Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: 5Iusr18i/msoztSS5Scz28o7btK5a4z8jv8N9UaZrxQ=
Subject key identifier: FF:14:B9:B0:10:79:7E:40:37:73:9B:51:78:1F:DC:75:E5:48:8F:9A
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 0199FBEC603E4B31B2B04433CE7C4509E4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 13D0
Signing time: Sun 19 Oct 2025 10:03:16 +0000
Manifest this update: Sun 19 Oct 2025 10:03:16 +0000
Manifest next update: Mon 20 Oct 2025 10:03:16 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: 5pog6LKCOuWd22F+yEww+v3BzEwHp3AJxGI12dtJ4PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:60:3e:4b:31:b2:b0:44:33:ce:7c:45:09:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Oct 19 10:03:16 2025 GMT
Not After : Oct 20 10:03:16 2025 GMT
Subject: CN=ff14b9b010797e4037739b51781fdc75e5488f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:e8:06:ce:c2:58:d5:83:2e:32:fa:2d:21:
04:09:dc:32:d3:14:96:88:79:be:9a:27:d0:39:2b:
17:2c:12:48:b9:b4:25:e4:63:02:aa:ca:1a:73:87:
87:3e:b6:53:7a:a7:9d:07:75:3d:4b:60:d5:14:d1:
0f:7d:be:ec:8d:96:b7:64:30:09:80:d3:40:d1:f3:
b7:4d:3a:33:0a:e9:b4:e7:20:d9:fd:fb:fd:d2:ca:
0d:65:36:f3:51:47:53:01:36:1d:b3:a3:32:4d:18:
33:8c:b6:eb:4c:cf:2f:72:14:7e:f6:45:1c:b6:33:
9c:0d:de:fb:06:73:45:ed:06:2d:9b:3f:9d:67:0f:
f5:ff:3b:c6:52:68:30:f5:81:0b:28:0c:8c:06:cf:
be:79:e1:65:1a:7d:68:58:d1:82:e3:57:a6:dc:b7:
1b:99:f8:2e:19:8c:5f:83:2b:6e:ea:bf:db:57:c4:
f8:bb:a1:29:e5:c6:95:19:0f:04:a6:10:30:23:74:
30:0f:43:7f:5a:89:a4:46:9d:1c:52:3a:48:9e:ff:
6a:b8:8d:74:c6:9c:e2:5e:e1:90:dd:90:db:51:f0:
a4:5c:c1:10:a7:b5:83:7e:a4:06:56:4f:fc:4f:e4:
7e:36:b3:a2:d5:62:2e:14:75:51:3d:46:14:e2:0a:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:B9:B0:10:79:7E:40:37:73:9B:51:78:1F:DC:75:E5:48:8F:9A
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:a7:d7:f2:ad:96:cb:0a:b9:f3:0c:10:dc:fc:38:2d:37:
7b:46:68:1b:92:bb:f8:bf:fe:a5:be:44:ce:96:b0:43:5b:9d:
c1:c9:99:78:57:ed:57:64:0b:8a:97:30:79:95:60:22:01:f7:
6a:a9:b7:57:64:3a:69:ab:13:f3:c9:47:b2:ec:ac:43:69:2c:
33:01:11:24:81:e2:25:0a:12:63:7b:27:03:c8:c8:8f:01:dc:
f3:59:ba:cb:a6:6f:1f:af:12:3b:68:c5:97:bf:d0:3e:26:7c:
46:be:1e:65:1a:e7:16:70:ab:95:13:0d:80:05:ed:b4:ad:80:
cc:b1:cf:fd:42:c9:6f:4a:4b:e0:2f:c2:9e:c7:42:ab:88:75:
d9:2c:54:21:cc:bd:6c:7f:27:61:52:0c:e2:92:2a:18:fa:4a:
ba:1a:e3:1e:fd:5b:96:7b:cd:dd:da:57:0d:d1:a2:71:23:60:
a6:e7:61:24:24:1b:88:27:6f:e6:57:04:c6:9b:b4:eb:14:91:
9c:cb:5b:bf:3a:5e:38:41:fb:a0:a4:74:69:0a:5c:04:48:dd:
aa:e2:b3:69:6a:34:a4:34:07:9c:c8:a5:e0:c1:41:ad:2d:75:
a4:0c:56:7c:d8:6f:1e:55:5f:3e:f3:e3:5d:42:88:6f:de:dc:
00:d9:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:41 2025 by rpki-client