
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: DNhpiMEm3H5JFymrsRXYT4gZe4rH5uXCamUMNXUWUdI=
Subject key identifier: 20:59:21:6C:2A:C2:6A:1E:30:0F:71:A3:FC:DD:0A:E2:0A:47:F9:56
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01988BEA1382032703EBE5069C0B0F7E1D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 154F
Signing time: Fri 08 Aug 2025 23:00:29 +0000
Manifest this update: Fri 08 Aug 2025 23:00:29 +0000
Manifest next update: Sat 09 Aug 2025 23:00:29 +0000
Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: bShfgPhmu6MBPcJ4teBlI9rpUhTZ5rhdVzHYploCRWE=)
3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:13:82:03:27:03:eb:e5:06:9c:0b:0f:7e:1d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Aug 8 23:00:29 2025 GMT
Not After : Aug 9 23:00:29 2025 GMT
Subject: CN=2059216c2ac26a1e300f71a3fcdd0ae20a47f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:a5:8c:a4:7c:5b:66:cd:78:47:38:79:fc:
b9:05:15:3a:81:76:ac:93:2c:57:a6:bf:16:8c:a0:
a4:88:7c:06:89:4a:87:a8:44:77:f5:97:65:3c:c0:
e4:ff:55:77:ea:25:c8:e5:ae:99:d4:96:56:8c:10:
80:3c:c9:fc:40:95:d6:f6:0d:83:c4:b5:df:e7:4f:
32:1f:d9:11:8e:e1:31:05:9f:c3:90:23:75:f5:13:
0f:72:dd:13:29:89:4e:43:4c:b2:46:0f:8c:23:82:
a5:c7:d1:dd:ab:e0:18:45:ea:df:64:63:04:05:2e:
eb:47:1f:74:3e:27:14:12:f5:f4:f3:43:da:e8:59:
7d:a9:44:e1:6e:bb:82:64:8d:74:08:70:45:ff:eb:
3d:59:a6:b2:9a:41:57:b9:3d:7b:e0:db:d1:2a:f8:
59:7c:56:8c:df:8d:b5:07:cd:f4:cc:41:29:7d:53:
0a:81:90:c0:dc:52:cc:df:df:34:95:ea:e3:45:cd:
f4:98:53:20:6c:70:22:8e:e4:b0:16:f5:23:77:10:
88:bc:e4:51:88:36:cc:a4:6c:88:4f:02:92:2e:15:
ce:80:d7:cb:5a:59:64:e2:93:fa:23:92:ae:54:83:
d2:6b:fd:59:ca:ce:50:f6:72:0e:e1:59:2e:82:4c:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:21:6C:2A:C2:6A:1E:30:0F:71:A3:FC:DD:0A:E2:0A:47:F9:56
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:bf:c7:26:44:40:27:1d:02:1e:97:c2:e4:99:2a:bd:49:
da:16:be:c6:16:a1:29:5e:8a:55:ac:57:86:3a:4f:a4:f2:63:
a5:a3:d0:fe:02:24:d0:2e:75:0d:5f:fa:f7:28:5f:73:87:58:
56:3a:a4:f2:74:b9:92:56:ec:47:84:04:5d:60:22:65:81:10:
a9:f9:01:ec:34:92:42:78:35:e5:2d:7c:8d:af:86:c3:0a:f8:
cc:6e:3b:84:7a:08:19:22:d2:b6:a7:6f:e0:ca:f3:e4:5d:0d:
89:64:c8:c1:94:2b:eb:0e:d8:2e:3c:9d:b8:56:c2:70:23:0d:
12:de:a0:1d:ee:b6:c0:ef:e2:c5:26:75:3d:06:9f:00:6b:0a:
9a:c6:42:6f:d2:a4:5e:03:dd:06:a2:02:82:ac:27:f7:ed:e9:
19:ec:91:1c:8c:9b:b9:ad:f2:8f:7c:b6:5c:0f:ec:00:e0:95:
32:e5:0e:97:a3:1a:ef:fe:d5:3d:28:c8:4a:3c:46:89:ae:be:
82:d5:29:80:1d:2a:62:1e:0e:f7:3f:3a:5b:bf:01:7a:69:ef:
cc:0b:28:31:54:89:85:97:fe:4e:fe:eb:0f:7b:82:6b:64:d1:
6c:86:c3:ff:99:f5:43:cd:ae:2e:68:3a:bc:95:ad:5f:5b:f0:
77:08:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:13 2025 by rpki-client