Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json)
Hash identifier: KcMqCXnAwuQbP4Fw+Wy2efcBEHGSHVzUPfCwjTBhPcE=
Subject key identifier: FD:D5:00:BE:85:5E:AA:99:BD:B9:0E:B2:84:02:61:3A:2C:DE:25:0E
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial: 019921E7BCFF4EE69DAD5E6E0783020A7613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
Manifest number: 0B01
Signing time: Sun 07 Sep 2025 02:00:59 +0000
Manifest this update: Sun 07 Sep 2025 02:00:59 +0000
Manifest next update: Mon 08 Sep 2025 02:00:59 +0000
Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=)
2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: nfkqYqh40Xg80FLsEJsu2i8EsfnLEc7eBt5a/OEscEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:bc:ff:4e:e6:9d:ad:5e:6e:07:83:02:0a:76:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Validity
Not Before: Sep 7 02:00:59 2025 GMT
Not After : Sep 8 02:00:59 2025 GMT
Subject: CN=fdd500be855eaa99bdb90eb28402613a2cde250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:4f:7f:34:f1:e4:1b:57:2b:f2:d2:80:6f:
5a:45:b3:70:b6:59:bf:c4:b4:b2:43:7c:07:70:d2:
75:7e:70:cf:5c:ea:bb:75:1a:58:84:1a:81:30:1d:
41:0a:1a:cf:ee:ac:a0:47:59:ae:70:b2:f6:94:d7:
56:d6:34:ff:fa:1e:64:f8:8f:c1:61:57:7f:bd:16:
c3:0b:d7:8d:d3:d0:f5:86:5b:df:11:84:88:04:f5:
bb:ff:1e:82:68:2a:4a:76:12:e3:77:00:55:64:37:
a4:a1:69:74:71:be:62:e3:94:a5:72:c0:a6:17:eb:
10:0d:48:dd:c1:28:f7:e9:a2:fc:c4:ac:e8:57:ca:
18:78:4b:0d:97:78:7a:46:bb:b4:af:56:5e:33:04:
1e:0f:25:f6:4c:11:c3:ab:3b:42:0c:0f:ce:0b:e6:
6a:df:4e:63:b0:29:fb:47:2f:1e:a0:29:cc:d4:dd:
c0:4d:a2:e0:c5:87:5e:59:cc:a2:29:6e:2a:14:43:
fd:bf:d3:7f:e1:ba:a2:a8:92:57:3d:c1:3b:31:e0:
14:df:9d:cb:17:9d:a5:9e:35:19:e6:89:fd:03:9c:
19:0c:be:75:1e:5c:78:8f:6a:02:35:8d:e0:1a:bb:
57:f8:8e:4a:86:1d:1a:fb:8f:5c:0a:5e:1e:64:be:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D5:00:BE:85:5E:AA:99:BD:B9:0E:B2:84:02:61:3A:2C:DE:25:0E
X509v3 Authority Key Identifier:
keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:15:0d:c8:89:23:75:41:75:4f:55:7d:b5:b8:74:9d:bd:10:
6e:c9:ea:ac:1a:a9:0c:dc:a7:c6:bd:a6:ed:44:32:bd:2c:a2:
fb:81:98:00:59:57:12:21:f8:b3:e5:a9:53:10:1e:d0:ba:ee:
a9:48:ac:3a:6e:a1:5b:1b:7c:c0:03:63:18:58:d0:e7:af:23:
89:26:57:05:6d:31:4d:0a:cd:32:9d:c1:41:63:c9:0d:3b:75:
e6:24:dc:5c:ca:8b:b1:a4:be:a1:57:1a:8a:f0:8f:1f:32:cc:
eb:37:a3:4f:b3:78:4b:60:67:9f:8a:fa:78:5a:9f:31:40:2c:
2d:82:11:41:64:56:f4:90:d4:4c:3b:af:de:7a:94:ad:e5:97:
c3:1f:7f:35:ec:9e:6d:6e:e1:c9:8b:69:ef:5f:5a:e1:b8:3d:
f3:9c:91:7f:66:a1:ff:a6:3e:bc:8b:c9:54:d6:1a:1b:a4:e6:
bd:84:af:fc:da:a0:a8:39:a4:fb:e8:ca:22:74:13:59:28:c4:
b8:71:c1:5c:54:ea:a9:9c:46:e4:44:f9:9d:ca:2a:f1:98:1c:
e0:46:7b:74:80:f9:15:d7:a1:ae:be:6c:d3:02:e1:3b:95:e4:
a5:1b:f6:48:e5:fa:f2:b1:48:d6:af:b4:52:6c:ef:70:01:b8:
64:2a:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:21 2025 by rpki-client