Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: 5eh35Z00KJRYDWGMccO0hPfB3jczr46VImSiJ6MYE+M=
Subject key identifier: AB:DE:1E:53:F0:81:43:35:9C:C1:CF:B9:1C:AF:18:6F:BE:DF:3D:1E
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 0198D54EAE5E3DD02A72E250E2B3E227FFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 9E
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: tSjHAgNBwVZWddZ6uac9+WU9iDAMW/o0eJbcpbBnuek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ae:5e:3d:d0:2a:72:e2:50:e2:b3:e2:27:ff:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=abde1e53f08143359cc1cfb91caf186fbedf3d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:48:de:c3:a5:5f:b7:54:29:a6:d9:de:e9:
f4:ab:6a:07:b2:b4:de:e7:72:06:78:eb:1b:2d:a6:
70:c7:5a:16:5e:04:42:75:c1:ea:f0:66:13:30:08:
c6:3b:77:a2:70:a8:5e:19:c5:48:a1:c7:ce:02:7a:
a0:86:5d:53:0f:75:51:8d:2b:d8:e3:eb:82:7a:43:
74:97:4a:b8:cd:87:23:c9:9a:08:2b:86:d4:ca:be:
47:f7:99:f5:a3:8e:dd:31:3c:ca:9f:86:d0:b4:6b:
c3:39:b8:ad:31:f2:af:b4:08:68:62:c9:67:7e:3a:
d9:82:21:ea:11:ef:17:9c:fe:07:8c:8e:a2:8c:51:
f0:ee:39:b6:6b:75:f9:99:7a:dc:8d:e5:1e:c3:be:
d3:7e:af:70:e9:b2:f0:ec:f0:26:b2:8f:c0:9a:86:
2f:42:ef:aa:6f:fb:16:f1:9b:c9:73:34:45:43:5b:
37:df:6c:27:71:7a:65:95:e3:d5:eb:a7:fe:95:49:
94:ee:80:db:29:32:99:68:92:9d:9f:16:e6:18:f0:
15:e9:70:e5:8e:f4:2a:b2:de:86:de:65:de:c4:3d:
b3:39:e9:01:14:f9:23:f3:23:a7:3d:18:59:8a:de:
b5:fe:57:78:01:24:26:8e:48:9b:a0:90:bd:fb:87:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:1E:53:F0:81:43:35:9C:C1:CF:B9:1C:AF:18:6F:BE:DF:3D:1E
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:d1:5c:41:43:08:cf:89:31:f0:bd:a9:1c:cd:5b:d2:3f:
ee:61:f3:bd:8e:b4:9f:66:99:79:0e:8a:8b:79:0e:30:d8:d4:
30:d1:1d:59:8b:17:0b:47:75:27:7e:a5:af:27:3a:eb:eb:56:
a0:7f:6a:3c:bf:7c:23:81:ae:5a:76:34:ee:29:1c:1a:0b:68:
b9:8b:2a:e5:f0:54:f5:94:0c:b5:b3:0b:81:91:8d:a9:79:d1:
9e:48:00:02:50:04:5a:09:8e:5c:b3:ea:32:5d:87:d8:b2:0d:
df:f2:3e:f8:55:04:a6:33:bb:dc:df:10:74:65:07:20:3e:e6:
13:6e:0e:5e:dd:a4:11:36:59:c4:95:9d:44:6a:fd:2c:0b:46:
cb:5f:38:61:ce:8a:3c:34:c2:06:6c:19:66:96:7e:09:76:c9:
90:51:b4:07:90:85:ff:e4:a4:40:71:56:71:09:da:d4:a3:41:
96:b4:87:60:a7:7a:87:6f:e0:b4:ba:2d:09:ed:43:ea:f8:7c:
93:99:eb:85:d2:e0:6f:e1:7e:10:bf:22:ab:29:7b:0e:0d:9d:
0a:8c:80:e8:06:b9:c8:3e:b3:cd:c1:be:b0:37:28:2e:69:97:
db:63:be:69:75:3c:e9:c0:75:6a:e9:86:04:35:f8:e6:1b:3b:
91:4a:64:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTq5ePdAqcuJQ4rPiJ/+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjUwODIzMDUwMjQwWhcNMjUwODI0MDUwMjQwWjAzMTEwLwYDVQQD
EyhhYmRlMWU1M2YwODE0MzM1OWNjMWNmYjkxY2FmMTg2ZmJlZGYzZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX5I3sOlX7dUKabZ3un0q2oHsrTe
53IGeOsbLaZwx1oWXgRCdcHq8GYTMAjGO3eicKheGcVIocfOAnqghl1TD3VRjSvY
4+uCekN0l0q4zYcjyZoIK4bUyr5H95n1o47dMTzKn4bQtGvDObitMfKvtAhoYsln
fjrZgiHqEe8XnP4HjI6ijFHw7jm2a3X5mXrcjeUew77Tfq9w6bLw7PAmso/AmoYv
Qu+qb/sW8ZvJczRFQ1s332wncXpllePV66f+lUmU7oDbKTKZaJKdnxbmGPAV6XDl
jvQqst6G3mXexD2zOekBFPkj8yOnPRhZit61/ld4ASQmjkiboJC9+4cYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKveHlPwgUM1nMHPuRyvGG++3z0eMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfjRXEFD
CM+JMfC9qRzNW9I/7mHzvY60n2aZeQ6Ki3kOMNjUMNEdWYsXC0d1J36lryc66+tW
oH9qPL98I4GuWnY07ikcGgtouYsq5fBU9ZQMtbMLgZGNqXnRnkgAAlAEWgmOXLPq
Ml2H2LIN3/I++FUEpjO73N8QdGUHID7mE24OXt2kETZZxJWdRGr9LAtGy184Yc6K
PDTCBmwZZpZ+CXbJkFG0B5CF/+SkQHFWcQna1KNBlrSHYKd6h2/gtLotCe1D6vh8
k5nrhdLgb+F+EL8iqyl7Dg2dCoyA6Aa5yD6zzcG+sDcoLmmX22O+aXU86cB1aumG
BDX45hs7kUpkMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:15 2025 by rpki-client