Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: AOj5Vj137+GJ3omhCChkYDGfKzAMC2XlVQ5cUV0qWlQ=
Subject key identifier: 1F:E5:51:1B:F5:A0:0A:7B:00:DC:50:75:CC:C5:DC:E5:3F:B3:89:FE
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019A4EF58A35E016EDD28A36954BB24A34CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 136B
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: X2vtRkUcY4v2kzuZIJ0s2TAAaTWqISr8V/vDJuuPNU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8a:35:e0:16:ed:d2:8a:36:95:4b:b2:4a:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=1fe5511bf5a00a7b00dc5075ccc5dce53fb389fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:a4:ce:3d:13:18:1b:d1:65:c7:1d:12:41:
11:3f:8f:0a:6e:78:22:c1:7c:61:78:35:8a:5e:7e:
94:35:85:33:22:1d:03:fa:fc:2f:29:52:cf:0f:51:
16:07:cd:81:f7:0f:1c:22:b9:b1:dc:40:5d:a0:32:
16:d7:09:c4:94:2d:18:4f:e9:f0:4b:ad:5e:35:7e:
29:23:38:40:ee:84:1a:82:ee:02:80:70:50:c9:50:
29:34:5e:93:40:2e:08:15:cc:93:b0:59:55:d7:35:
ba:05:25:de:00:0d:56:49:85:db:10:84:1d:66:5c:
da:76:10:b6:78:8e:d4:35:2c:4d:5e:8b:85:7f:7d:
bd:90:07:b3:aa:71:c5:32:3e:f0:79:e3:28:de:77:
15:76:b0:cc:39:a3:31:76:00:6c:37:bb:26:6a:5e:
01:c7:9e:79:29:27:b6:2c:8a:e8:5d:94:62:98:ba:
f6:fe:f2:65:22:46:ce:d2:53:e2:eb:24:61:e0:9e:
33:82:c6:53:e4:f4:e7:59:42:3d:74:31:bb:05:0a:
14:61:f2:1c:34:b7:82:24:86:ce:25:2f:e6:a5:21:
af:63:4c:23:d8:a6:5e:9a:06:c1:ed:2c:8b:12:8a:
40:fc:c7:21:41:1e:0d:8f:77:a7:79:c1:e2:38:bf:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:51:1B:F5:A0:0A:7B:00:DC:50:75:CC:C5:DC:E5:3F:B3:89:FE
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:be:c5:ec:f1:3c:58:23:81:06:dc:3b:d4:e4:01:b5:3e:f0:
ab:ce:c2:2a:34:41:96:b9:91:89:00:1c:94:8b:13:8b:5f:f2:
be:cb:00:99:13:6f:c9:af:9b:0f:cd:e0:fd:a9:4c:4a:1b:25:
3a:62:f6:2a:10:de:e1:d0:97:5a:89:be:1b:08:19:5f:6b:09:
ca:1f:60:03:57:17:f4:d2:18:bc:ef:7f:47:01:98:9e:f7:91:
66:3e:37:76:35:82:72:57:b5:56:9a:c7:c4:cf:94:2b:7d:89:
01:c6:35:2c:12:a2:b2:9a:6e:31:81:fd:55:9d:5d:06:18:e5:
00:40:3e:97:1a:6e:88:a9:4d:89:cb:3d:0f:3c:71:c7:03:73:
1d:0a:6b:c4:7b:b5:4a:be:75:ad:52:0a:2f:c7:ae:bd:04:b9:
f4:98:9a:a5:73:7c:c8:4c:8d:f0:bf:5c:15:02:42:61:91:f8:
67:f0:be:af:79:52:d5:1d:4f:d7:59:cf:28:26:8e:ed:71:3f:
2f:8c:b3:31:bb:3d:be:4d:8c:c2:b4:50:30:39:de:1f:3d:f2:
9f:87:96:bf:b3:95:47:e2:f4:a6:94:ef:0a:fd:18:a1:57:85:
97:67:95:e0:56:73:cc:dd:27:d3:2e:0e:64:a6:2e:37:fb:6f:
47:a0:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:17 2025 by rpki-client