Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: xCldzDSDNT+Gac+iX2B+0YBeCclKxTwq9KiZowoxYWw=
Subject key identifier: 42:D4:31:B6:6B:8C:CA:42:92:CE:8D:FB:8D:9D:0F:C4:79:1B:9C:82
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 0198D705EC402B3C7477F87D673C920DC6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 03DA
Signing time: Sat 23 Aug 2025 13:02:26 +0000
Manifest this update: Sat 23 Aug 2025 13:02:26 +0000
Manifest next update: Sun 24 Aug 2025 13:02:26 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: zPiKE/KpzGx3x8s10aLsUNjAaOiUOjZ9JROI+0jKJUs=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ec:40:2b:3c:74:77:f8:7d:67:3c:92:0d:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Aug 23 13:02:26 2025 GMT
Not After : Aug 24 13:02:26 2025 GMT
Subject: CN=42d431b66b8cca4292ce8dfb8d9d0fc4791b9c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:c5:8c:42:1b:aa:ad:e1:b4:19:21:ba:5c:
23:a9:47:73:f4:38:9c:06:3e:63:b4:18:9d:c5:6f:
25:1d:8b:60:1d:81:ad:75:75:6c:72:65:ab:95:95:
b6:1e:ad:ed:21:24:e3:52:21:71:c7:78:04:ff:ee:
19:66:a3:80:6a:5a:4f:32:4f:b9:eb:e4:a4:ea:56:
6a:4f:ef:3d:c2:9d:7b:21:26:e8:91:e6:09:1c:c7:
7f:8e:9b:59:2e:99:3b:31:1f:6a:c9:11:c5:d2:d8:
39:d1:d7:79:c5:6c:e2:7c:33:79:60:8c:dc:66:aa:
f2:07:49:84:85:ed:8b:4c:2a:1f:8b:4e:79:31:03:
d4:c1:08:c2:bb:34:49:87:1a:4e:55:47:56:77:f7:
ec:4c:f9:0a:ce:a3:b1:8a:ae:4c:18:75:cc:c8:79:
26:4b:22:33:77:21:e0:1d:4b:5f:82:b6:71:58:22:
45:61:8d:4b:92:d4:91:d9:2d:60:57:7a:11:8c:69:
08:2d:01:6b:fd:38:69:11:60:6c:39:a2:be:e1:b9:
05:d9:74:bc:14:a3:b8:e4:f5:0d:bc:07:1c:f4:1c:
d0:a0:82:06:99:00:37:9c:60:9a:5d:27:ce:32:9c:
50:81:c1:f7:df:eb:3c:56:eb:2b:70:59:cb:37:49:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:31:B6:6B:8C:CA:42:92:CE:8D:FB:8D:9D:0F:C4:79:1B:9C:82
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:db:93:8d:1c:d8:5c:59:29:ed:06:a2:f9:7b:d0:32:95:19:
39:32:b0:e9:8d:a3:aa:f9:8f:18:91:e5:d9:89:af:79:bc:dd:
09:d5:3a:c2:23:e6:cb:46:54:76:85:6c:84:9f:4e:8a:ab:89:
27:4e:b4:bf:47:c1:59:bf:6c:b5:21:c0:a2:fd:41:6c:49:c0:
ce:89:f9:5c:03:60:08:6d:48:40:e6:71:1a:0c:c1:2d:57:c2:
0f:6e:3d:95:7e:af:49:83:c7:ea:b2:62:a2:cc:fa:8c:2f:b3:
7c:f8:72:05:8f:db:81:e0:4f:5d:3a:ef:4e:69:81:c3:a4:6e:
b1:0d:8a:8f:37:a8:5f:2e:4b:0f:1e:fa:76:0b:03:ae:84:22:
db:ac:3a:73:9f:0e:e5:13:e8:da:c8:23:8d:80:43:db:b8:dc:
b0:f8:82:d0:ba:16:ea:65:d6:cd:8d:bb:80:10:68:ee:95:0a:
1d:1b:38:1a:1c:6a:be:d1:5e:7e:21:6a:82:dc:be:f7:e6:d9:
82:a5:51:59:67:0d:0e:0d:7c:b6:36:64:79:b3:e9:c4:b5:2d:
1c:19:cb:fe:61:0d:67:9e:15:f9:6b:7a:71:85:35:cb:1d:59:
cd:b8:40:b2:12:ab:9a:0b:66:d2:15:01:cd:e5:4f:46:f1:3f:
d7:9c:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:43 2025 by rpki-client