Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: aVU+qR322c7ZgDz6TKMp7u+hBIbGWld1ZH2jeEDSquU=
Subject key identifier: 0E:DA:03:19:80:C7:C4:03:37:49:D0:73:F6:67:D0:32:4F:FA:D5:77
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0199FC8F388778197A9F9EEA973DB6A9DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0472
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: se/2ew08oQlMu8rPutUP9Z7+56FHmhDOlCoN2xuo/ZY=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:87:78:19:7a:9f:9e:ea:97:3d:b6:a9:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=0eda031980c7c4033749d073f667d0324ffad577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:7f:97:26:80:4d:06:14:9a:cb:fc:c8:cd:
a1:4a:4e:cd:57:99:d3:9c:5b:35:39:d4:a9:1e:16:
cc:c7:8e:dc:3f:be:70:f3:f1:00:a4:68:26:70:84:
8a:12:1d:ed:1c:b1:64:21:4a:7e:20:34:46:fe:d8:
60:52:cf:45:e6:e6:bd:48:89:c5:12:0c:71:29:26:
b5:95:a1:1f:e9:54:96:63:27:f4:53:bd:7b:4a:49:
fa:d1:57:25:1e:da:4b:60:63:6f:5e:0a:51:23:80:
22:d9:0e:91:0a:99:3b:97:9d:aa:e0:45:ea:05:ef:
1d:10:c6:38:55:f7:2b:46:06:74:1a:bc:bf:72:a4:
f6:8f:86:e3:d6:d8:7e:6f:40:ed:96:4f:cf:cb:ed:
08:0b:5d:3c:ba:55:d1:86:a3:64:03:42:94:02:e3:
7b:48:8d:ae:16:53:6f:76:17:95:21:37:ba:ad:7d:
d2:06:12:f7:c5:2d:f2:49:28:01:34:7b:f8:0e:00:
3c:38:88:ea:31:e0:f0:c6:4c:26:09:c8:68:49:c5:
44:15:57:77:01:e4:44:dd:05:4b:97:d4:42:41:93:
f6:87:ce:37:31:f7:5b:3e:11:de:98:2a:05:6c:17:
b9:e0:69:5c:32:08:27:93:a8:cf:b5:6b:a2:e1:65:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:03:19:80:C7:C4:03:37:49:D0:73:F6:67:D0:32:4F:FA:D5:77
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:b5:4b:a9:f5:bc:db:1b:be:68:5f:0b:03:86:b3:ee:e2:
fb:93:92:3c:4e:2e:0c:61:bc:73:71:64:fb:80:7f:35:29:9d:
a7:9a:fa:e6:40:e0:d1:6f:64:56:01:7b:e3:9a:be:82:aa:0e:
e6:58:3b:dc:8b:58:04:73:23:4e:08:93:4b:6a:f2:e0:fa:85:
4d:4c:7b:f6:de:40:d9:56:83:e7:30:e0:a4:8e:52:17:98:ef:
4e:fe:75:b0:b2:9c:7c:9d:f1:b1:71:0b:52:c4:bf:0b:05:f3:
82:04:a8:69:f5:85:d8:a7:ec:d5:0b:dc:da:e4:93:8a:d3:bb:
25:ff:74:d3:25:38:16:cd:67:52:28:be:08:f9:fc:e6:f4:0b:
fc:ed:a3:c5:e7:c3:4d:dd:36:0f:65:8d:7a:8f:91:68:50:05:
8a:4b:49:23:b7:f4:f1:da:09:8c:58:92:b4:f4:18:c6:a9:eb:
4f:d6:dd:f0:ad:b2:b9:2f:6b:3c:28:79:ae:f6:61:c8:f1:79:
6a:f1:a3:cd:73:58:8a:65:45:9e:c7:dc:55:0f:8d:46:53:93:
c6:7e:e2:c6:32:6e:9e:5e:46:83:af:b0:6d:8d:3b:9d:57:d3:
36:4d:b8:29:02:8e:dc:c3:04:7f:bf:7c:a1:86:d7:19:7e:13:
1e:b5:22:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:20 2025 by rpki-client