Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier: Uk569BfY6P5arvTUF4Fuj8T2WoAIpx5AvgtwGU6xJlk=
Subject key identifier: 47:DC:E8:67:7E:6A:E4:29:B0:D9:D1:83:AB:34:4F:45:41:A5:31:98
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial: 019848C0C2037DC451D01FA9F01FB155B21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number: 0575
Signing time: Sat 26 Jul 2025 22:00:48 +0000
Manifest this update: Sat 26 Jul 2025 22:00:48 +0000
Manifest next update: Sun 27 Jul 2025 22:00:48 +0000
Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: Ii3XKEHZd8db2G2vYrLB3FnM60r7G3LsFx4+HXfLwxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c2:03:7d:c4:51:d0:1f:a9:f0:1f:b1:55:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Validity
Not Before: Jul 26 22:00:48 2025 GMT
Not After : Jul 27 22:00:48 2025 GMT
Subject: CN=47dce8677e6ae429b0d9d183ab344f4541a53198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:e5:53:f0:22:38:54:a8:d3:61:f6:7f:29:
6a:e4:24:ad:d6:e7:00:d8:4d:ba:5d:2b:e4:d0:88:
03:b0:d1:38:70:3f:07:e8:ec:d3:15:72:41:14:48:
88:d1:c0:4c:1a:8c:f3:95:ec:fc:ec:b6:35:45:56:
43:e8:79:c3:53:98:7f:d6:b7:a4:97:b5:64:0c:a5:
08:92:11:25:d1:c0:81:35:09:0b:89:48:dc:b2:60:
e1:91:59:79:29:47:cb:92:ce:16:b2:e3:f0:e8:9c:
1d:aa:6f:db:ee:a1:3d:31:25:a7:08:79:c6:c0:12:
0b:e9:aa:c6:bd:45:1a:b1:07:18:74:e1:8f:2e:a3:
70:bc:43:1d:51:24:38:88:7e:db:e9:f8:d4:7e:00:
ce:52:0f:cf:c7:82:b0:4f:b9:26:05:e0:96:33:7c:
0a:70:c3:de:a9:76:23:90:39:29:14:71:6c:e9:67:
67:77:56:08:31:7f:02:7e:7d:b2:0e:cf:43:08:10:
33:54:12:35:f9:1a:2d:bd:55:b6:82:f0:30:bb:f0:
ad:b5:2c:b0:36:b1:2c:62:a7:da:ac:c1:05:b3:60:
ee:57:a1:fb:98:30:3d:38:2c:c3:ca:a0:80:2f:f5:
d5:0b:b3:de:5e:91:74:e9:a9:46:5d:d4:f7:68:62:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DC:E8:67:7E:6A:E4:29:B0:D9:D1:83:AB:34:4F:45:41:A5:31:98
X509v3 Authority Key Identifier:
keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:26:3a:45:95:aa:10:59:99:11:f2:af:e0:26:5f:b9:f2:
c6:fd:ef:c8:17:e1:5a:08:94:9d:08:ea:eb:ea:d3:83:18:c9:
df:d5:f7:2b:47:cb:03:cc:d2:38:ca:95:b3:51:d2:19:cc:cf:
f6:e4:b0:c9:30:61:e4:ec:a4:95:07:00:9e:a1:74:28:0e:11:
e4:81:8f:9e:11:f0:f2:f3:42:22:94:05:46:e1:a8:f9:1f:f7:
a7:54:28:c1:57:a8:26:2d:bc:fc:58:ee:ed:97:d2:08:15:02:
8d:8c:cf:a5:bf:fe:75:63:f5:0f:42:1c:c0:8c:45:82:8d:97:
64:64:86:aa:12:3e:87:04:f7:52:37:0d:60:3c:ad:18:2a:e5:
e0:92:74:18:66:52:8f:09:d3:f1:2b:03:d1:28:73:4f:7a:4b:
41:29:0f:73:45:69:92:63:19:09:4c:5a:74:bd:f0:4c:1c:35:
5c:e4:49:9c:75:60:a2:cb:b1:76:4a:2a:97:dd:23:c5:19:e8:
14:5b:f8:f5:65:48:fd:ac:f5:a4:30:14:83:96:05:bb:60:38:
3b:b1:49:c6:56:ea:17:3d:1e:0e:ef:d3:5b:ff:08:a7:61:fe:
89:af:22:39:e3:76:72:54:43:e5:e4:f7:57:b4:6c:16:57:cc:
3e:7c:46:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwMIDfcRR0B+p8B+xVbIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy
MWMyYmMwHhcNMjUwNzI2MjIwMDQ4WhcNMjUwNzI3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg0N2RjZTg2NzdlNmFlNDI5YjBkOWQxODNhYjM0NGY0NTQxYTUzMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMrlU/AiOFSo02H2fylq5CSt1ucA
2E26XSvk0IgDsNE4cD8H6OzTFXJBFEiI0cBMGozzlez87LY1RVZD6HnDU5h/1rek
l7VkDKUIkhEl0cCBNQkLiUjcsmDhkVl5KUfLks4WsuPw6Jwdqm/b7qE9MSWnCHnG
wBIL6arGvUUasQcYdOGPLqNwvEMdUSQ4iH7b6fjUfgDOUg/Px4KwT7kmBeCWM3wK
cMPeqXYjkDkpFHFs6Wdnd1YIMX8Cfn2yDs9DCBAzVBI1+RotvVW2gvAwu/CttSyw
NrEsYqfarMEFs2DuV6H7mDA9OCzDyqCAL/XVC7PeXpF06alGXdT3aGIHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfc6Gd+auQpsNnRg6s0T0VBpTGYMB8GA1UdIwQY
MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt
OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4
LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8omOkWV
qhBZmRHyr+AmX7nyxv3vyBfhWgiUnQjq6+rTgxjJ39X3K0fLA8zSOMqVs1HSGczP
9uSwyTBh5OyklQcAnqF0KA4R5IGPnhHw8vNCIpQFRuGo+R/3p1QowVeoJi28/Fju
7ZfSCBUCjYzPpb/+dWP1D0IcwIxFgo2XZGSGqhI+hwT3UjcNYDytGCrl4JJ0GGZS
jwnT8SsD0ShzT3pLQSkPc0VpkmMZCUxadL3wTBw1XORJnHVgosuxdkoql90jxRno
FFv49WVI/az1pDAUg5YFu2A4O7FJxlbqFz0eDu/TW/8Ip2H+ia8iOeN2clRD5eT3
V7RsFlfMPnxG6w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:53 2025 by rpki-client