Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: s1JY6va/kPBehfzL7SrbTkJxYV+d9LrtdrSfOoFw4S0=
Subject key identifier: 54:CA:B1:FA:B0:FA:BE:E5:6A:31:67:E0:38:90:78:92:6E:44:FB:D8
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 019A5187EB862BBE6586F4ED91B0FBF100E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 01:00:53 +0000
Manifest this update: Wed 05 Nov 2025 01:00:53 +0000
Manifest next update: Thu 06 Nov 2025 01:00:53 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: e9MVhsCNFRXXD3a3aMe87VTT388y0DFgPJRKU9va1G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:eb:86:2b:be:65:86:f4:ed:91:b0:fb:f1:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Nov 5 01:00:53 2025 GMT
Not After : Nov 6 01:00:53 2025 GMT
Subject: CN=54cab1fab0fabee56a3167e0389078926e44fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:b0:70:32:b3:16:a6:8e:9f:7c:c8:b2:65:
30:9b:e2:d3:75:74:16:7e:5f:56:72:52:7f:0b:16:
f1:88:23:1d:50:85:0b:56:7c:26:60:57:c4:05:ec:
cf:05:82:df:1a:20:dd:fb:fa:99:f6:dc:26:8b:ce:
43:b4:8e:3a:95:c3:b0:8a:bf:ab:00:b9:24:bf:5d:
91:04:ed:90:89:39:5d:8f:ad:62:ed:1f:76:96:29:
6d:57:4a:13:a2:4f:95:be:4c:28:d9:99:74:fb:7b:
2c:4a:86:c0:8d:f2:49:38:7d:e5:a9:df:57:d2:99:
c1:8a:06:da:b6:21:40:6c:6f:d6:97:a8:b5:f0:9f:
be:fb:32:25:ac:cf:e0:c3:83:61:5a:e1:bb:52:41:
72:f9:2d:6b:84:2b:11:78:f7:d9:1e:a8:f0:68:bf:
d4:44:51:1b:f5:72:11:28:be:12:a7:2c:19:96:f8:
b7:f8:51:01:5e:53:22:87:b8:46:31:cb:78:43:8d:
11:7b:4d:25:82:22:de:d8:20:63:91:ad:a3:2e:d5:
07:05:74:00:7b:24:27:36:60:03:b0:de:4e:96:29:
54:68:90:27:0d:2d:73:af:09:88:e0:34:1c:63:d4:
be:7b:b2:d6:db:e9:a4:c3:60:6a:48:41:94:0f:15:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:B1:FA:B0:FA:BE:E5:6A:31:67:E0:38:90:78:92:6E:44:FB:D8
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:48:ac:7f:1c:ab:03:0d:2c:3f:49:c4:94:ff:14:e1:26:
79:7e:f7:0f:f1:10:7f:c6:63:4d:dd:3f:73:0b:d3:31:0e:ff:
bb:ba:37:08:f6:bf:3f:d5:79:fe:da:36:41:71:34:32:64:47:
b1:cc:cc:31:5a:f8:1a:fb:6b:6b:6b:5f:c0:59:19:63:61:70:
e8:a4:f7:a5:e7:26:c1:4a:12:14:c5:f6:bc:36:0a:b8:8e:c1:
ee:19:2e:53:d7:00:96:0f:cb:60:eb:ef:de:28:17:46:f7:16:
d3:e6:a6:15:d9:41:25:68:80:d4:78:16:90:46:ec:7a:7b:0a:
11:ac:e9:a0:77:d5:da:82:60:59:53:fb:46:bf:53:a8:02:22:
8f:70:3a:c4:54:ff:ea:2a:ef:90:4e:59:07:fc:c2:25:1d:ee:
8d:c8:2c:f5:73:3b:8d:b0:9b:f3:45:28:4b:9c:2e:3b:fc:f6:
ea:7b:af:92:b1:e7:c0:9b:83:85:a9:ed:f8:d8:55:57:6c:16:
1f:61:7b:43:49:b9:f6:e0:47:71:0b:e8:f4:ab:8d:36:25:cf:
11:5c:83:de:86:d2:c0:37:dd:c1:5c:e4:5a:94:84:9b:c0:68:
3a:7c:af:b2:8e:41:49:62:c6:04:50:4f:8d:eb:19:d6:c4:c0:
75:1a:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:47 2025 by rpki-client