
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: Hx+eEZcOH5SMPbYeVFfwNzF6UK3PtU6Z9TUPYA5d8kk=
Subject key identifier: 74:C5:62:C8:3E:43:59:47:D4:27:C2:92:9B:C7:1C:AF:02:E8:B2:64
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0197B7451A3654B33F7643F578EB390AEF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0345
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: //1ARuOu1ixvjlMKTthIiQrnn36Lw67HEloffFbORXU=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1a:36:54:b3:3f:76:43:f5:78:eb:39:0a:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=74c562c83e435947d427c2929bc71caf02e8b264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:fc:1b:9b:87:18:17:39:76:6a:83:1c:30:
a5:6c:d8:18:7d:c4:af:94:df:ac:28:5e:41:b9:ee:
81:ca:39:2f:e9:d0:c7:de:8c:b9:9b:82:12:3e:02:
26:33:50:37:3c:66:34:6c:54:17:75:0a:d9:ce:76:
1e:a7:71:be:22:f0:5a:31:9e:b8:77:ba:b1:70:a6:
9c:69:91:bc:d5:ab:a3:a3:40:78:81:65:3d:e8:bb:
ee:31:ef:db:a9:1f:fd:42:a5:ec:c2:0d:00:32:fc:
be:63:29:85:99:99:a4:ce:79:20:f2:ba:77:96:e1:
eb:41:c6:66:2d:6e:3e:45:e0:51:bf:46:89:d9:74:
34:cb:30:21:2d:0c:b1:17:a6:6b:8b:93:42:86:65:
f2:10:44:a8:2b:6d:8f:7d:b7:a3:e6:1c:d9:46:d9:
1f:59:a0:62:cb:5e:f2:32:2b:61:e3:23:6e:c9:e5:
3f:f8:65:76:29:51:63:69:77:1d:6a:28:64:06:bc:
e5:f3:d3:de:f7:f0:31:05:01:ee:85:02:65:c3:f5:
88:38:98:7c:d5:39:96:fe:44:1b:11:00:2e:da:fe:
6e:9a:c8:35:5c:2f:62:07:9f:a3:f5:b2:73:6d:ce:
b3:f3:d0:cc:f3:db:b7:5b:26:fb:97:2d:28:89:4b:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:62:C8:3E:43:59:47:D4:27:C2:92:9B:C7:1C:AF:02:E8:B2:64
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:21:cc:08:0b:bc:fa:83:a5:7f:7c:49:20:5f:ae:c9:06:72:
4f:d3:c5:24:22:75:b1:8b:d1:99:9b:e2:0e:a9:74:e7:11:45:
91:13:5c:12:88:fb:3f:15:c7:f9:e4:af:42:50:02:68:5d:e1:
5b:22:8a:be:03:a9:79:9b:53:12:c2:03:d1:f6:d3:7b:15:33:
37:94:7d:0d:1d:3e:c1:c6:8c:bf:c2:d2:20:3e:11:28:31:4b:
a1:79:53:52:d0:4d:69:af:ad:46:64:ee:e3:e1:f4:78:c7:d7:
25:3a:08:87:d6:46:4a:f2:3e:b7:f7:ba:45:e6:eb:a9:39:80:
1c:b3:b4:0d:1d:ac:de:98:da:de:22:3e:63:3d:90:34:40:5a:
37:53:04:e7:d6:f3:8d:3e:7e:7c:de:90:0d:58:56:ca:73:c2:
b6:3b:b3:7c:43:8c:8f:eb:b2:be:60:4d:33:24:0a:9e:be:f6:
35:c0:f4:88:18:fe:8b:8d:2c:c9:6a:ac:4c:35:1a:6f:80:f9:
32:38:52:d7:b1:8b:71:76:5e:dc:52:da:70:e2:32:c5:d1:ed:
6d:28:1a:0a:da:50:ab:f8:96:6b:3c:56:f0:87:0d:61:b4:95:
bc:6d:dd:4c:d3:82:db:73:fa:cc:68:4e:15:8c:c1:5a:7f:69:
43:f3:e8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRo2VLM/dkP1eOs5Cu9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw
YTQ5MGUwHhcNMjUwNjI4MTYwMDQ4WhcNMjUwNjI5MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg3NGM1NjJjODNlNDM1OTQ3ZDQyN2MyOTI5YmM3MWNhZjAyZThiMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUT8G5uHGBc5dmqDHDClbNgYfcSv
lN+sKF5Bue6Byjkv6dDH3oy5m4ISPgImM1A3PGY0bFQXdQrZznYep3G+IvBaMZ64
d7qxcKacaZG81aujo0B4gWU96LvuMe/bqR/9QqXswg0AMvy+YymFmZmkznkg8rp3
luHrQcZmLW4+ReBRv0aJ2XQ0yzAhLQyxF6Zri5NChmXyEESoK22Pfbej5hzZRtkf
WaBiy17yMith4yNuyeU/+GV2KVFjaXcdaihkBrzl89Pe9/AxBQHuhQJlw/WIOJh8
1TmW/kQbEQAu2v5umsg1XC9iB5+j9bJzbc6z89DM89u3Wyb7ly0oiUs3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTFYsg+Q1lH1CfCkpvHHK8C6LJkMB8GA1UdIwQY
MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt
NWY3MTNkZmZmMTE0LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0
LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyHMCAu8
+oOlf3xJIF+uyQZyT9PFJCJ1sYvRmZviDql05xFFkRNcEoj7PxXH+eSvQlACaF3h
WyKKvgOpeZtTEsID0fbTexUzN5R9DR0+wcaMv8LSID4RKDFLoXlTUtBNaa+tRmTu
4+H0eMfXJToIh9ZGSvI+t/e6RebrqTmAHLO0DR2s3pja3iI+Yz2QNEBaN1ME59bz
jT5+fN6QDVhWynPCtjuzfEOMj+uyvmBNMyQKnr72NcD0iBj+i40syWqsTDUab4D5
MjhS17GLcXZe3FLacOIyxdHtbSgaCtpQq/iWazxW8IcNYbSVvG3dTNOC23P6zGhO
FYzBWn9pQ/Pomw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:52 2025 by rpki-client