Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: QuHqI5WghVul0xvdRwypgB2PXULehGcZeHvch7GwO68=
Subject key identifier: 84:93:AB:A6:F4:88:84:12:FB:32:40:6A:05:98:3D:2C:CB:09:34:82
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 0198D54DCCDDA5724DF25D9E12DDE03B1A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1575
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: JL2PAyEIrB4J6+2gam3CifXrb0YJOg8OOY6y2BvO6jM=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cc:dd:a5:72:4d:f2:5d:9e:12:dd:e0:3b:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=8493aba6f4888412fb32406a05983d2ccb093482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:54:f6:98:c3:7a:2b:24:8e:14:e1:2b:8f:
3b:6c:75:82:11:9b:6f:c6:a6:0c:b9:4b:56:7e:0f:
02:6d:46:dd:2c:0e:2b:0d:fa:f1:bc:d2:d4:04:c5:
c1:bb:c7:65:5d:6b:eb:ee:b8:07:9d:02:57:eb:b6:
ec:cb:fd:5a:73:c6:a8:88:0b:5e:66:29:63:94:23:
6a:91:63:d3:a6:1d:27:27:2d:69:f5:30:95:1b:45:
61:e6:0a:05:e1:44:fc:d2:b6:a1:35:e1:83:40:ad:
ab:46:e1:18:c7:99:ff:9d:70:cb:ab:dc:e7:38:af:
93:c8:58:66:ab:a4:7e:ce:9a:2d:61:7b:a5:81:c4:
77:a1:3f:0f:25:c6:85:7b:e4:ee:67:13:7a:d5:c4:
b2:59:3c:d6:fe:d7:fc:2e:4f:f6:8e:0f:6f:2d:d1:
ed:1c:5e:a9:5e:44:9b:1c:82:2c:fe:63:b4:2f:97:
74:e9:fd:7d:6d:c5:fa:3d:49:7d:0f:3e:e1:6c:cb:
1f:a4:83:db:32:94:62:6d:58:b7:b6:75:d8:b4:ad:
48:8f:65:16:85:09:a9:4f:a9:b3:2e:74:bd:0d:31:
55:40:ea:ca:ac:71:19:9c:f6:4e:a1:35:8a:2f:97:
fe:4d:6d:06:5f:f0:96:ae:bd:b8:80:95:57:44:24:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:AB:A6:F4:88:84:12:FB:32:40:6A:05:98:3D:2C:CB:09:34:82
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:38:d1:2e:a8:08:ca:cb:17:71:90:55:ed:3c:c2:be:22:
02:d1:31:74:1b:26:08:ad:9e:da:4a:d3:1b:f7:7b:5c:a2:6b:
0e:4f:5a:33:68:6b:7f:7e:a3:9f:32:4a:7b:47:fb:35:8e:68:
e5:9d:eb:13:7b:14:71:4a:ec:be:f1:64:20:a1:11:1a:d9:2f:
b8:e7:55:ce:2a:f4:34:e9:3a:9c:7a:cd:4b:b5:6d:3c:40:4f:
a6:61:d1:98:6f:77:a3:fa:65:fe:08:b9:23:61:0b:45:ad:98:
28:ea:51:fc:88:fe:ed:53:e4:a4:32:40:13:e1:aa:14:c5:66:
3f:bd:b4:28:17:d6:be:2c:01:b8:b4:fa:a5:57:e7:94:5c:5c:
3c:a3:b0:65:23:ff:09:f8:94:0a:d9:a4:cb:22:99:88:c1:2d:
5d:88:0b:0a:ce:c2:71:c3:8f:30:1d:37:6d:66:9b:9f:28:91:
2a:69:a2:56:4a:8a:7f:71:51:bf:9c:2e:67:f0:40:ba:df:ee:
25:25:53:64:a0:94:37:6e:03:40:97:b5:8a:e4:e5:6d:0d:ed:
91:34:f2:1b:4f:2a:44:63:e8:d8:8f:78:d2:77:dc:df:90:47:
9b:6a:b8:fb:f2:b8:3b:e5:88:2e:17:0c:8d:75:42:36:11:62:
3c:9e:e3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTczdpXJN8l2eEt3gOxpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjUwODIzMDUwMTQyWhcNMjUwODI0MDUwMTQyWjAzMTEwLwYDVQQD
Eyg4NDkzYWJhNmY0ODg4NDEyZmIzMjQwNmEwNTk4M2QyY2NiMDkzNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZVU9pjDeiskjhThK487bHWCEZtv
xqYMuUtWfg8CbUbdLA4rDfrxvNLUBMXBu8dlXWvr7rgHnQJX67bsy/1ac8aoiAte
ZiljlCNqkWPTph0nJy1p9TCVG0Vh5goF4UT80rahNeGDQK2rRuEYx5n/nXDLq9zn
OK+TyFhmq6R+zpotYXulgcR3oT8PJcaFe+TuZxN61cSyWTzW/tf8Lk/2jg9vLdHt
HF6pXkSbHIIs/mO0L5d06f19bcX6PUl9Dz7hbMsfpIPbMpRibVi3tnXYtK1Ij2UW
hQmpT6mzLnS9DTFVQOrKrHEZnPZOoTWKL5f+TW0GX/CWrr24gJVXRCRrfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISTq6b0iIQS+zJAagWYPSzLCTSCMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqs40S6o
CMrLF3GQVe08wr4iAtExdBsmCK2e2krTG/d7XKJrDk9aM2hrf36jnzJKe0f7NY5o
5Z3rE3sUcUrsvvFkIKERGtkvuOdVzir0NOk6nHrNS7VtPEBPpmHRmG93o/pl/gi5
I2ELRa2YKOpR/Ij+7VPkpDJAE+GqFMVmP720KBfWviwBuLT6pVfnlFxcPKOwZSP/
CfiUCtmkyyKZiMEtXYgLCs7CccOPMB03bWabnyiRKmmiVkqKf3FRv5wuZ/BAut/u
JSVTZKCUN24DQJe1iuTlbQ3tkTTyG08qRGPo2I940nfc35BHm2q4+/K4O+WILhcM
jXVCNhFiPJ7jyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:40 2025 by rpki-client