Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: 34kpFL4xKpISngctgGVLh+bixF/wIb3rInNbALM49Qs=
Subject key identifier: 5F:E3:FC:55:82:1D:D2:D8:92:86:1C:1F:DC:24:E7:25:F6:74:C5:F5
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019853E8985B2ECABA64913317AC8C9E6855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1532
Signing time: Tue 29 Jul 2025 02:00:08 +0000
Manifest this update: Tue 29 Jul 2025 02:00:08 +0000
Manifest next update: Wed 30 Jul 2025 02:00:08 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: l8uLapQXukr4Q+mgu+pGYIyn0q7Bq4EkKOxX7QjVTSQ=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:98:5b:2e:ca:ba:64:91:33:17:ac:8c:9e:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jul 29 02:00:08 2025 GMT
Not After : Jul 30 02:00:08 2025 GMT
Subject: CN=5fe3fc55821dd2d892861c1fdc24e725f674c5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:fb:c6:6c:47:70:7c:01:00:1c:22:22:4a:
1a:98:47:89:63:70:fc:2d:87:8c:d2:49:f3:71:3e:
c7:44:9e:30:1e:b7:e7:03:7a:d4:0b:77:d2:40:5d:
5e:ef:db:01:72:bd:51:18:71:9b:d4:c8:df:52:fd:
6c:79:3e:6e:7a:ed:53:d7:7e:29:36:50:c9:20:e6:
74:66:a9:ec:ad:d8:01:75:84:21:af:1d:54:f3:75:
87:92:df:73:f0:4c:17:a2:06:66:52:a5:14:53:07:
ce:1e:a7:0b:d9:b5:af:dc:4b:7d:5e:f1:13:44:c7:
16:e3:e6:95:d6:5b:5d:24:02:99:7f:30:39:0d:ac:
bd:7f:af:5a:e1:24:cd:1b:c6:c9:5f:25:3f:56:cd:
81:80:04:af:82:65:f6:8f:ce:cb:4a:ca:ad:ee:79:
c1:52:12:7e:fc:a2:bd:d1:2f:05:4e:b5:79:b9:c3:
af:22:73:e5:c3:4a:79:ac:a7:e1:3f:ff:2e:c8:9d:
ed:c7:1e:ee:ce:b4:14:06:88:12:7a:87:f3:33:ca:
97:56:7b:bf:35:e1:7e:fe:6c:40:1d:e6:28:00:65:
74:14:ac:f7:90:a1:fe:4b:5b:26:01:92:a2:62:5e:
56:65:11:32:90:01:93:97:04:2d:71:c5:90:e5:6c:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E3:FC:55:82:1D:D2:D8:92:86:1C:1F:DC:24:E7:25:F6:74:C5:F5
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:42:1d:43:ca:f8:e9:af:16:8e:a0:c5:d0:b1:a6:44:06:
c9:0d:7a:ea:68:68:88:cd:dd:b6:e6:13:86:bf:47:65:83:8a:
df:dd:88:24:19:37:5d:68:d4:0f:a1:64:50:01:74:3a:33:c3:
2f:bc:96:fe:a1:dc:ab:04:c2:96:18:19:a6:bc:e9:26:e2:fe:
83:b2:28:ea:c9:26:2f:92:42:ae:5c:49:44:7b:b7:d1:85:20:
8b:cf:ae:5e:3f:05:23:18:e2:92:2d:d0:13:fb:ba:10:c6:88:
70:01:8b:b9:7d:44:cb:65:09:5f:c7:90:15:e4:2f:bc:47:96:
9b:15:30:34:9d:cb:61:72:93:72:9a:b4:09:37:f4:74:68:8e:
40:de:7d:ad:20:67:39:b9:2b:4b:55:48:de:16:dd:4a:1a:1b:
fa:24:9d:7a:2f:9f:40:87:c9:c2:69:e7:eb:20:6f:fc:aa:4e:
eb:b8:64:0e:eb:63:3b:99:87:63:00:71:81:34:2f:ae:75:c0:
98:9c:79:73:12:5d:39:03:c7:fe:88:21:8d:01:ff:b7:d9:c1:
47:e4:8e:b7:52:ea:e1:87:d8:6b:96:12:d5:3b:ab:5b:de:e2:
fa:dd:11:ce:dd:1a:6b:a1:56:e2:1c:ee:c2:0d:41:db:6d:be:
1c:96:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:15 2025 by rpki-client