Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier: ta2XlmMPlM1yl+WX4NLFKdHp/iXBO7jcebGf1kZfITc=
Subject key identifier: 19:23:87:EF:79:05:D2:5C:67:CD:EC:F1:61:FE:10:78:85:68:79:D5
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019922552122C28CF030A33079137938CBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number: 0401
Signing time: Sun 07 Sep 2025 04:00:28 +0000
Manifest this update: Sun 07 Sep 2025 04:00:28 +0000
Manifest next update: Mon 08 Sep 2025 04:00:28 +0000
Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: AQ6MegWaBKrz5LEGwtHJlMN/3xcDR025FrOZmQ2mEKc=)
2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:21:22:c2:8c:f0:30:a3:30:79:13:79:38:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Sep 7 04:00:28 2025 GMT
Not After : Sep 8 04:00:28 2025 GMT
Subject: CN=192387ef7905d25c67cdecf161fe1078856879d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:0d:05:63:fd:59:11:9a:c6:f8:db:95:7c:
61:8d:b2:90:50:86:7f:b9:fd:c0:4f:56:6e:71:c8:
22:06:99:e4:8a:b3:06:07:0b:1b:8d:31:c4:92:74:
19:bd:a4:e3:fe:80:2d:4f:42:99:a5:71:57:50:a4:
55:c1:7b:9c:ad:aa:87:b9:03:6b:90:12:a7:bd:7a:
65:57:72:7d:9d:ca:f0:1b:97:3c:64:2f:da:d2:26:
7b:89:74:b1:67:f9:af:8f:b4:e8:1f:11:cc:8d:75:
d5:82:08:d9:77:2f:cb:98:fd:71:e1:32:31:ef:76:
e7:d7:7c:23:9a:a6:10:6f:fe:a0:9b:dc:97:43:19:
a2:9f:06:06:9e:36:4a:d3:c8:16:fc:3b:be:e6:72:
bb:a0:03:b3:32:9a:30:8b:72:92:f6:31:40:57:be:
26:71:d8:13:06:af:93:97:c9:fb:3a:32:ae:ce:43:
4a:13:74:0c:87:64:3d:5d:fd:67:f2:1c:3c:17:89:
9c:7c:70:9f:6c:d2:e2:60:73:a8:89:70:80:3a:48:
df:5d:96:1e:14:1f:1f:1c:a8:78:c1:a0:3b:9f:3e:
ec:ab:fe:b8:a0:94:18:57:6c:8d:3d:b8:89:e0:59:
66:ec:c7:a3:e8:ea:2d:2d:ec:67:2a:52:b1:f2:4b:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:87:EF:79:05:D2:5C:67:CD:EC:F1:61:FE:10:78:85:68:79:D5
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:a5:04:1c:bc:00:d2:9b:ce:9a:6b:89:fc:4c:47:6e:a0:
25:ea:e6:61:11:5a:72:cd:01:94:21:8c:57:ce:0e:b4:3a:1a:
d9:80:7d:63:db:de:1d:b2:f3:75:b1:9a:f4:36:73:c5:c6:88:
cd:b5:c9:45:7b:3e:d6:1d:98:cd:35:31:1b:07:d3:ee:53:10:
1d:7b:26:fc:c7:d8:78:2e:5c:4b:1c:7b:ff:9f:f6:55:16:c4:
ec:38:b9:93:86:9e:9b:e2:49:c6:46:05:57:17:b2:65:12:bb:
c0:8f:de:36:0d:2f:ba:0b:d7:b7:6b:3c:51:e9:92:46:ce:ec:
b6:24:e1:4f:81:d4:88:e1:12:4f:43:3b:c8:9b:99:cd:b6:3d:
69:7f:99:7e:a3:17:f0:a0:26:1c:eb:68:4e:80:a7:eb:1f:13:
e5:22:e1:5c:3a:1c:71:78:86:97:07:4e:5a:1b:0c:a0:67:b0:
c5:7b:29:cb:b0:76:80:c1:12:4a:3e:21:89:ab:65:f7:c3:72:
31:c4:20:61:be:cc:95:39:a0:6e:1e:b3:ee:68:87:b2:30:71:
04:65:67:4b:71:87:7d:bb:42:61:69:d8:d3:d4:9b:1b:39:a2:
a6:a7:cf:ad:ac:3e:81:12:f1:a7:44:88:71:ec:53:a3:3e:01:
30:e6:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:53 2025 by rpki-client