Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: njJgHVXStamnV0yyME2dKcyechnUI1qOh8cFW/oEl1M=
Subject key identifier: 43:F2:09:48:44:C8:49:DF:0A:84:C5:BB:88:22:57:6F:52:6B:C1:8A
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019A00A2E52EEF7EE94D8341AFC0E3997A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1610
Signing time: Mon 20 Oct 2025 08:01:06 +0000
Manifest this update: Mon 20 Oct 2025 08:01:06 +0000
Manifest next update: Tue 21 Oct 2025 08:01:06 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: gzzI/xNrcQ92IyXn+SvJJjcwAb1Q/mNBpC28XOE9m6I=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:e5:2e:ef:7e:e9:4d:83:41:af:c0:e3:99:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Oct 20 08:01:06 2025 GMT
Not After : Oct 21 08:01:06 2025 GMT
Subject: CN=43f2094844c849df0a84c5bb8822576f526bc18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:a0:37:1f:62:89:3c:6a:4b:ec:d1:bb:94:
fe:0b:57:b4:95:31:b7:05:90:5a:c0:87:c7:ba:6c:
26:24:3f:fb:09:ef:bb:43:9d:99:5b:17:39:39:0e:
cf:5b:a3:25:34:80:ef:a7:03:66:4f:b4:64:a4:f5:
ad:ca:5b:0b:e7:f9:3f:87:85:95:c0:fe:88:44:a7:
72:30:ab:8d:d4:2f:36:d8:a2:5f:39:9c:9f:26:b3:
a8:00:05:59:61:e5:a8:92:f0:ce:d8:8b:3e:b1:de:
98:2b:27:51:81:a2:b8:25:dc:c7:e4:9a:0e:44:5b:
44:bf:dd:fd:2f:57:67:ac:67:ca:91:95:34:0e:c5:
9d:fa:95:f5:08:82:05:e8:4b:0d:e2:30:21:86:b1:
57:87:22:6c:50:31:90:bc:25:65:b4:86:5a:26:6d:
99:07:19:f4:30:38:93:45:7e:3b:11:9b:4d:96:78:
b7:11:d0:c7:72:e6:74:46:2d:89:8e:61:50:d3:a7:
fd:88:14:e4:67:17:fd:b1:ec:b6:ae:f9:ca:00:82:
51:a9:eb:29:60:80:d7:be:4d:c4:ce:89:dc:6f:bf:
de:b1:a8:0e:77:43:a4:39:2b:82:e6:3a:4f:64:49:
ae:c6:bb:bb:c5:29:ab:c0:4a:d8:b4:a0:b2:62:ea:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:09:48:44:C8:49:DF:0A:84:C5:BB:88:22:57:6F:52:6B:C1:8A
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a1:41:bd:19:8a:78:d0:ec:ba:70:da:87:19:87:f6:3a:82:
0f:82:93:5c:bd:e7:a3:68:16:86:a2:71:bf:65:91:93:5e:ef:
28:c7:84:4c:df:7f:c5:b1:7b:33:28:ed:96:e1:ab:e7:90:e8:
07:85:de:e2:bc:b5:ff:3e:5a:38:79:12:46:9a:d6:1b:66:8f:
b4:5d:66:59:9c:01:61:81:d4:2a:10:ad:c7:c4:33:66:d2:a6:
84:ab:fb:12:32:92:c1:91:f2:be:25:d0:2c:b9:4a:2e:c0:8b:
85:a8:3a:4a:c9:53:e9:c5:61:c8:75:7b:e0:62:0d:70:e0:f9:
bb:5a:3f:f8:07:37:13:87:7b:3c:58:a6:17:13:4e:10:02:3c:
dc:d6:7a:56:7f:02:99:d6:98:53:f8:eb:c6:9d:2d:cc:1c:35:
25:60:9e:0e:18:5d:e9:93:58:e8:1c:0c:65:8e:8b:84:ef:0a:
19:cf:a0:bf:4d:b3:0b:dd:c2:c5:96:81:57:35:37:94:2c:30:
0f:9a:0d:d5:2b:7f:b0:20:d8:d2:48:4e:6b:83:ee:71:a7:04:
f4:7f:06:bc:91:e9:4a:60:f6:c1:fc:6f:cf:68:ce:17:0f:e8:
b9:04:36:aa:86:04:10:32:1a:d2:bb:ba:a2:2c:5b:83:79:26:
10:67:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:41 2025 by rpki-client