Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json)
Hash identifier: hsjoU2dqOTgYQblMs2mTOa17Vf+3ocdMaUvBK3oHRvU=
Subject key identifier: 24:47:FE:BA:F4:D9:2E:C5:48:AC:04:5A:9F:D7:24:9C:CF:6C:76:B5
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 0197B6D77A9323D8F033BFA0CB5EB55C988A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
Manifest number: 0A45
Signing time: Sat 28 Jun 2025 14:01:04 +0000
Manifest this update: Sat 28 Jun 2025 14:01:04 +0000
Manifest next update: Sun 29 Jun 2025 14:01:04 +0000
Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=)
2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: pJAnMXrhj+Z6SM/8WZZG6LP3F5yVlOGzLFrRs+emo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7a:93:23:d8:f0:33:bf:a0:cb:5e:b5:5c:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Jun 28 14:01:04 2025 GMT
Not After : Jun 29 14:01:04 2025 GMT
Subject: CN=2447febaf4d92ec548ac045a9fd7249ccf6c76b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:06:31:41:06:18:22:d1:5f:92:20:cf:8f:
df:fb:9a:c9:10:d1:9c:3c:57:22:a3:04:65:7e:ba:
d4:25:64:13:4c:b2:0d:7c:98:bb:b3:66:39:53:76:
a2:6a:96:b3:e7:a3:9f:29:81:a5:a4:ba:d4:46:47:
10:d8:08:89:1e:be:17:77:1a:38:61:1d:b7:22:9d:
35:85:28:ac:7f:f2:e9:91:d7:0a:18:1c:2d:c2:7d:
ff:fa:e8:e0:8a:ab:09:f8:37:ff:52:58:68:bc:e5:
d8:82:67:60:0f:38:ef:43:ab:6d:db:52:d8:d9:a4:
08:0a:09:e9:14:ba:42:0e:69:f0:a0:11:4d:e9:cd:
f6:a6:e6:18:8e:f7:35:9c:4b:0f:51:bf:93:a8:cc:
9a:bd:08:b2:ff:a1:78:64:81:95:27:04:b3:08:45:
52:3a:a5:5d:5b:a2:e0:07:3a:e7:52:f7:7b:cd:5d:
f4:81:c5:cc:fc:84:46:70:48:24:0b:c2:ba:c4:bf:
29:d0:1b:24:ff:43:47:97:ac:90:ce:6b:1e:7b:29:
5d:c9:d4:30:4d:83:96:c1:28:4d:c2:2e:34:95:69:
9c:3b:38:9e:1e:b5:e2:a6:70:a6:dc:55:de:7a:48:
22:6b:ca:fe:ec:96:9b:93:df:1e:09:36:7c:ba:91:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:FE:BA:F4:D9:2E:C5:48:AC:04:5A:9F:D7:24:9C:CF:6C:76:B5
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:da:cb:28:fa:24:12:71:9c:09:e3:b7:7c:95:31:e7:38:
07:2b:f6:e6:dd:22:96:36:15:85:f8:76:4f:f8:15:53:e7:33:
bf:d4:3e:df:c0:9d:d3:6d:92:c8:fa:b4:fe:ce:09:99:fd:74:
d0:0c:c4:e4:8a:d5:c1:d7:a6:4c:97:08:e0:6f:61:b4:0f:79:
17:55:2c:7f:1e:f5:27:e7:b7:56:71:9b:5b:a2:62:0b:34:dd:
27:ba:8d:6b:d7:31:20:52:fe:34:1a:7f:09:c0:6f:a4:70:fb:
24:52:cd:b5:50:d5:b7:1a:f4:65:22:a1:fe:b7:11:f3:97:2a:
cb:a0:94:fc:be:81:f7:3a:0f:26:ac:d4:09:ba:72:84:e0:81:
3e:69:7b:8c:07:59:19:e6:81:92:50:dc:af:15:e0:a5:3b:94:
c5:96:7a:06:09:9f:6a:0f:5b:54:e5:87:62:c9:39:1b:86:48:
f9:5b:ed:59:ab:3c:57:df:14:7b:04:d0:9a:d7:f5:ed:c6:39:
6b:c8:d5:6b:9a:4c:1e:5e:1d:c1:bf:bc:49:6c:b7:7d:48:c6:
c7:61:0b:ec:28:cf:34:d6:74:c3:4a:28:c2:5b:8c:e5:cf:f4:
0a:d3:d0:05:6d:3c:53:72:3b:7d:89:af:46:42:8b:6c:c8:44:
ea:75:15:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe213qTI9jwM7+gy161XJiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjcyNTM3ZWRmMWRjMGI3ZjY5NDQ1MzQ1MGJjYTRhZWVm
ODNmNjQwHhcNMjUwNjI4MTQwMTA0WhcNMjUwNjI5MTQwMTA0WjAzMTEwLwYDVQQD
EygyNDQ3ZmViYWY0ZDkyZWM1NDhhYzA0NWE5ZmQ3MjQ5Y2NmNmM3NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sIGMUEGGCLRX5Igz4/f+5rJENGc
PFciowRlfrrUJWQTTLINfJi7s2Y5U3aiapaz56OfKYGlpLrURkcQ2AiJHr4Xdxo4
YR23Ip01hSisf/LpkdcKGBwtwn3/+ujgiqsJ+Df/UlhovOXYgmdgDzjvQ6tt21LY
2aQICgnpFLpCDmnwoBFN6c32puYYjvc1nEsPUb+TqMyavQiy/6F4ZIGVJwSzCEVS
OqVdW6LgBzrnUvd7zV30gcXM/IRGcEgkC8K6xL8p0Bsk/0NHl6yQzmseeyldydQw
TYOWwShNwi40lWmcOzieHrXipnCm3FXeekgia8r+7Jabk98eCTZ8upH0wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRH/rr02S7FSKwEWp/XJJzPbHa1MB8GA1UdIwQY
MBaAFGD3JTft8dwLf2lEU0ULykru+D9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUt
NGJiZjY0NWIxMGQzLzEvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUtNGJiZjY0NWIxMGQz
LzEvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZubayyj6
JBJxnAnjt3yVMec4Byv25t0iljYVhfh2T/gVU+czv9Q+38Cd022SyPq0/s4Jmf10
0AzE5IrVwdemTJcI4G9htA95F1Usfx71J+e3VnGbW6JiCzTdJ7qNa9cxIFL+NBp/
CcBvpHD7JFLNtVDVtxr0ZSKh/rcR85cqy6CU/L6B9zoPJqzUCbpyhOCBPml7jAdZ
GeaBklDcrxXgpTuUxZZ6Bgmfag9bVOWHYsk5G4ZI+VvtWas8V98UewTQmtf17cY5
a8jVa5pMHl4dwb+8SWy3fUjGx2EL7CjPNNZ0w0oowluM5c/0CtPQBW08U3I7fYmv
RkKLbMhE6nUVWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client