Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: Pej2kGeFi+Xbk/YN8KcTS4M/IbqIh9RkN6fqWSOsL+Q=
Subject key identifier: 5A:52:36:2C:79:47:41:B9:2D:19:D5:C3:26:EE:17:E7:13:07:02:77
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 019A73A69504E0C94E6AFD3A6FC2991EDB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 0564
Signing time: Tue 11 Nov 2025 16:01:28 +0000
Manifest this update: Tue 11 Nov 2025 16:01:28 +0000
Manifest next update: Wed 12 Nov 2025 16:01:28 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: J7XcIiP1slEsITTa5vn2TxNb6+DedMatfkAldrzkAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:95:04:e0:c9:4e:6a:fd:3a:6f:c2:99:1e:db:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Nov 11 16:01:28 2025 GMT
Not After : Nov 12 16:01:28 2025 GMT
Subject: CN=5a52362c794741b92d19d5c326ee17e713070277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:0a:ab:5d:71:0a:90:c9:24:26:c1:d1:11:
95:c4:45:bf:22:70:10:09:7d:c2:78:d3:dd:84:b9:
22:00:e3:32:f3:71:4b:01:3e:c8:39:26:ba:b8:0e:
e4:b7:b0:45:a9:43:16:f1:77:bf:07:06:91:22:ff:
da:32:06:dd:bd:eb:48:b8:c4:a6:5d:e7:dc:f0:8a:
ca:42:5c:91:c0:93:9d:a9:51:27:ac:97:eb:1b:72:
fc:44:bb:13:00:bf:37:c6:19:94:25:5b:b6:a8:35:
06:ab:96:1d:b9:24:e8:c6:f9:47:32:d1:a3:2a:92:
d1:54:01:f2:51:03:bc:47:dd:39:ef:03:e0:ae:2e:
2d:a5:55:b5:af:a3:14:a8:6c:b7:35:db:c8:56:e1:
83:c4:17:01:48:d1:23:d7:52:f9:07:88:e7:a9:41:
36:16:e0:8b:5b:f2:48:93:47:81:50:90:c0:02:43:
83:a7:66:8f:ab:a9:7b:e7:2a:4f:9c:df:a7:4e:48:
9e:35:77:55:09:f3:06:5a:22:0b:93:d3:8d:5e:91:
84:2a:7d:3b:12:32:8d:5c:6a:b8:74:c4:ca:3e:9b:
42:b3:4c:a9:0b:7c:14:2c:c7:38:e7:cb:0e:a9:54:
33:36:2f:ec:3b:f1:0d:55:d7:d1:85:97:aa:f7:6f:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:36:2C:79:47:41:B9:2D:19:D5:C3:26:EE:17:E7:13:07:02:77
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d8:07:21:5c:23:b7:79:e1:e8:32:41:3d:a5:30:99:42:f7:
43:55:e0:02:64:ee:2b:cd:08:c1:c1:ea:e2:0b:c3:33:9f:73:
5f:f7:4b:0a:69:3a:48:ce:60:db:5d:66:50:25:82:62:ab:77:
94:c2:9b:66:84:c6:3b:e8:0b:8a:ab:a7:bf:ad:0f:1a:c0:40:
a5:af:2d:b9:88:53:64:29:83:31:19:4f:c1:92:94:4b:ea:f2:
9c:6a:33:1f:12:5e:c5:af:a1:58:24:a6:1b:7e:d1:f4:f8:92:
a0:01:e2:6f:66:1f:05:51:30:01:c6:60:8c:0c:7b:22:1b:9f:
97:a0:1f:9c:fd:54:35:b1:87:97:9a:93:69:b9:e0:5a:32:57:
ed:7a:6b:c9:3b:ff:37:e6:0e:ca:37:03:b4:a6:5a:f9:6e:57:
c6:1c:63:c3:26:02:e3:57:c3:4b:37:f0:3c:ce:10:9e:cf:8c:
7d:3c:b9:c3:6c:9f:ce:de:e4:70:14:d0:33:9d:6f:a7:81:1a:
e7:1e:2c:6c:3a:54:ae:d2:67:56:5a:37:77:10:7e:1c:88:16:
3f:89:6f:22:8d:2b:0e:63:84:05:f4:5f:b4:65:fb:f1:8b:1c:
9f:a8:33:49:b0:74:94:d5:44:91:47:de:77:76:3a:af:82:5d:
19:25:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:07 2025 by rpki-client