
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier: A/BgnSgBNHyApCHqtsaCc97jPEgsaW7lygzOQp8XdVs=
Subject key identifier: 20:CE:25:E4:4D:B6:96:6C:B8:65:CF:6D:D7:0A:23:05:C5:F3:F7:1A
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer: /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial: 019872CF52EF5BCF6C18D5B1C3C9A7B2DDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number: 05E2
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: DW+X6i6K7RrQy3kdxTl5iN6iCwESsjBhPUbDfklHZ7I=)
2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:52:ef:5b:cf:6c:18:d5:b1:c3:c9:a7:b2:dd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637115f728f97d16e0d124963764088120205ae0
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=20ce25e44db6966cb865cf6dd70a2305c5f3f71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:f9:61:6d:c3:f4:64:8d:24:33:c8:19:02:
f3:e8:5d:66:c9:f1:f3:a0:6b:01:04:5f:1f:c3:26:
94:04:b3:4e:2f:e4:c3:a5:f1:12:a7:1c:f5:09:2e:
d6:e0:c6:fb:7c:d5:4b:7d:da:c9:5f:f2:22:96:4f:
f7:e4:30:ec:8f:0e:55:f0:d8:77:63:54:a7:b0:0a:
e9:f0:66:4d:25:80:42:25:a3:4a:a4:9c:63:fb:ac:
3e:02:3d:92:b5:fc:84:a7:56:5a:a5:31:a9:43:17:
66:12:e4:b2:45:a5:a1:8b:e4:f7:d7:e7:5d:a8:13:
80:2d:00:62:1e:38:77:ed:80:b3:b0:1f:2f:fe:e9:
bf:0f:d2:5f:f7:70:ab:44:c7:8d:cd:e9:73:ab:41:
d7:d0:1f:c6:ab:da:d2:a9:97:3d:9a:25:27:70:a3:
e2:74:e5:73:7a:1b:f1:61:f6:11:4a:82:80:a7:28:
07:27:90:64:98:4d:19:97:d4:f4:14:05:3b:49:31:
e5:57:64:3c:e7:59:1b:63:8e:57:68:2f:1c:bd:92:
cf:7f:e5:34:91:00:63:68:2b:fd:72:da:1c:d4:ae:
8a:67:28:ad:36:6a:aa:99:91:eb:39:0e:64:fe:43:
03:33:a5:4f:ae:f1:3a:fc:86:b4:db:e1:26:bb:8e:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:25:E4:4D:B6:96:6C:B8:65:CF:6D:D7:0A:23:05:C5:F3:F7:1A
X509v3 Authority Key Identifier:
keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:37:69:bd:7e:07:51:c5:56:7c:b1:da:6b:7f:4b:99:8b:
c7:bb:32:97:66:7f:ce:a0:07:7c:40:5c:2b:b7:92:ed:e5:4b:
52:5d:01:9a:7e:4b:8b:f2:ed:c6:5c:34:03:b3:22:21:08:0f:
79:2f:a3:77:97:4a:b1:f4:69:79:36:34:48:5c:f4:ba:cc:a4:
9a:e0:de:67:ae:31:f7:02:1c:02:45:56:6c:b8:f8:37:bd:15:
44:e0:c7:3b:61:9d:3d:33:76:3e:c1:1f:57:0c:b3:8f:79:8e:
7f:ff:b7:df:1a:31:b3:10:a8:f6:90:5e:2c:68:87:83:c8:5c:
1e:80:1b:f0:d5:b7:73:d6:67:0a:05:8a:22:ce:1b:15:93:6c:
6d:52:ff:50:7f:f5:76:05:98:a2:05:7e:dc:0e:51:e0:28:7f:
79:b0:38:5b:96:c2:6e:f0:3c:ad:d4:e7:7b:f5:31:fe:40:70:
c1:08:84:0f:2b:ac:c9:49:36:20:da:7d:56:e4:40:a4:34:eb:
11:06:18:94:93:c1:1b:1e:67:d6:1f:aa:c8:9d:78:d2:d8:5e:
26:f2:46:bb:e0:bb:e3:c9:61:b2:c3:80:1b:07:47:5e:06:fd:
d7:ed:03:fd:ef:63:95:91:56:b2:96:d5:20:40:e3:92:82:67:
ce:b0:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:59 2025 by rpki-client