Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: 3wPxhVLURBZ6x+fm5umH8AyZd7HkM9eLW0XLY/gphZA=
Subject key identifier: B1:F0:C0:57:7E:F2:47:81:99:D6:6A:72:74:6A:AA:42:1B:AA:25:33
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 019A1EE3C7FFCBC77CCE45EE468CB84631E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 073E
Signing time: Sun 26 Oct 2025 05:00:35 +0000
Manifest this update: Sun 26 Oct 2025 05:00:35 +0000
Manifest next update: Mon 27 Oct 2025 05:00:35 +0000
Files and hashes: 1: 8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa (hash: OYnqa1GBuQcygL8L90eWwKPCUkwvpNVbLAFvlJTFkpE=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: R7NIrrHkInlKl6JdIS7MO6/b+a0qmwB9DK6H4O8KDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:c7:ff:cb:c7:7c:ce:45:ee:46:8c:b8:46:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Oct 26 05:00:35 2025 GMT
Not After : Oct 27 05:00:35 2025 GMT
Subject: CN=b1f0c0577ef2478199d66a72746aaa421baa2533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:08:59:d2:2b:4f:b4:27:cc:32:a1:ad:73:
29:09:ca:71:ac:a1:2a:67:63:56:28:38:b1:52:47:
f3:ec:87:e6:28:12:f5:7e:21:dd:4e:4b:52:77:5b:
ce:56:8a:c7:06:4b:95:43:3a:0c:ea:1a:82:a6:99:
fd:89:69:f7:95:58:16:8a:1c:25:19:ff:7a:bb:85:
1b:8a:0e:91:f2:3b:c1:98:5a:83:df:58:c0:c7:7f:
87:ad:c8:ca:47:ee:f2:5e:05:c4:91:21:b9:4e:41:
c0:46:85:bb:19:c5:3f:27:36:2e:cd:ea:bf:88:aa:
70:a6:7c:81:e5:54:16:e8:22:9b:37:9e:09:9c:1b:
9e:b0:68:06:e3:24:99:82:9c:af:a4:12:92:02:d6:
18:e5:1c:e0:92:b9:11:af:87:27:25:01:df:16:28:
45:6a:ae:ed:9e:98:ae:71:f2:52:4f:33:4b:26:21:
e7:a1:d2:53:8b:2a:98:d4:ce:99:bf:57:f6:4f:b3:
f5:43:6d:19:60:18:8d:39:75:7e:71:d1:b2:f5:97:
43:50:cc:4b:aa:26:70:28:2c:98:f2:01:fa:b8:27:
5a:1a:2e:04:65:05:ca:53:d0:0e:f5:8d:a4:09:a7:
26:5e:d4:87:e9:66:2b:4d:e4:ce:e8:35:aa:a1:fc:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:C0:57:7E:F2:47:81:99:D6:6A:72:74:6A:AA:42:1B:AA:25:33
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ce:9f:ea:7d:52:a3:64:8f:b1:0e:40:eb:9c:fa:63:f7:8c:
71:57:2c:13:55:09:95:e6:52:a9:96:44:4e:f6:cf:48:b1:01:
1c:94:c9:eb:34:80:34:0a:26:f7:90:b9:52:6c:db:3f:0e:de:
ab:41:ba:08:92:f4:cd:d8:36:a7:3f:bf:6e:ed:e4:69:43:ce:
23:5b:f8:c9:e8:6a:5d:ee:8f:05:fb:11:40:8d:e8:a1:9e:a8:
65:7f:c7:64:f9:12:1d:cb:5e:b4:ec:1e:5b:bc:1c:14:98:db:
7c:ab:9a:ad:98:48:b9:86:fa:f3:78:97:e9:5e:d6:65:73:56:
6e:1a:95:bf:4e:a1:4b:a5:f8:b6:53:33:0d:13:02:d3:12:87:
a5:96:b8:5c:8f:8a:04:48:a2:e1:83:ef:86:3f:dd:df:d2:fd:
22:a5:31:d9:95:2b:0c:94:84:73:c2:97:94:e8:5d:7f:b3:8c:
6e:e8:b4:db:5a:68:84:95:80:65:27:f8:05:d5:a4:51:f5:57:
1a:36:0c:bb:a5:40:c8:62:63:a7:84:c4:d0:0e:d0:f7:8e:d5:
42:ec:c2:9e:3e:cb:76:af:a2:c6:b9:30:d8:69:4e:d6:4b:ad:
c5:a8:0d:5d:77:1a:5b:a0:fc:d2:ef:2a:24:a3:b9:29:7d:b8:
8b:b9:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:13:50 2025 by rpki-client