
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: qujlzsGph2XEhZnQNJdc4qMaurFexLHlHqtcUwBYPM8=
Subject key identifier: 59:2D:58:9D:26:4B:84:18:DB:54:00:58:BC:D8:E7:19:ED:BE:FD:95
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019788EBB298CF2C6AD6DCDA8CFB6423AF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 032D
Signing time: Thu 19 Jun 2025 16:00:37 +0000
Manifest this update: Thu 19 Jun 2025 16:00:37 +0000
Manifest next update: Fri 20 Jun 2025 16:00:37 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: dyERS/nW9SI/6TNMMnmJVj/nDVUVc5YyTzCS4UJQYVU=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:b2:98:cf:2c:6a:d6:dc:da:8c:fb:64:23:af:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Jun 19 16:00:37 2025 GMT
Not After : Jun 20 16:00:37 2025 GMT
Subject: CN=592d589d264b8418db540058bcd8e719edbefd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:6f:fd:01:40:08:eb:e2:dd:60:39:43:83:
e2:a8:0c:2a:2c:37:bd:28:21:ac:9b:5e:8c:4e:c0:
87:e7:59:47:7d:97:10:bf:34:1c:91:3c:57:64:05:
53:d0:bf:52:2f:1c:d8:6e:bf:40:10:3c:50:f7:0c:
26:29:84:7f:ca:dc:37:e1:9b:51:2d:df:c3:8f:77:
8c:4e:01:cc:da:e5:45:ea:a0:76:2c:39:ee:51:49:
ce:28:6c:49:28:dd:ae:92:30:7b:e8:de:6f:25:2f:
6c:be:da:e1:7c:ed:e8:95:fc:31:b5:f8:c9:2a:3a:
43:ba:c0:55:b0:0b:86:06:b5:df:bd:0e:fe:01:d1:
28:d9:d8:bd:b4:80:57:21:f9:98:83:f9:5b:f9:5e:
50:2e:1a:f1:2a:ed:09:1a:07:97:2b:5f:11:66:46:
30:09:ef:89:5e:79:e5:d6:84:5c:82:0c:77:da:c5:
f6:4b:b8:9b:8c:b4:1e:c9:c1:15:88:44:7c:8c:af:
9f:d8:7f:82:a4:91:3d:09:f3:ec:89:f2:1c:e8:90:
ce:24:36:e6:7c:3c:28:29:46:5e:73:8f:f9:8f:60:
96:b0:11:30:c4:88:74:8b:eb:b5:45:9f:9a:7d:fe:
7d:48:0c:71:a6:38:55:c1:6d:4c:70:c1:74:73:5d:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:58:9D:26:4B:84:18:DB:54:00:58:BC:D8:E7:19:ED:BE:FD:95
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:ce:9f:a9:b8:49:de:67:5d:6e:e3:74:5b:fd:7b:d1:1c:
ca:ae:7f:3c:89:82:b7:e5:c9:1f:b2:f9:d1:05:c7:5c:1d:61:
7e:23:f2:01:a0:ba:66:81:11:97:02:9f:3a:92:f1:c7:5e:30:
39:0a:dd:b4:83:e6:7a:85:50:48:88:f0:27:5b:05:90:bf:f0:
86:31:9a:c1:71:c4:b2:01:49:f2:1d:27:0d:9c:b4:a7:c4:67:
75:3e:7c:48:cf:ee:bd:78:94:1b:84:93:53:09:5e:14:17:87:
35:43:cb:9c:ba:d0:3b:74:fd:0b:5f:8d:b3:ad:a7:92:e4:7f:
10:3d:e4:78:59:bd:4d:51:dc:08:31:17:a4:23:f7:dc:b6:9c:
18:92:74:f2:83:93:e6:74:fb:1e:31:38:f2:36:35:cd:2a:cc:
05:dd:35:64:28:2f:2b:85:02:a3:fb:fd:26:62:0b:54:13:a3:
f7:21:57:12:2c:a5:02:23:bb:3e:85:77:c9:37:4b:9f:a9:94:
e5:cd:a4:df:a9:3a:3b:0f:f0:45:71:d5:64:f2:0a:f5:e5:bf:
f5:d0:09:5a:90:77:ea:d0:16:77:9b:c2:ee:b3:58:10:cb:ee:
88:b1:ef:d8:d6:08:d2:0b:0f:4e:14:5f:27:f5:eb:c8:7f:8b:
45:92:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:44:56 2025 by rpki-client