Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: AVUO7CZwp0P0bVn2VQbBc+biMGnPlcJe01QBYq/fXHs=
Subject key identifier: 3B:CE:F8:F2:A5:93:AC:E3:5D:C7:5F:C1:87:22:1D:F9:8B:C7:73:63
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019A2C315BC11B51BC07AB828EA4B9364AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 1359
Signing time: Tue 28 Oct 2025 19:00:23 +0000
Manifest this update: Tue 28 Oct 2025 19:00:23 +0000
Manifest next update: Wed 29 Oct 2025 19:00:23 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: Vvg73IFm4knH3Cw9PySfYKtA2F0kK0CAq/llg2HLjyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:5b:c1:1b:51:bc:07:ab:82:8e:a4:b9:36:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Oct 28 19:00:23 2025 GMT
Not After : Oct 29 19:00:23 2025 GMT
Subject: CN=3bcef8f2a593ace35dc75fc187221df98bc77363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:0a:69:87:66:24:f3:55:1a:b9:c7:cf:af:
ad:85:cd:af:9e:2e:1a:15:22:58:2d:c2:d4:4a:dc:
ed:10:9e:de:e7:f4:3d:ae:1f:a1:79:b4:9d:7a:ac:
41:78:dd:62:87:66:a8:7b:f9:54:ca:f2:54:f1:75:
1f:72:72:63:fa:f2:39:f3:72:2f:79:57:2b:10:04:
a5:7d:9a:62:bf:1f:2d:71:92:ea:fb:05:c7:e4:81:
98:49:9b:2a:b4:b2:6f:d3:bc:e1:4f:9f:1c:cb:b6:
0f:94:48:14:5e:54:fd:7f:8f:87:b5:a8:e2:9a:e9:
cd:0e:f0:95:74:0e:8d:2d:8d:53:83:bf:39:ce:de:
4a:df:46:6e:c3:0c:96:01:5c:2c:79:89:70:ea:f1:
9a:67:d1:a6:08:53:b1:f7:26:d3:db:7d:6e:7e:4a:
49:0c:ae:4c:1c:7d:7f:60:94:0f:d9:c1:c8:4f:ff:
d2:70:a3:7c:4b:ca:1a:73:cf:1b:bc:5f:17:b9:43:
66:4e:94:70:40:54:4e:3d:c8:a9:e1:f1:86:89:ec:
d2:88:8b:77:45:d6:47:37:f6:09:e6:b6:3a:ef:34:
84:1a:f0:cf:7b:22:c8:39:28:cf:94:77:32:77:13:
de:3b:44:fc:84:b0:77:7d:49:43:11:b3:5d:a7:75:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:F8:F2:A5:93:AC:E3:5D:C7:5F:C1:87:22:1D:F9:8B:C7:73:63
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c2:09:c7:64:6f:fb:93:02:6a:fc:12:a0:37:d0:7b:6b:6d:
91:b1:32:22:73:4d:73:31:c5:94:f1:bb:0f:f5:c3:d3:89:72:
36:d6:70:ea:84:60:e4:fb:cb:d7:97:4b:cc:7b:ba:bd:a8:33:
bf:38:a1:ab:c2:db:f6:47:d5:3b:56:e7:3c:28:36:d1:61:39:
2a:9c:50:a3:05:82:87:49:a1:73:16:47:12:67:ad:01:ec:2c:
a6:68:38:e5:48:ab:00:b4:90:19:fe:a6:77:c9:5c:75:96:68:
8f:82:01:88:7e:fc:0e:ae:66:0f:f7:be:6a:ad:bb:76:f8:ef:
08:f7:c9:7d:52:c7:4a:6a:ea:7f:0c:3b:ba:76:f4:62:70:28:
6c:de:41:a0:88:40:42:ce:4e:67:23:8e:84:8c:e4:07:3c:57:
89:d4:3f:81:37:06:89:c0:74:44:4d:c2:bd:38:15:ed:c0:05:
72:ff:2e:1e:89:f9:25:f6:fd:43:25:13:c3:ff:86:18:4a:5d:
e0:5f:20:68:71:78:2c:63:20:23:4f:81:e7:70:3b:78:e1:b9:
bb:03:67:4a:5e:cc:4b:ac:15:d9:ff:70:61:17:ee:f2:fa:b7:
80:ce:49:c9:21:19:7c:22:84:38:8a:fc:68:bc:8f:1a:9d:50:
14:98:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:09:06 2025 by rpki-client