Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: cG13/+AHSp3Hn9jkXFupJS8XAklBOdm+u7rwlVgFWnQ=
Subject key identifier: 47:71:EA:CF:A9:5B:B6:DB:F0:6B:49:33:25:50:91:68:DC:EA:42:72
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019A53ACBA8704F4E2B6260F1B63A1316B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 163B
Signing time: Wed 05 Nov 2025 11:00:20 +0000
Manifest this update: Wed 05 Nov 2025 11:00:20 +0000
Manifest next update: Thu 06 Nov 2025 11:00:20 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: R+7qgLz73isV7Fo8vHl644+qGPV4MEizDWe1XU3gIGI=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ba:87:04:f4:e2:b6:26:0f:1b:63:a1:31:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Nov 5 11:00:20 2025 GMT
Not After : Nov 6 11:00:20 2025 GMT
Subject: CN=4771eacfa95bb6dbf06b493325509168dcea4272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:98:7e:58:36:34:fa:c3:b4:20:7a:5b:4a:
9b:ac:9c:b8:80:b2:1d:1a:da:e4:ac:06:a2:42:0c:
37:69:7f:ab:1b:a7:2d:f9:86:23:56:0b:6e:35:a7:
45:ae:14:47:70:40:5b:24:eb:4e:fe:d0:9a:1f:7e:
8f:c8:81:2d:41:c1:52:35:fc:84:01:65:2f:d1:84:
b4:0d:59:36:ec:bb:31:97:db:df:43:3d:b7:88:a4:
66:55:5d:f1:bf:8a:3c:97:8b:88:f8:88:bc:37:b4:
f1:b4:5e:6d:06:ef:cb:ea:70:03:0c:c4:c6:e0:22:
65:91:83:ff:d1:9e:a4:38:3b:cd:71:3d:5e:de:cd:
9d:e0:15:ad:6b:d4:e4:b1:e7:67:4b:38:9b:b9:bc:
2c:16:a2:dd:4a:fb:b7:e1:36:97:6a:c0:97:88:7a:
52:e1:c0:36:fe:16:70:3e:5f:eb:bf:81:48:cf:cd:
f6:46:07:d8:97:40:02:86:ff:a8:d3:57:cc:0b:25:
27:05:45:e9:68:c0:d8:4e:d7:df:0d:08:d1:b4:90:
30:d2:33:cd:36:45:40:78:a1:6c:6d:8e:7b:04:ee:
ed:13:83:ef:43:8b:ac:4f:7e:7c:50:93:5d:03:fc:
38:42:9a:49:3e:ca:18:f4:c9:fa:59:59:66:7a:a8:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:EA:CF:A9:5B:B6:DB:F0:6B:49:33:25:50:91:68:DC:EA:42:72
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:4c:82:15:ab:14:1b:f8:d4:67:39:f9:9e:01:8b:fb:ff:
63:33:51:6a:0d:6c:a4:3e:24:61:e8:51:cd:56:9f:02:b1:0d:
4e:76:9e:60:ee:b3:52:9c:06:c3:96:5e:b9:0d:ac:4a:15:71:
0d:ca:5b:71:c1:a1:38:23:9a:b6:a9:c3:a9:c3:0e:3f:57:be:
2d:4b:bb:6b:21:d5:50:28:8a:bd:85:c3:d1:42:48:1e:4a:47:
07:25:ab:f3:05:9b:3b:8b:0b:10:50:7d:94:92:7a:0a:44:b8:
d5:f4:1f:a8:8b:2a:73:a8:b1:5f:18:08:99:a9:e2:5a:5d:08:
66:2e:7c:34:f0:b5:a1:ab:fe:b9:0e:54:f1:f5:fc:6e:43:57:
b8:e2:3a:19:d6:43:1e:f9:84:d7:aa:0b:28:5b:8d:1d:d7:d2:
ed:21:3d:92:df:db:44:70:8a:6b:df:4a:dc:e2:b4:d1:b8:23:
f7:95:37:91:59:ac:a7:fd:86:d5:77:c1:67:1a:d9:29:6b:32:
11:ae:49:e9:dc:c6:86:0e:8a:8b:ee:0a:d5:bd:1a:f3:7d:a3:
22:12:01:05:ed:11:d3:6f:9b:c3:05:4a:ee:b8:a5:3c:a8:44:
c5:1c:98:71:6d:7a:63:93:2e:74:4b:3f:50:fc:7c:37:2f:74:
5f:bb:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:08 2025 by rpki-client