Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: fYMxMhXvZLYjlq1wAcBtxjH+mkVhgTjtPbjEvlmz2w8=
Subject key identifier: 71:4A:ED:7C:D1:B8:6E:84:AE:EA:CC:24:2C:24:93:91:B4:1D:29:3D
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019A255387409CCF246FE38D99EC45FC8C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1623
Signing time: Mon 27 Oct 2025 11:00:22 +0000
Manifest this update: Mon 27 Oct 2025 11:00:22 +0000
Manifest next update: Tue 28 Oct 2025 11:00:22 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: yOO1zbpIt3ZjFyJ9FmjdonvTundmnm7iYADdga6bhtQ=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:87:40:9c:cf:24:6f:e3:8d:99:ec:45:fc:8c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Oct 27 11:00:22 2025 GMT
Not After : Oct 28 11:00:22 2025 GMT
Subject: CN=714aed7cd1b86e84aeeacc242c249391b41d293d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:fe:c2:72:e6:d0:4e:d2:b9:d2:d9:3a:73:
da:8b:dd:8e:0f:72:65:ef:83:4e:34:b2:a8:98:ae:
b7:08:a4:c9:c1:7c:04:ba:2f:2b:d0:72:dd:d1:d9:
d5:d2:ac:08:a1:39:32:b7:9e:13:14:cb:f9:64:ba:
12:db:f5:86:be:74:4d:99:c0:2a:e3:68:7c:aa:b8:
ef:c3:4e:f1:47:50:55:d9:8b:4e:5d:99:78:4f:bf:
ec:a0:8b:8c:06:7b:72:83:bb:cf:a7:87:ad:e4:68:
e3:85:5b:09:3a:77:ea:6b:a4:f3:f1:2c:dd:ae:a2:
ca:cc:e4:dd:81:65:29:5d:9c:a7:32:60:68:61:9b:
89:af:21:fb:ea:ac:4d:18:32:2d:7b:8a:a3:36:99:
d0:f6:ef:01:03:89:2a:66:1c:59:c3:51:e7:94:74:
c0:b4:46:04:a4:b5:82:85:31:6e:2f:78:60:da:0c:
6e:d1:de:96:d6:12:71:0e:26:05:e0:0d:38:e6:96:
a7:23:2b:f9:3f:65:91:ce:e1:5c:bb:e2:11:47:35:
dc:59:60:fa:9b:66:f8:38:0d:43:a0:60:b8:9c:03:
10:1b:30:3d:32:38:bb:22:fd:01:8d:84:e2:0a:7c:
97:02:1d:8a:f4:07:f6:6e:59:2b:26:7f:b3:6c:16:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:ED:7C:D1:B8:6E:84:AE:EA:CC:24:2C:24:93:91:B4:1D:29:3D
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:cb:99:ab:d1:77:be:32:e6:ea:86:93:93:5f:5c:21:17:
35:ef:d1:6b:5e:b8:f9:71:ad:3a:27:40:71:0c:cd:05:60:0d:
b3:a5:1a:da:e4:c2:1b:f7:df:16:c3:b8:6d:55:15:ed:a7:c3:
51:4e:ac:a0:78:48:3f:c7:ff:f4:23:6c:24:2b:d4:bb:c7:7e:
31:31:52:62:e0:11:eb:a7:5f:01:b9:93:b0:7d:d1:32:bc:a4:
fe:94:95:fb:b5:dd:ca:fa:6b:91:b9:04:b2:2d:d6:bc:d3:c6:
74:a2:7f:20:df:e0:87:cb:1f:1b:e6:ba:56:7a:98:31:5f:d9:
5a:96:6c:bd:88:d8:d2:92:db:ae:d1:c2:fd:71:b2:a4:33:38:
18:67:e0:08:0e:44:b2:f6:56:63:05:57:83:d0:6a:22:3b:47:
12:61:c7:01:c0:af:cd:8e:16:ba:bb:d3:72:6c:90:a0:22:15:
39:d7:4c:6c:a5:75:a5:2d:0d:7a:e9:47:31:6c:c5:2f:71:6e:
2f:d8:b3:10:bc:de:b9:ef:b3:70:0d:8f:ed:3d:12:2a:4c:2e:
1a:59:7d:2d:81:b4:c0:3d:79:8f:27:55:77:31:26:86:0f:6d:
e3:51:10:73:13:2a:21:b9:9a:e2:d9:ad:86:2b:b9:0b:e4:16:
6c:94:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:06:02 2025 by rpki-client