ac:7c:60:d4:18:79:b2:
9b:35:8f:7c:d4:26:a2:c8:9c:51:1c:32:9e:e1:cc:
8a:f1:ae:c4:55:5a:35:67:1f:12:72:77:43:d7:bd:
be:2d:1b:bc:07:c6:05:4d:f9:da:9d:46:75:72:f7:
db:50:d4:1a:64:99:e9:8b:17:2d:79:03:31:f9:16:
a7:1a:a4:a7:67:ea:ce:0b:02:a4:39:ed:2a:ab:28:
86:e5:db:cc:26:46:ea:c4:03:1c:4c:f4:88:db:ee:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:CF:D1:D1:8F:FF:F8:8D:E4:92:C7:5F:48:43:14:62:2D:E7:B6
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f6:05:74:aa:42:67:6a:ed:69:04:9d:32:77:65:83:65:d0:
e3:ce:fb:76:36:2c:5a:02:ad:99:db:61:bf:61:17:2c:a3:74:
eb:3c:4f:81:94:6e:46:0a:a6:f6:d6:43:71:c2:2f:15:72:81:
fc:f9:d6:71:de:0b:8c:f6:d5:93:bd:ad:52:c3:21:90:36:7f:
ee:ea:a1:a0:e8:48:8a:14:88:73:58:60:0d:64:c1:a9:f4:b6:
7b:72:44:95:a4:76:9c:75:cd:ad:b6:2f:64:09:4e:f7:9c:2e:
8f:31:96:b0:f4:0a:2b:80:01:4d:1d:90:8e:7e:64:b0:24:33:
7f:f9:f7:ee:cd:70:dc:05:8b:94:bf:7c:20:f2:31:3b:b3:0b:
ff:a6:38:e3:33:dd:ab:49:91:1f:5f:95:08:4e:73:e7:a3:33:
ef:7d:8f:d1:85:df:46:98:cb:73:11:db:71:1f:a1:a4:0d:d5:
50:f7:24:03:0c:d7:bf:bc:df:93:d0:63:0b:e0:3d:85:13:74:
5f:72:a6:b0:c8:51:62:d9:5f:87:1b:91:c4:98:3f:b7:9c:e3:
7b:21:14:7f:46:55:34:59:c2:af:14:3e:c4:58:4d:51:b5:3f:
30:3d:3b:39:1c:a9:dc:28:58:cd:76:3c:23:82:c6:6a:23:a6:
01:0c:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:28 2025 by rpki-client