Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: 7ej6MDg+zoEZ1ZUfBAUvwoEO4yE+dB8T+VgpN329bQY=
Subject key identifier: 31:43:3F:73:B6:5D:38:28:44:5A:12:64:57:C6:9E:96:75:B7:C0:F4
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0198974996F987802650B1AAD82C97868844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 03B9
Signing time: Mon 11 Aug 2025 04:00:39 +0000
Manifest this update: Mon 11 Aug 2025 04:00:39 +0000
Manifest next update: Tue 12 Aug 2025 04:00:39 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: MOZdNcvoDsyyG0CIDSbn1MYswXgViajajtfdm3+AeEM=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:96:f9:87:80:26:50:b1:aa:d8:2c:97:86:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Aug 11 04:00:39 2025 GMT
Not After : Aug 12 04:00:39 2025 GMT
Subject: CN=31433f73b65d3828445a126457c69e9675b7c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:4b:cc:aa:15:10:fb:11:a5:8c:c4:f8:77:
b0:15:5b:49:b6:de:ed:01:da:d8:6c:7a:1a:6e:a4:
0f:8c:c0:1a:7d:e8:d2:77:3d:b6:47:9c:38:4a:3e:
66:cc:fe:10:1e:b6:d3:fa:0c:9a:56:9c:ec:e9:c4:
4b:f6:49:d2:14:a2:be:6a:31:8f:b3:35:c4:c0:99:
7b:4f:8a:c2:e2:64:b0:76:a0:fc:bf:81:9c:ff:b1:
8f:a5:e5:31:16:21:99:0f:fd:6b:15:f7:e1:1c:5e:
d8:6a:7b:ba:fc:50:79:9f:4a:ff:d3:28:db:2a:b8:
e5:11:f7:08:5f:73:87:6f:c7:07:0e:77:cb:dc:0b:
dc:6c:46:3d:b5:36:7d:a9:8b:97:da:40:0c:8f:7a:
bf:c8:63:32:27:9d:bb:46:55:d0:bc:5c:cd:5a:8f:
87:38:43:71:f2:22:e7:dc:fd:96:e0:20:af:7a:ae:
a0:eb:17:31:e2:ec:a1:a1:18:ed:a2:93:43:b3:cd:
20:20:a6:3a:95:a1:5d:9e:6c:f7:9b:af:41:81:09:
be:25:09:30:21:97:3d:a3:98:82:86:44:97:bc:9d:
5c:0e:57:ac:b4:12:cc:43:6c:7c:af:4a:e2:c7:8d:
7b:52:48:01:0f:7d:82:72:6a:15:bf:f7:29:b1:c7:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:3F:73:B6:5D:38:28:44:5A:12:64:57:C6:9E:96:75:B7:C0:F4
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:53:44:44:15:4b:f9:58:be:a6:df:86:9d:19:5a:eb:7c:40:
fc:f2:fa:c8:43:31:17:95:c7:57:90:77:97:b8:e6:a9:68:a8:
ba:75:2c:c2:68:0b:15:11:68:b4:7b:a4:69:f9:28:7d:53:90:
04:5e:23:c2:4d:5f:51:0b:29:30:c2:a0:e8:5e:c0:12:68:81:
67:d1:a9:5e:78:33:de:25:d4:13:90:69:e3:02:eb:e1:00:cb:
c4:6f:d5:2f:d3:1e:6c:f0:d4:6e:66:8a:fd:e1:f8:6e:82:07:
bd:d0:04:ee:ee:b1:8e:18:51:f8:c8:56:a7:ff:a6:0c:11:10:
a8:1e:6e:85:fb:e7:45:bb:d5:04:6e:df:56:40:36:fb:fc:41:
a4:33:ef:6d:f8:86:4f:2e:c9:2f:a4:3a:21:f8:a5:4b:27:f4:
9c:d6:bf:d9:fe:b0:33:b2:e2:c5:77:06:9b:65:ec:f0:fb:98:
87:91:24:ff:3b:19:6a:f4:72:66:91:4e:f2:0b:c6:ad:a4:85:
19:9c:4d:ef:ce:a0:01:aa:2f:cf:4c:ea:2f:70:ed:25:46:e4:
bc:76:b7:d1:77:c4:09:f9:d2:f4:bc:c2:7c:68:c5:1d:32:12:
8d:b4:aa:16:4c:f9:d2:ed:5f:fb:51:e8:f4:36:db:48:de:0a:
9b:46:08:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXSZb5h4AmULGq2CyXhohEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw
YTQ5MGUwHhcNMjUwODExMDQwMDM5WhcNMjUwODEyMDQwMDM5WjAzMTEwLwYDVQQD
EygzMTQzM2Y3M2I2NWQzODI4NDQ1YTEyNjQ1N2M2OWU5Njc1YjdjMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQhLzKoVEPsRpYzE+HewFVtJtt7t
AdrYbHoabqQPjMAafejSdz22R5w4Sj5mzP4QHrbT+gyaVpzs6cRL9knSFKK+ajGP
szXEwJl7T4rC4mSwdqD8v4Gc/7GPpeUxFiGZD/1rFffhHF7Yanu6/FB5n0r/0yjb
KrjlEfcIX3OHb8cHDnfL3AvcbEY9tTZ9qYuX2kAMj3q/yGMyJ527RlXQvFzNWo+H
OENx8iLn3P2W4CCveq6g6xcx4uyhoRjtopNDs80gIKY6laFdnmz3m69BgQm+JQkw
IZc9o5iChkSXvJ1cDlestBLMQ2x8r0rix417UkgBD32CcmoVv/cpscdRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFDP3O2XTgoRFoSZFfGnpZ1t8D0MB8GA1UdIwQY
MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt
NWY3MTNkZmZmMTE0LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0
LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlNERBVL
+Vi+pt+GnRla63xA/PL6yEMxF5XHV5B3l7jmqWiounUswmgLFRFotHukafkofVOQ
BF4jwk1fUQspMMKg6F7AEmiBZ9GpXngz3iXUE5Bp4wLr4QDLxG/VL9MebPDUbmaK
/eH4boIHvdAE7u6xjhhR+MhWp/+mDBEQqB5uhfvnRbvVBG7fVkA2+/xBpDPvbfiG
Ty7JL6Q6IfilSyf0nNa/2f6wM7LixXcGm2Xs8PuYh5Ek/zsZavRyZpFO8gvGraSF
GZxN786gAaovz0zqL3DtJUbkvHa30XfECfnS9LzCfGjFHTISjbSqFkz50u1f+1Ho
9DbbSN4Km0YIzw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:58:59 2025 by rpki-client