Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: nqexnhkB9ZeTXvKe5em1LIopPkJUVPa3sMwxK8ZgHOY=
Subject key identifier: F3:A7:2B:FA:A8:26:CB:B5:10:95:E8:B6:F9:C5:C9:B3:FD:12:15:82
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0198D7A939AEAD0F6ACECBAB9A0249C1FDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 100A
Signing time: Sat 23 Aug 2025 16:00:48 +0000
Manifest this update: Sat 23 Aug 2025 16:00:48 +0000
Manifest next update: Sun 24 Aug 2025 16:00:48 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: UJ/rmo+mIzyvvMrJvLM3UNj3T31TuNy6i7qHq9wr//k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:39:ae:ad:0f:6a:ce:cb:ab:9a:02:49:c1:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Aug 23 16:00:48 2025 GMT
Not After : Aug 24 16:00:48 2025 GMT
Subject: CN=f3a72bfaa826cbb51095e8b6f9c5c9b3fd121582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:45:04:6c:58:71:63:01:00:54:44:5d:37:
c7:1e:b6:55:c3:00:42:d2:0d:2b:3b:89:cb:cc:d5:
2c:95:08:d3:d9:e4:9c:57:10:f0:79:21:00:d1:d6:
aa:58:fb:06:d9:87:e4:12:ef:b6:00:d8:e0:03:77:
48:ca:a6:3e:5d:42:d7:0f:99:8d:d5:a8:ea:f0:92:
fb:f7:41:42:ce:fd:82:4e:96:09:3f:39:2e:5c:52:
aa:e0:18:da:b3:c9:97:ee:65:12:f9:19:30:20:d8:
b0:0d:e6:8d:5e:09:e3:b2:8e:7d:83:53:8d:c9:d5:
cf:56:aa:38:e8:03:cf:7e:16:42:d4:36:cd:fa:2e:
f7:ce:26:35:99:66:7e:e7:ba:c8:bc:7b:09:e5:2a:
6b:00:c9:0a:ea:73:21:f1:a6:0e:c6:0d:d2:76:c7:
97:1e:67:95:c7:d2:c9:42:ba:c7:4f:b7:1a:10:02:
d6:c0:58:73:c4:7c:8b:d1:77:92:b8:71:7f:f8:de:
1c:82:03:9c:72:a9:17:2a:27:6c:7b:31:5d:bd:d2:
bb:14:96:73:e2:02:77:91:34:78:25:8e:be:4b:23:
8e:e8:cb:a7:32:32:59:fc:5b:13:6b:4c:ec:c5:bb:
a7:34:dd:f8:e0:73:f2:ae:80:75:1c:82:31:17:9e:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:2B:FA:A8:26:CB:B5:10:95:E8:B6:F9:C5:C9:B3:FD:12:15:82
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:a1:0f:d9:2e:f8:e1:58:92:5c:15:91:b9:95:95:b8:30:
04:22:c3:15:88:04:77:2e:8e:e8:ef:d4:94:95:94:58:65:41:
65:f4:01:34:16:01:2a:e9:e7:d6:ff:36:fb:da:5b:8f:74:c0:
de:e3:04:65:51:89:a3:ae:22:30:32:ea:89:22:3a:de:bb:39:
af:ab:54:23:19:4f:5d:3b:d1:31:2f:1d:f9:dd:17:b3:ac:c1:
3a:50:15:75:50:8d:84:66:c2:99:8c:c6:0e:b1:24:a4:43:d4:
d8:63:50:7f:3f:4a:8b:46:a2:99:a0:4a:53:e4:a8:3d:a3:13:
19:90:66:07:02:69:69:dd:a6:d7:2b:5f:8e:79:26:04:7e:56:
28:d4:6d:b5:22:b7:62:71:fd:09:99:2a:fe:37:60:11:61:fc:
a2:ab:10:13:e5:7b:49:9a:d8:0f:a7:20:ac:7d:a3:2b:31:07:
69:6f:40:4b:26:ec:0f:72:71:3a:8b:fd:3e:dd:df:3b:ce:01:
1e:d7:9d:95:74:20:12:f2:8d:cd:9d:48:3e:49:fa:08:d4:0c:
32:32:0b:7d:32:2b:8c:af:cf:2d:26:83:a3:e0:de:5f:b1:0b:
0c:6b:62:66:24:11:26:57:e2:25:a5:f2:0d:53:42:3c:0b:29:
cd:f3:b2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqTmurQ9qzsurmgJJwf3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh
OTRkNzgwHhcNMjUwODIzMTYwMDQ4WhcNMjUwODI0MTYwMDQ4WjAzMTEwLwYDVQQD
EyhmM2E3MmJmYWE4MjZjYmI1MTA5NWU4YjZmOWM1YzliM2ZkMTIxNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmlFBGxYcWMBAFREXTfHHrZVwwBC
0g0rO4nLzNUslQjT2eScVxDweSEA0daqWPsG2YfkEu+2ANjgA3dIyqY+XULXD5mN
1ajq8JL790FCzv2CTpYJPzkuXFKq4Bjas8mX7mUS+RkwINiwDeaNXgnjso59g1ON
ydXPVqo46APPfhZC1DbN+i73ziY1mWZ+57rIvHsJ5SprAMkK6nMh8aYOxg3SdseX
HmeVx9LJQrrHT7caEALWwFhzxHyL0XeSuHF/+N4cggOccqkXKidsezFdvdK7FJZz
4gJ3kTR4JY6+SyOO6MunMjJZ/FsTa0zsxbunNN344HPyroB1HIIxF55syQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOnK/qoJsu1EJXotvnFybP9EhWCMB8GA1UdIwQY
MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt
ZDMzNWMyMDQyNDAzLzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz
LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXm6hD9ku
+OFYklwVkbmVlbgwBCLDFYgEdy6O6O/UlJWUWGVBZfQBNBYBKunn1v82+9pbj3TA
3uMEZVGJo64iMDLqiSI63rs5r6tUIxlPXTvRMS8d+d0Xs6zBOlAVdVCNhGbCmYzG
DrEkpEPU2GNQfz9Ki0aimaBKU+SoPaMTGZBmBwJpad2m1ytfjnkmBH5WKNRttSK3
YnH9CZkq/jdgEWH8oqsQE+V7SZrYD6cgrH2jKzEHaW9ASybsD3JxOov9Pt3fO84B
HtedlXQgEvKNzZ1IPkn6CNQMMjILfTIrjK/PLSaDo+DeX7ELDGtiZiQRJlfiJaXy
DVNCPAspzfOyVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:33:46 2025 by rpki-client