Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: OL+xy9AKb6Inpth1qCF5njmhedRtBf4oMdFm0FRQ2Q0=
Subject key identifier: 62:E2:8F:1A:E2:21:10:C7:A2:7A:C6:0F:87:58:30:9C:B0:2C:5E:D6
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019A4DAAE230B00EA64FB89A8E8BF9DD8321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 049C
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: o4mFTCGlmjsza/36WQMivEhaeiLoizp39iCbO7v2EJU=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e2:30:b0:0e:a6:4f:b8:9a:8e:8b:f9:dd:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=62e28f1ae22110c7a27ac60f8758309cb02c5ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:f6:96:2f:fb:b7:47:35:94:e5:86:68:48:
61:e0:35:cc:2a:d3:fe:bc:33:df:d5:9f:c0:f0:a5:
4b:6f:8c:b0:7e:8b:5d:60:0a:9e:95:5d:52:1b:fd:
2a:33:2b:64:34:43:09:65:3d:9a:2c:b0:62:50:25:
44:4d:03:49:75:b9:66:25:40:94:93:40:04:f4:4f:
12:26:04:f3:d1:f8:35:03:46:71:8f:6b:89:7b:c2:
dc:06:c1:a6:d9:4d:2c:e2:bd:56:be:e5:54:b9:6d:
3c:a3:84:0d:13:d7:17:c6:f4:06:4b:2d:83:d1:04:
8a:cc:03:be:ac:97:eb:a7:55:46:9b:31:a8:c9:4e:
04:87:ed:62:e3:cd:f2:b8:84:7f:f3:01:3b:f0:d9:
7c:2f:f2:09:ee:2e:5d:73:de:63:1b:0c:60:58:a7:
27:3e:21:c6:67:47:98:cb:c4:7a:31:49:5a:8f:d7:
56:79:ec:4f:49:6a:4c:f9:74:26:6e:79:71:af:c7:
50:ca:39:41:47:47:57:a4:3b:13:16:34:b1:7f:1f:
28:b1:63:e5:5a:39:67:64:bf:59:c3:ed:05:82:13:
49:3c:b3:00:1d:69:88:f7:b5:1c:1a:89:4a:03:12:
0d:85:db:06:83:65:c8:22:7e:48:16:7a:7d:90:fd:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E2:8F:1A:E2:21:10:C7:A2:7A:C6:0F:87:58:30:9C:B0:2C:5E:D6
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:d1:6b:45:4b:d6:2c:3a:5f:a3:3e:4c:22:2a:35:e7:fa:
bf:ef:8f:de:24:ba:c3:33:96:ab:22:b9:48:89:c3:41:07:57:
bb:78:5c:9e:96:31:4c:42:6e:b6:55:bb:e6:41:11:84:3c:c8:
91:c4:00:31:ce:fd:33:e0:39:df:d1:08:0b:ef:59:cf:28:ec:
da:6c:0c:f5:ac:ec:8d:f9:ef:4d:85:b3:1a:6a:82:b1:a0:12:
70:e1:b1:d0:03:76:7c:6d:aa:cb:01:24:50:43:69:22:88:28:
a8:b4:8a:68:6f:36:25:ce:f8:22:3b:61:a8:37:c1:44:64:a9:
6c:6d:a1:49:a8:94:ed:72:9e:0e:68:6e:b4:0b:46:49:f9:e8:
e0:32:98:8d:e2:40:80:fc:0a:b2:6a:d4:48:73:9b:e9:c8:55:
2e:8e:ba:b7:b7:30:65:bd:a9:f3:24:ec:82:dc:e2:13:c6:b7:
2e:e4:40:08:f6:63:4c:e0:1f:47:f5:cf:3b:77:ae:0f:cf:2b:
34:5c:17:68:47:97:21:77:98:74:9f:b7:3d:ab:06:e7:74:8a:
16:9a:a7:39:1b:f2:8d:5c:a3:00:e7:b4:51:70:6e:91:32:79:
d8:cc:f5:1c:51:7a:54:98:30:81:13:11:dc:6c:6c:af:e4:6c:
80:3a:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:45 2025 by rpki-client