Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: 9vYa9FyhHsaHXb1EBd0/Y7HNlqIe7e4B5WQZubDOk3U=
Subject key identifier: E3:DF:56:9E:E2:F2:EE:4D:85:A7:ED:EF:21:5B:1D:64:11:28:7F:71
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 01987D8ACBD74DB25EB4BA93B907CB438398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1344
Signing time: Wed 06 Aug 2025 04:01:44 +0000
Manifest this update: Wed 06 Aug 2025 04:01:44 +0000
Manifest next update: Thu 07 Aug 2025 04:01:44 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: +vufYRFef1zStxkemuwf16V7QW8hw/Fo1GcWcJfLE+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:cb:d7:4d:b2:5e:b4:ba:93:b9:07:cb:43:83:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Aug 6 04:01:44 2025 GMT
Not After : Aug 7 04:01:44 2025 GMT
Subject: CN=e3df569ee2f2ee4d85a7edef215b1d6411287f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:2b:57:9c:d6:b1:23:6a:30:1b:6e:c0:3d:
f3:d1:ed:6c:55:44:d7:65:e6:93:73:c1:29:d3:ac:
4b:f3:30:e3:94:34:f2:15:a7:8b:ca:02:87:ee:d8:
5c:87:da:01:fa:1b:eb:4b:05:06:e7:6e:77:2d:1c:
cd:30:33:e7:a2:ee:f4:ed:f6:e3:92:7e:4f:82:c5:
17:2c:fc:8b:f5:70:f6:03:f1:cd:87:09:35:ca:29:
10:7e:1c:53:52:a2:97:79:f9:8b:ee:aa:4a:3c:da:
0f:d9:fe:fe:b8:56:2f:00:2f:3c:dc:e1:e6:34:8c:
08:b4:c7:3e:3b:da:82:b6:76:95:71:79:9a:4a:54:
83:b8:57:c8:81:5f:fc:5b:c8:ae:b5:b7:b3:c5:7a:
56:21:87:a8:45:d0:c8:30:25:ca:65:f7:08:73:53:
b8:d9:1e:14:00:c8:b2:64:c9:b5:e5:58:c8:88:82:
f5:e6:84:d3:c5:ba:32:d8:ca:41:26:a5:59:d9:85:
78:07:38:0b:8d:6b:9e:f5:85:6d:0a:87:03:ed:71:
46:b5:83:f4:f9:63:ff:51:b5:81:2d:4a:f4:3e:ff:
89:ea:a3:2a:a5:79:57:f5:47:d7:e6:d4:59:4e:a3:
55:35:cc:76:b9:79:71:f1:83:58:c9:9f:62:01:58:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DF:56:9E:E2:F2:EE:4D:85:A7:ED:EF:21:5B:1D:64:11:28:7F:71
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:05:c8:f5:c6:8b:02:00:bd:db:70:86:0a:07:01:2a:4a:
e2:4a:e9:04:e5:80:e9:a4:31:51:26:d3:fc:84:10:e6:03:44:
d2:18:b8:a3:1c:69:4d:89:f7:1b:21:d0:75:04:c1:be:ae:a4:
83:62:aa:cf:e0:7f:35:d8:c9:a4:cc:35:3a:0f:d5:2f:f6:e1:
42:56:96:38:8a:c5:be:d2:ca:9a:f1:58:ed:18:9e:68:07:a6:
94:c4:d2:28:ab:ea:f8:60:0e:f8:d8:20:5c:80:78:4c:4f:76:
7d:91:b0:24:fb:ec:ea:81:cc:d1:dd:da:44:63:e8:9d:21:c6:
9b:d5:51:7c:31:4b:59:68:18:c9:f7:c3:b3:ba:d4:9c:35:38:
b1:26:b8:6a:e9:42:2f:f0:dd:d6:45:b7:1e:63:dc:7b:7c:84:
c8:12:4d:64:e7:39:4f:f1:06:f2:b8:95:e6:02:bd:4f:8f:30:
d6:81:6c:19:52:4e:7c:47:06:73:8f:ad:a1:af:76:e2:f2:95:
61:ec:26:97:12:b0:0e:62:fc:41:6b:84:70:0d:4c:b7:c9:25:
17:a8:2f:f2:e5:62:58:77:4b:99:ad:ff:a1:a4:7f:9c:fb:c3:
d6:aa:51:d9:84:17:fc:c2:6a:85:8a:06:aa:73:30:e7:24:62:
0f:5f:cf:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9isvXTbJetLqTuQfLQ4OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3
NDQ4OTgwHhcNMjUwODA2MDQwMTQ0WhcNMjUwODA3MDQwMTQ0WjAzMTEwLwYDVQQD
EyhlM2RmNTY5ZWUyZjJlZTRkODVhN2VkZWYyMTViMWQ2NDExMjg3ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIArV5zWsSNqMBtuwD3z0e1sVUTX
ZeaTc8Ep06xL8zDjlDTyFaeLygKH7thch9oB+hvrSwUG5253LRzNMDPnou707fbj
kn5PgsUXLPyL9XD2A/HNhwk1yikQfhxTUqKXefmL7qpKPNoP2f7+uFYvAC883OHm
NIwItMc+O9qCtnaVcXmaSlSDuFfIgV/8W8iutbezxXpWIYeoRdDIMCXKZfcIc1O4
2R4UAMiyZMm15VjIiIL15oTTxboy2MpBJqVZ2YV4BzgLjWue9YVtCocD7XFGtYP0
+WP/UbWBLUr0Pv+J6qMqpXlX9UfX5tRZTqNVNcx2uXlx8YNYyZ9iAVjPswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPfVp7i8u5Nhaft7yFbHWQRKH9xMB8GA1UdIwQY
MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It
NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx
LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9MFyPXG
iwIAvdtwhgoHASpK4krpBOWA6aQxUSbT/IQQ5gNE0hi4oxxpTYn3GyHQdQTBvq6k
g2Kqz+B/NdjJpMw1Og/VL/bhQlaWOIrFvtLKmvFY7RieaAemlMTSKKvq+GAO+Ngg
XIB4TE92fZGwJPvs6oHM0d3aRGPonSHGm9VRfDFLWWgYyffDs7rUnDU4sSa4aulC
L/Dd1kW3HmPce3yEyBJNZOc5T/EG8riV5gK9T48w1oFsGVJOfEcGc4+toa924vKV
YewmlxKwDmL8QWuEcA1Mt8klF6gv8uViWHdLma3/oaR/nPvD1qpR2YQX/MJqhYoG
qnMw5yRiD1/Pnw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:31 2025 by rpki-client