Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: QpIFTOptshNRXaI+F2VbwFHxKdSpgYD0FxJnMNlhZd8=
Subject key identifier: D5:F8:82:34:99:78:72:D6:F3:44:C7:27:D8:7B:01:D5:3C:1B:7E:6E
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019922FA24FDABBCF606B5A4119435702D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 1031
Signing time: Sun 07 Sep 2025 07:00:42 +0000
Manifest this update: Sun 07 Sep 2025 07:00:42 +0000
Manifest next update: Mon 08 Sep 2025 07:00:42 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: ubEL3c94DMJGRV6njThd81AZqAiCsEa2hCCCTWZJ2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:24:fd:ab:bc:f6:06:b5:a4:11:94:35:70:2d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Sep 7 07:00:42 2025 GMT
Not After : Sep 8 07:00:42 2025 GMT
Subject: CN=d5f88234997872d6f344c727d87b01d53c1b7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:b5:2d:4b:07:1c:ad:d1:60:e1:e9:d2:60:
ad:40:0d:4d:c7:2b:f4:7b:7c:34:d4:5f:03:8e:20:
4c:f2:02:19:c9:4f:77:ed:82:85:a3:ef:fa:7e:14:
a7:52:d7:c4:a8:7a:8d:b2:c7:50:a7:09:ea:36:96:
a0:d5:c9:71:1a:22:71:5c:f9:71:10:10:70:03:5c:
92:a2:57:69:84:98:3f:68:61:df:55:63:1f:9b:e4:
0e:24:b4:74:8f:7f:38:0b:d0:80:e1:d4:23:35:cb:
58:79:dd:68:cc:74:c3:f1:ae:4f:6b:37:a7:3c:1b:
c7:eb:da:37:3d:59:90:4e:7d:8d:3b:de:ce:c6:2a:
b6:21:73:1f:0d:ca:c9:5b:52:10:d4:cc:c0:40:32:
7e:d2:5a:35:9e:c5:82:7c:8f:72:56:24:6e:f5:a3:
d4:14:ee:9d:de:14:9b:aa:91:eb:91:2a:76:ed:40:
12:51:ce:d2:31:a7:c7:48:33:7f:c3:b7:ec:83:10:
3a:73:3d:1c:bc:68:95:ab:51:d0:71:56:47:81:a4:
a1:42:66:bc:14:d6:07:f5:02:93:e0:d9:be:54:32:
f2:2d:38:09:ba:76:5f:91:31:d1:73:ff:57:48:b5:
56:38:a4:2f:30:c9:0a:82:9e:6e:d9:6d:4c:2c:10:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:82:34:99:78:72:D6:F3:44:C7:27:D8:7B:01:D5:3C:1B:7E:6E
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a2:bd:dc:39:ab:d6:d5:ba:b3:15:7e:48:aa:ed:ab:63:4f:
70:c3:46:20:f7:fb:08:b1:67:e2:9c:0f:0e:60:bd:72:fe:9b:
d7:8b:c0:82:c8:df:40:32:d4:40:4a:40:36:cc:4d:35:46:ea:
de:da:98:c1:ab:81:c7:a9:8d:32:5b:9a:1a:8f:8b:07:f1:f8:
da:70:db:2f:c3:fc:5f:f6:56:be:a4:62:86:4a:e4:fc:5c:69:
08:c9:91:b1:1d:e6:cb:a1:57:f1:c6:39:36:3a:2a:7c:55:78:
fa:33:85:14:3b:23:5c:c8:6d:b3:33:8c:43:5a:ec:f5:77:7e:
42:92:4e:18:8d:55:46:20:e1:82:ee:dc:29:fd:1b:e1:1b:00:
b9:ca:0f:32:4a:f1:d8:ad:e8:b2:55:dd:96:e6:d4:e8:cf:47:
71:17:67:fc:f6:34:af:09:8b:7b:d2:cc:df:5d:bc:88:b2:5b:
05:bc:f6:9d:06:e5:bf:9a:8c:b1:0e:f0:26:90:fb:ca:9a:20:
df:a7:3b:a4:77:43:9c:24:e6:cf:69:90:f6:e6:4f:18:3b:a1:
2f:8c:49:b2:26:d4:20:2d:86:f1:df:e0:2f:23:99:34:0a:0a:
5b:b8:36:41:be:5c:b7:a0:73:3c:e8:d8:ff:69:50:42:15:b9:
35:8a:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client