Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: M09EC/r/etl3umGoOWFTkWWjwYxh4AHO0obiTs54YZM=
Subject key identifier: 73:40:F5:0F:F8:BA:87:8D:17:AA:C6:73:86:A0:24:AA:8F:8F:D2:3B
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 01976BF4797005FA5249F838802580F0C8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 01:01:13 +0000
Manifest this update: Sat 14 Jun 2025 01:01:13 +0000
Manifest next update: Sun 15 Jun 2025 01:01:13 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: h4ZpDtE6vdHO4qhiRp8PVZW5GXfjf/R1vX+RhdN0GRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:79:70:05:fa:52:49:f8:38:80:25:80:f0:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Jun 14 01:01:13 2025 GMT
Not After : Jun 15 01:01:13 2025 GMT
Subject: CN=7340f50ff8ba878d17aac67386a024aa8f8fd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:5b:03:b8:26:48:d0:f4:f7:31:35:1d:c9:
1f:08:8c:9d:0f:28:33:81:ef:c3:1e:e9:10:c5:7d:
a4:cd:58:b6:6f:25:1f:ae:85:78:4d:58:11:4d:0f:
be:22:f7:02:ac:84:f2:06:45:16:20:91:fa:a6:5f:
c6:2d:0b:53:74:d2:bf:cd:18:b6:0f:c6:32:b3:7d:
65:ce:90:7c:99:dd:64:50:b3:70:d3:07:33:04:54:
d2:44:5c:c5:4a:72:4b:86:f8:fe:5a:a0:19:c8:5c:
35:ab:8f:bf:36:67:93:cb:95:67:c3:e7:ab:4d:91:
07:af:a5:a6:d3:49:e2:33:df:4b:b4:f7:66:18:61:
be:1f:ed:1d:c6:69:37:cb:68:2c:c7:b6:b7:b5:8f:
97:4f:b5:61:f9:20:f4:ea:99:f7:1f:39:3f:78:96:
fb:7b:df:c2:18:d8:80:27:ef:32:88:68:ee:8e:a9:
53:a8:f3:5d:18:64:13:21:04:f0:b2:41:81:04:7a:
c4:8a:01:83:7d:86:3a:13:fe:c1:62:9a:dc:99:01:
c7:6c:c6:d1:40:19:73:38:ae:76:fd:06:83:a0:47:
32:e7:fa:3b:ed:c3:4e:33:4e:87:13:d3:ff:24:f4:
df:60:d4:58:05:c1:57:fe:5c:ac:c5:78:07:e7:a6:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:F5:0F:F8:BA:87:8D:17:AA:C6:73:86:A0:24:AA:8F:8F:D2:3B
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:c7:69:9f:91:d4:de:91:2e:19:90:04:f1:ca:4e:0b:27:
1a:65:8b:90:5f:51:1a:e9:31:12:30:64:12:2b:21:5c:ce:c6:
91:22:17:27:c6:9e:47:09:23:fb:b3:95:7c:02:ab:ee:23:59:
bd:d8:4b:75:07:13:f9:a5:48:d6:99:95:86:c6:fe:35:43:7f:
2d:3f:1c:67:da:fe:ee:86:c3:4a:a3:02:97:9c:af:e2:40:08:
c7:a5:51:eb:b7:33:96:df:ec:37:8c:c3:18:48:92:22:d0:28:
b6:57:cc:bd:b8:92:cc:b0:e3:eb:53:11:2d:1c:03:23:4d:c0:
f4:01:ff:07:3e:f7:d0:e8:e8:9e:23:df:1f:1d:51:de:0b:60:
f1:db:67:14:e1:2b:78:5e:16:cd:36:a2:58:33:5d:07:63:9d:
ff:cc:66:e5:13:c2:d6:18:c0:10:bb:f0:ae:86:dc:63:ba:0c:
a2:97:0a:00:b3:8d:b1:a6:a5:d9:f3:52:21:cc:bf:c5:c2:0f:
75:25:f8:bf:0e:38:34:f7:ec:5c:9a:6c:83:bb:38:e1:00:fa:
ee:5e:3a:56:e6:26:ad:3a:5a:1e:90:e0:9c:c4:43:61:c6:f8:
dc:f7:df:0a:ec:68:d5:2c:47:6c:f3:63:7c:61:81:cd:fe:3e:
f2:3a:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:30 2025 by rpki-client