
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: W58PdHCZaCyl5k8ucpFj0ybrGblbc8LuangWuZ3px2c=
Subject key identifier: 5C:C9:7F:1C:93:FB:D6:30:67:C8:3F:66:76:0D:67:54:AF:6B:EF:FC
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 01975B37BD0B9F47A8AEB7AC07D837723177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0F45
Signing time: Tue 10 Jun 2025 19:01:08 +0000
Manifest this update: Tue 10 Jun 2025 19:01:08 +0000
Manifest next update: Wed 11 Jun 2025 19:01:08 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: CO4On5hL81qgvRj6acZfhniXHeqqgVo4ukEi9pZOduI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:bd:0b:9f:47:a8:ae:b7:ac:07:d8:37:72:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Jun 10 19:01:08 2025 GMT
Not After : Jun 11 19:01:08 2025 GMT
Subject: CN=5cc97f1c93fbd63067c83f66760d6754af6beffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:af:2f:42:19:ab:6f:05:d4:83:7b:8d:84:
3c:eb:fd:8d:df:15:26:75:35:4a:62:fc:fc:dd:75:
7b:6e:0d:38:89:cc:a4:8a:02:5e:41:a3:18:ae:88:
61:99:5a:c9:51:16:8f:7c:61:35:02:10:ae:da:99:
ad:55:8e:ba:66:d1:1a:99:5b:ed:78:f8:94:f7:03:
5d:1d:ef:92:01:2d:e7:8f:e5:58:79:95:04:5d:f6:
c6:dd:57:af:42:c4:77:a8:ca:79:13:35:06:2d:ef:
a0:c4:63:9e:c9:fd:f5:88:aa:d1:fe:f3:ba:af:77:
46:a6:6b:bb:24:32:3e:c9:89:1e:d9:a7:7e:00:94:
48:77:4f:33:90:6e:94:d0:11:90:24:cb:de:a5:00:
0c:0c:61:2d:e0:94:80:47:f3:a5:5f:7d:1e:50:6b:
d4:f5:5c:73:e1:87:4e:86:1f:52:ca:95:f8:01:bc:
8a:3c:2c:07:49:51:ea:d2:63:a1:c3:85:b2:7b:22:
43:45:ce:ce:01:36:cb:d5:a7:e5:8e:7d:39:84:28:
38:d0:dc:4f:82:7e:06:5d:08:1c:0a:0e:16:b5:31:
b6:04:ba:5a:f8:b3:bb:1b:90:8e:82:e0:33:b0:3b:
b8:a5:48:5f:b7:58:e9:d3:b9:6d:f6:8c:ed:8f:82:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:7F:1C:93:FB:D6:30:67:C8:3F:66:76:0D:67:54:AF:6B:EF:FC
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:1d:37:1d:73:ea:57:fa:25:82:c2:77:bf:8e:7f:15:dd:
b2:dd:94:48:80:0c:81:b5:4b:dc:8a:36:18:1d:0e:12:4f:af:
d3:8c:a2:2d:d3:15:a0:e6:10:fa:94:73:62:60:c2:98:72:85:
71:b7:99:45:98:45:50:bd:7b:e3:59:90:b9:47:2a:ce:e3:5f:
44:f0:a6:a4:bc:51:80:f6:8a:cf:31:88:ac:17:00:4a:99:8a:
8e:fa:68:23:43:4a:33:00:d5:9a:e3:2a:4b:28:50:30:8b:1d:
2d:cb:0e:65:9f:52:74:1f:32:c2:3f:65:e8:29:eb:45:2f:44:
cf:c1:4d:0d:10:74:7b:4e:25:66:12:c3:40:a6:52:b1:b1:ab:
98:af:2b:fb:2e:81:4e:33:27:5e:14:f3:5e:45:0b:3b:f6:3f:
a7:86:d0:fd:3e:6d:5b:aa:21:9e:b4:24:4d:2f:3e:ea:a1:32:
c2:31:c5:b5:e0:f6:20:f2:fc:d1:1e:46:81:47:d9:fb:1a:5b:
24:d9:75:14:2f:72:d3:93:84:94:92:3e:eb:e3:f4:fe:bf:5f:
02:29:81:2d:86:74:ac:d6:91:ac:9c:3e:76:44:9d:cb:a0:32:
f3:f7:30:91:1d:e2:5f:40:95:0f:e2:bb:84:73:ef:47:61:26:
86:cd:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:37:30 2025 by rpki-client