Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: DDCtDqK8Wa0wPdyR9Oo169qJlzypg6s9DT2huP7vEqA=
Subject key identifier: C7:80:2B:D4:73:BE:F9:C9:80:D5:76:16:EE:9E:1D:E2:FE:A1:B5:E8
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019A00A38B8E874457D2395F77ADB44FA74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 0857
Signing time: Mon 20 Oct 2025 08:01:49 +0000
Manifest this update: Mon 20 Oct 2025 08:01:49 +0000
Manifest next update: Tue 21 Oct 2025 08:01:49 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: A4VDYIoe3OWc/69lo9jKiThQyBEgno+WBj1YEZ4oD2Q=)
2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:8b:8e:87:44:57:d2:39:5f:77:ad:b4:4f:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Oct 20 08:01:49 2025 GMT
Not After : Oct 21 08:01:49 2025 GMT
Subject: CN=c7802bd473bef9c980d57616ee9e1de2fea1b5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:86:75:b9:af:60:13:f7:73:a9:58:9e:47:
f5:25:4b:6c:fb:d7:91:f4:58:0f:11:19:b7:26:09:
36:25:0a:ac:44:2e:e1:64:33:2b:b9:bb:6c:6d:85:
f1:27:42:1e:58:c2:ee:f2:4b:54:15:0c:b0:d0:81:
d8:38:3c:c8:15:3a:19:1e:23:68:d7:4d:7d:99:e7:
b8:ea:1c:b4:be:9a:7e:d2:e6:be:66:cc:ee:c5:e7:
0d:91:5c:b0:5b:a4:be:8b:ad:85:a7:12:1c:f0:04:
82:23:6f:f1:ef:50:3c:dc:c3:53:32:67:8b:41:45:
2f:57:2e:47:78:14:20:81:88:d7:ba:15:c8:48:16:
71:50:c4:d3:1a:0a:e8:a2:a2:0e:0a:99:61:18:af:
b8:56:3b:07:f2:c7:47:d8:1c:2b:35:22:34:cf:74:
29:6e:df:04:e7:5f:d2:11:f2:fd:c4:43:22:d8:8c:
25:69:ba:34:23:92:91:30:87:d6:e6:52:38:3b:14:
d8:8a:11:70:3d:31:c3:94:87:be:28:65:f3:2a:e8:
58:58:74:bc:d7:e7:4e:30:3c:9e:2e:f3:99:5c:f2:
0a:d9:dc:0c:5b:07:f7:c5:48:d8:33:01:59:b8:18:
36:aa:6a:6f:22:7c:cf:dd:76:2c:1a:9a:55:3c:d5:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:2B:D4:73:BE:F9:C9:80:D5:76:16:EE:9E:1D:E2:FE:A1:B5:E8
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:cc:d0:cf:f3:d8:a0:74:5b:54:ae:43:f8:a7:85:90:b5:
2a:21:b9:4c:b3:39:13:96:9a:33:2c:f8:31:04:6c:2d:37:90:
be:3e:ee:a2:5a:a8:81:55:56:9c:3b:c0:8a:a1:c3:77:f6:b8:
91:c1:34:c3:d2:b7:a6:a4:ef:a7:f1:ad:83:d6:a3:9b:b9:7b:
de:16:1d:cb:4c:49:ec:02:21:ab:ab:15:cc:7d:98:f5:19:bf:
b9:7e:b0:57:a3:02:98:61:08:2c:a3:50:69:1a:78:3f:11:1e:
ea:0d:4b:ff:0c:9a:9f:31:49:7c:bc:ff:fc:c5:34:1e:82:49:
fd:79:83:4e:3a:10:93:dc:09:f6:78:c8:b0:44:40:ae:29:09:
e8:65:2c:47:05:7e:e6:27:0c:0a:2f:8c:15:85:1d:76:2d:7b:
ed:9d:bf:a4:d6:76:39:d8:11:b7:be:ea:af:27:eb:04:0c:f3:
61:69:78:bd:1e:c2:45:55:fa:b4:47:c4:96:2d:ef:d9:01:42:
61:92:d7:07:fb:ab:b2:7f:37:2e:02:dc:59:d5:8a:08:86:a6:
0c:8f:74:27:ab:3f:c4:ff:53:42:cf:a0:fe:1e:89:52:1d:67:
48:82:9c:67:7c:4a:48:7f:c6:1d:cd:94:7a:dc:e4:81:47:0b:
54:c3:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:10 2025 by rpki-client