Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: 9znDEKTDMk6PyJild15Fhm74Uq68DNdd2OoLcj3e7mc=
Subject key identifier: 96:A9:FF:2F:95:72:AE:83:BF:F7:90:10:DC:12:25:28:6A:8B:AA:C1
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019A7112D8CCB26CE840D3A423C1815E6D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 10DE
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: Utp+ICKtj2Ixexptuq2+7ZMLUURQu8Rfdifl1gns+nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d8:cc:b2:6c:e8:40:d3:a4:23:c1:81:5e:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=96a9ff2f9572ae83bff79010dc1225286a8baac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:fe:26:f1:46:c2:c4:e7:10:a8:de:93:e8:
38:44:62:fd:28:db:79:59:dd:37:64:3d:b4:e5:f9:
b5:95:be:e3:48:6a:22:df:31:97:9b:21:e9:0a:93:
71:a7:02:9c:36:65:5f:48:b8:23:63:cc:b6:c8:c4:
80:3e:d6:b5:7b:01:f1:78:ab:38:37:ec:f1:ae:ff:
b8:39:b9:a4:6f:24:11:ef:2f:7e:51:be:f4:66:dd:
8c:20:50:a2:c4:f8:ca:fd:c9:2c:8f:93:fb:51:18:
b4:c3:eb:f7:4e:f9:7e:32:d7:22:d5:1b:99:81:47:
95:0a:76:ca:c6:4d:4b:a7:21:97:d2:19:82:8c:9d:
9b:9d:fa:e6:37:2b:15:98:dd:c1:51:dc:51:2c:03:
47:b7:4f:bb:8c:b6:26:77:f7:60:db:83:0d:f0:eb:
a5:68:db:73:21:a0:96:95:6b:0b:01:a6:10:54:3a:
e0:b7:60:e0:9f:d9:c3:b9:cf:22:34:c4:cd:fa:e3:
55:d4:59:3c:73:9e:1f:9f:98:d5:7b:3b:64:84:26:
12:67:1f:49:20:50:b9:88:c5:a6:5c:5e:b2:2d:28:
8e:bc:d7:11:8d:a3:16:b9:7c:7f:72:8c:55:90:7d:
7f:ea:77:1e:4a:6c:99:9b:1d:d8:e8:c7:2f:51:a6:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:FF:2F:95:72:AE:83:BF:F7:90:10:DC:12:25:28:6A:8B:AA:C1
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:7f:85:80:5a:96:fd:63:ce:0f:48:52:3f:4d:b8:80:ab:
05:98:ca:81:1e:a9:c4:b9:e8:6a:c3:6d:fc:0d:43:4d:9d:6e:
69:48:39:f8:84:d7:64:1c:c1:e6:d9:af:52:51:90:a9:57:b7:
1c:37:cd:68:02:0a:de:43:41:7f:82:90:63:3d:2d:9f:fb:2a:
61:e7:2b:e2:5a:51:d3:9a:cc:9f:dd:9b:e8:ae:f8:d5:8b:13:
17:ed:c6:d1:97:f8:c4:5a:21:e2:61:a6:bd:f2:09:36:db:95:
14:4f:55:9c:b4:8a:cc:f4:67:8e:16:5e:b7:4f:1a:71:25:11:
80:ce:d2:4c:64:81:3a:ee:51:6f:1c:96:2e:46:12:d2:7d:a5:
0c:57:e2:fc:d5:19:6f:a8:5c:7b:e7:9d:a1:4b:f1:05:1a:2b:
0f:b0:04:3f:d7:a8:64:e3:fe:e2:a4:8c:44:61:ad:c7:5e:a6:
ee:68:99:42:a3:1a:f2:e6:b2:7a:f4:4f:78:8b:cc:96:56:df:
8b:63:ec:6d:98:d1:1c:27:3a:30:ec:d2:44:53:3e:ee:6f:85:
fe:c4:8e:6d:bc:62:47:e6:51:65:56:7b:63:a7:5e:f1:ba:4d:
5b:e9:01:0b:f1:fd:f7:b2:57:f6:06:d7:7e:a9:98:8f:84:44:
71:7b:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:34 2025 by rpki-client