Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: d/VDm8GUIHQ2o3DzWdySRmqAQc6t7dQ/uhT7U2II7dw=
Subject key identifier: C4:01:61:5E:50:7C:18:B4:BF:EE:D6:9C:81:4B:EC:4C:6E:28:7C:E5
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0199FB461405F8B92D7AB75A070AD71D68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 10A1
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: mCZGk+KMDppC38z9JSbwp3MrZP9+qv5VXyyLrMgp4mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:05:f8:b9:2d:7a:b7:5a:07:0a:d7:1d:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=c401615e507c18b4bfeed69c814bec4c6e287ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:7c:65:20:3b:e5:fe:59:b4:c1:94:94:ef:
7f:bd:03:37:83:16:9c:af:33:33:30:6d:c5:b1:45:
bd:53:7b:51:9b:a8:5b:a6:d4:cb:53:95:2f:a4:a4:
bf:72:24:c5:7d:70:77:89:ab:16:f5:1d:96:63:1f:
37:46:52:64:9d:42:44:1e:db:8c:23:dd:f0:d4:02:
0b:2b:67:6b:90:0c:b9:94:94:87:aa:a1:83:80:e2:
b1:5a:e3:f0:07:4d:61:93:70:fd:ee:8a:8a:8b:0e:
0e:36:71:08:5c:27:80:60:74:b0:73:20:4e:14:61:
6b:59:37:8f:9b:6e:71:65:a5:62:16:55:de:8f:6b:
ee:3f:3f:2b:a5:40:e9:38:e9:d0:5a:5d:8a:87:9a:
1f:c0:a7:06:46:69:11:fc:2e:da:32:f7:7f:0f:63:
09:d7:0d:fe:ea:21:01:b3:9f:53:62:8f:f7:94:e6:
e3:c7:d1:3f:0b:88:de:20:cd:07:8f:f8:a9:5b:59:
0e:53:c1:9c:9a:26:1c:50:c7:ff:67:30:09:69:a0:
1a:e7:9a:be:cd:0d:e2:4b:bd:af:c8:9b:39:fc:44:
75:06:43:1e:dc:58:5b:b3:79:cd:40:0d:0f:62:3c:
52:b6:2b:83:4c:a8:9d:02:80:a1:4c:08:24:bc:8d:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:61:5E:50:7C:18:B4:BF:EE:D6:9C:81:4B:EC:4C:6E:28:7C:E5
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8f:54:3d:06:6a:4f:f3:be:b9:bc:fb:1c:34:a5:6a:6e:2d:
5e:ef:f5:49:c1:f7:c2:3d:62:f9:20:d7:fa:66:93:11:e2:db:
62:7c:0b:f6:14:2b:c3:fd:37:08:92:89:30:17:fe:9f:7a:db:
a4:f6:71:b2:41:75:d5:e9:03:82:2d:f0:4f:cf:47:b7:31:7a:
0b:8a:3a:bf:6f:5a:99:d0:09:f3:04:30:2a:6d:24:9d:de:24:
73:89:60:10:1e:e4:6d:2f:b3:ed:d1:ca:b1:7f:4f:5d:2c:51:
af:f5:a6:44:ca:23:57:1f:21:ff:cc:6c:f0:11:d5:d2:7d:b2:
93:8f:a3:68:12:6f:1c:18:27:bc:59:d8:ab:47:e5:16:4d:34:
06:c5:8b:a9:2e:d1:a9:fc:9d:3c:71:2a:e8:c9:4c:2c:03:0c:
13:93:f5:1d:51:07:38:1a:3d:9b:2a:66:be:20:a6:b6:a0:63:
cd:cc:76:f7:37:3c:da:84:fd:a7:26:13:87:6d:4d:14:a1:4d:
a7:96:0f:b2:e7:4e:35:d0:9d:ff:c9:33:02:ea:64:c1:e2:65:
67:e8:e9:f2:8a:5d:1d:78:c1:ff:2b:79:38:8b:36:99:1e:8d:
5e:a2:d0:a8:0c:02:aa:cd:98:65:97:90:87:35:ff:99:6e:56:
a1:83:f7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:48 2025 by rpki-client