Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: aAIWJ54FDSb3FKfam5W8jDyVsoJ+o5ShpVQJGcfP9W0=
Subject key identifier: C1:A6:76:DA:2E:7F:96:28:DE:4C:2F:1E:4F:88:47:7D:20:45:86:D8
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 0198496538C628A3B40A53F4F1A52D2F163C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 0445
Signing time: Sun 27 Jul 2025 01:00:27 +0000
Manifest this update: Sun 27 Jul 2025 01:00:27 +0000
Manifest next update: Mon 28 Jul 2025 01:00:27 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: +WWXEm3uQXe8G6CTTPxU5cVAn2Scv42lWXXelSzl0PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:38:c6:28:a3:b4:0a:53:f4:f1:a5:2d:2f:16:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Jul 27 01:00:27 2025 GMT
Not After : Jul 28 01:00:27 2025 GMT
Subject: CN=c1a676da2e7f9628de4c2f1e4f88477d204586d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:fe:d1:4c:34:f1:ad:cd:3a:30:66:0b:f4:
61:a5:c2:9a:98:0a:07:64:74:4c:9f:32:1b:06:5b:
23:fd:1b:b7:a7:b8:1e:93:41:2b:21:df:99:6b:7c:
0f:28:33:71:45:f6:93:e4:57:90:82:c4:58:b1:ed:
32:ff:43:d6:ba:dd:4a:16:f4:61:3a:c6:bd:fe:68:
f6:7e:de:b0:e1:79:e1:7e:aa:e3:ee:a2:1e:df:d2:
76:c7:21:6f:0a:d1:69:30:7e:fd:05:5f:fd:63:76:
01:3b:0e:c8:da:4e:b3:90:03:58:8e:e3:b3:f8:0d:
a8:b2:6c:23:a1:fa:94:f6:f4:1d:45:19:a5:3a:4b:
df:f9:93:9f:f8:2f:ff:bd:b6:e8:bf:f5:88:b2:ca:
63:b0:9a:3a:78:bb:67:a5:9d:49:41:22:e9:54:bd:
1f:b0:e2:55:89:e0:71:1c:45:e6:8e:f8:2b:c5:a5:
a6:53:e2:8a:b8:9c:8c:e9:eb:72:02:13:4c:15:a7:
fa:3c:80:04:c1:7f:95:1c:71:27:a1:f0:07:2e:81:
fa:61:1c:79:28:af:15:47:a5:e0:28:8c:c6:63:68:
80:b2:12:b0:7a:fb:03:16:02:a0:48:d6:cb:06:d9:
24:ec:ab:a9:d4:19:83:25:ca:d6:5e:86:e1:3f:cd:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:76:DA:2E:7F:96:28:DE:4C:2F:1E:4F:88:47:7D:20:45:86:D8
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:51:56:a2:4f:55:c6:bc:a3:c4:41:da:27:4e:d8:cf:12:5e:
1b:15:89:b5:95:71:01:17:57:be:35:91:b8:52:a0:5f:8c:f6:
45:8c:3f:49:82:ca:d7:97:d0:8e:70:2f:80:bc:a4:f0:75:e7:
89:32:a7:6a:7d:0f:c5:9f:16:f3:da:08:ca:89:52:60:03:23:
98:1b:ea:31:72:d3:c0:50:5a:ac:c9:31:0c:b1:78:dd:71:ff:
de:50:dc:c5:24:6c:9e:2f:5b:42:42:a9:10:4a:b9:70:93:16:
8d:ea:34:cd:ca:15:aa:92:fa:19:75:b8:2e:85:3b:c3:51:4d:
88:a3:41:81:d5:c7:11:9d:2a:6e:9c:e8:eb:d9:11:10:67:62:
8f:8f:cc:33:ba:2a:13:27:8f:86:44:be:16:55:5c:56:3e:b9:
96:c2:5b:e0:d3:1d:c0:71:4e:54:e5:83:d4:54:f0:a0:5d:fd:
ab:5e:9c:16:88:d2:49:5f:7c:f8:33:69:ff:39:b3:84:3b:16:
0d:87:62:6a:76:c2:67:d9:7d:ce:bb:ba:74:20:93:6f:c3:6a:
e3:92:03:79:da:4c:04:a9:cc:8d:c3:13:dd:a1:0c:18:b1:8a:
69:cd:cc:e9:f1:2e:1b:a6:31:54:4f:b9:b1:2f:d3:91:92:4f:
95:0c:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:57:34 2025 by rpki-client