Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: cfTHwUEDs0H/3PzWp7YMbsJus74qGNHHw/UhjeTyCEk=
Subject key identifier: 3E:C3:D3:76:29:FE:6A:4A:8E:B3:F0:E6:70:C1:9D:56:FD:F5:9B:46
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019872CFC91C489BC94FFD68F8E7E2ECFF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 0789
Signing time: Mon 04 Aug 2025 02:01:16 +0000
Manifest this update: Mon 04 Aug 2025 02:01:16 +0000
Manifest next update: Tue 05 Aug 2025 02:01:16 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: k6C353cfbXnYUOvemHJ3+TjcwXrHBSOYJ1cPXwLZaT4=)
2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:c9:1c:48:9b:c9:4f:fd:68:f8:e7:e2:ec:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Aug 4 02:01:16 2025 GMT
Not After : Aug 5 02:01:16 2025 GMT
Subject: CN=3ec3d37629fe6a4a8eb3f0e670c19d56fdf59b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:1b:cf:6f:1c:bd:3c:0f:fd:34:78:6f:d0:
af:ba:28:a8:40:b1:4e:c5:ae:8e:13:50:18:bb:4e:
5c:bb:17:6d:83:8f:b2:8f:e2:44:74:16:e9:2b:1a:
b7:c3:58:24:f7:a1:37:83:14:3e:31:da:b5:27:0e:
00:ef:4f:03:ef:bd:8e:30:8e:53:29:f1:49:79:53:
d9:fa:b9:1a:b2:8c:1d:a1:4c:6e:50:47:6a:43:de:
d1:c2:5f:db:78:fa:57:da:93:f0:83:ef:26:8b:f4:
1f:c1:db:8b:a4:d2:8e:a9:1a:b4:36:2a:45:06:de:
4a:72:3e:36:94:15:06:ec:1f:32:7c:dc:53:94:df:
fa:39:0b:6d:dc:1a:41:1b:87:e3:4b:91:3b:88:0d:
c1:1e:c7:41:78:b8:38:b7:f5:d9:1a:62:3d:8b:60:
2d:72:82:e4:f2:f9:52:c5:e4:88:77:95:cd:4a:67:
a4:38:7d:d2:7c:3f:c8:de:cb:ac:95:f2:fb:d8:16:
f3:17:be:b3:d9:20:91:ad:e1:af:59:2f:e7:a4:44:
0d:87:7e:30:bb:b0:a7:27:ab:dd:f4:40:da:32:80:
fa:ec:67:12:d3:d6:dd:f1:b4:bb:28:f3:55:69:7a:
35:0d:94:ae:de:71:e4:5f:44:42:61:33:42:5d:75:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:D3:76:29:FE:6A:4A:8E:B3:F0:E6:70:C1:9D:56:FD:F5:9B:46
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:df:ec:25:15:d2:27:06:4e:e3:bb:4c:54:9c:02:16:26:
bb:c0:9e:a6:55:4e:05:33:68:c8:12:4d:6b:62:21:01:e5:32:
be:b3:0f:05:7a:9a:e8:b4:22:3e:c4:91:56:9f:69:63:e0:5c:
03:c7:5d:3f:f3:12:e9:4d:70:30:64:6c:33:b0:06:e8:cb:f8:
8c:d1:b6:f6:bc:d7:76:c2:20:4f:62:c6:c4:c1:11:0c:5c:33:
2b:6d:d4:24:55:59:74:93:bf:59:5a:12:b3:54:0b:96:ce:bf:
7f:a3:b8:27:90:0b:ca:e3:4b:26:5b:10:f4:99:6b:74:db:9b:
a4:63:1f:ee:f4:6c:c3:96:53:49:e0:22:ff:54:33:c9:59:b6:
75:f0:b7:1b:68:53:13:bd:38:84:d5:d4:a0:55:bf:49:00:29:
e6:24:00:a2:6c:88:1e:20:d0:a9:26:ce:3e:e4:3e:f8:01:b0:
71:d4:0c:d5:b8:0c:04:e4:f5:ad:52:2d:3f:4e:5f:5a:42:8c:
72:8d:f7:18:d4:8a:ed:d7:98:27:4c:0e:4d:b9:70:2e:5f:af:
af:ae:08:5d:01:3e:d2:20:fe:d6:d4:88:b4:b8:72:98:20:20:
c9:be:e1:25:b2:ab:99:5b:bc:5d:ce:89:e3:01:d1:0c:2a:95:
59:ae:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:20 2025 by rpki-client