
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: 5t7jVz7p7Bjdz8H1P29moRybhjNw4Shh+hH+/V/O6a4=
Subject key identifier: 12:EB:B1:BF:08:E8:4E:0B:BC:93:73:64:99:B2:21:38:0F:2D:28:AA
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0198499C3E6D6B6C78AF76AD39936F11D91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: QPJliRnWilpEmONO08EvbmWnyspbn4d/x4ljXYUasQw=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3e:6d:6b:6c:78:af:76:ad:39:93:6f:11:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=12ebb1bf08e84e0bbc93736499b221380f2d28aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:63:e2:31:d5:11:de:b4:27:48:47:c3:06:
0a:ac:6e:4b:59:c4:d2:f7:f6:1d:ff:d6:27:20:39:
65:8c:f6:ee:3a:4a:50:1e:0f:50:8f:58:5b:c1:88:
38:09:fd:1a:02:2e:1c:0c:93:65:1c:f8:38:62:b9:
ba:45:1e:e3:8b:e4:af:f6:23:03:7c:6c:ed:72:9d:
c2:c1:b1:50:14:7b:8a:0e:ad:08:df:ad:10:11:84:
b6:29:0d:2e:85:4b:cf:7f:eb:a1:4a:92:d0:7d:d5:
89:cb:38:c4:29:6d:89:af:c9:2b:18:f1:e8:27:43:
1c:03:76:64:04:69:3b:30:09:f3:eb:be:29:b3:32:
71:de:55:ed:4c:6e:4a:43:25:02:a1:e6:9d:a4:ed:
39:3c:a9:32:d5:2f:15:f2:4d:bc:6b:76:73:79:2e:
ea:c4:ca:90:07:11:22:f7:9c:1f:d9:ca:78:00:47:
f1:dc:cf:e1:43:2d:f3:82:f4:82:89:bc:68:ac:31:
67:12:16:8f:31:d9:13:dd:09:f7:51:f1:98:d5:34:
de:91:44:20:ec:da:25:de:e3:37:e6:64:dd:bd:e7:
aa:cc:ef:d2:8f:94:b8:55:94:13:7d:da:89:44:73:
e5:dd:19:a4:47:0f:13:d7:da:4b:7b:68:02:95:a2:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:B1:BF:08:E8:4E:0B:BC:93:73:64:99:B2:21:38:0F:2D:28:AA
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:92:cd:c4:ec:cc:b5:75:26:b0:b1:be:22:62:be:c7:30:38:
3d:9d:2d:51:2e:c1:9b:d7:71:6f:0e:c9:8f:5b:cb:eb:f8:df:
6d:9e:a1:fe:26:c0:da:7b:58:94:69:e9:20:8e:bb:2e:5d:b0:
28:9a:55:7c:3e:42:14:b1:b6:22:53:24:2b:00:98:b1:38:ec:
3b:e6:32:75:e7:77:a9:5b:c0:e7:7b:84:25:fa:f7:e1:28:15:
c4:60:ed:09:5c:aa:f4:40:c3:df:0f:aa:a1:2a:4e:7c:9c:2e:
a6:33:e2:8a:1e:2b:78:b5:93:55:d8:57:00:13:bf:bd:ed:1d:
93:90:a5:28:db:31:81:a0:0b:98:ab:5a:92:1a:40:f8:32:4a:
f5:5c:3d:58:e6:6b:a9:28:15:0d:71:7b:c2:4c:55:ac:31:12:
f3:34:54:2a:3e:c9:20:7e:56:66:76:87:45:d3:9d:87:59:99:
c9:db:d2:3a:96:17:d0:5b:6c:25:13:e5:a0:ea:98:43:d1:c0:
da:55:f4:36:ed:3b:99:fe:d1:31:79:30:65:5d:64:80:da:c9:
a6:9b:11:2b:2d:5e:4b:9d:91:5c:7a:0a:8d:76:ed:31:38:51:
7a:db:21:dd:95:bd:88:ca:2b:b0:c3:3d:1b:0a:4d:7d:20:85:
fb:33:2f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnD5ta2x4r3atOZNvEdkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjUwNzI3MDIwMDMyWhcNMjUwNzI4MDIwMDMyWjAzMTEwLwYDVQQD
EygxMmViYjFiZjA4ZTg0ZTBiYmM5MzczNjQ5OWIyMjEzODBmMmQyOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpj4jHVEd60J0hHwwYKrG5LWcTS
9/Yd/9YnIDlljPbuOkpQHg9Qj1hbwYg4Cf0aAi4cDJNlHPg4Yrm6RR7ji+Sv9iMD
fGztcp3CwbFQFHuKDq0I360QEYS2KQ0uhUvPf+uhSpLQfdWJyzjEKW2Jr8krGPHo
J0McA3ZkBGk7MAnz674pszJx3lXtTG5KQyUCoeadpO05PKky1S8V8k28a3ZzeS7q
xMqQBxEi95wf2cp4AEfx3M/hQy3zgvSCibxorDFnEhaPMdkT3Qn3UfGY1TTekUQg
7Nol3uM35mTdveeqzO/Sj5S4VZQTfdqJRHPl3RmkRw8T19pLe2gClaJWhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLrsb8I6E4LvJNzZJmyITgPLSiqMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJLNxOzM
tXUmsLG+ImK+xzA4PZ0tUS7Bm9dxbw7Jj1vL6/jfbZ6h/ibA2ntYlGnpII67Ll2w
KJpVfD5CFLG2IlMkKwCYsTjsO+Yyded3qVvA53uEJfr34SgVxGDtCVyq9EDD3w+q
oSpOfJwupjPiih4reLWTVdhXABO/ve0dk5ClKNsxgaALmKtakhpA+DJK9Vw9WOZr
qSgVDXF7wkxVrDES8zRUKj7JIH5WZnaHRdOdh1mZydvSOpYX0FtsJRPloOqYQ9HA
2lX0Nu07mf7RMXkwZV1kgNrJppsRKy1eS52RXHoKjXbtMThRetsh3ZW9iMorsMM9
GwpNfSCF+zMvZA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:22 2025 by rpki-client