Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: k1RzXiQv20rIt0s78BWgGlLARbD0+tom7sjtoA7rQsA=
Subject key identifier: 2E:1A:58:2C:8D:52:1D:48:96:CA:1F:32:89:C7:0D:88:25:CC:7B:88
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 0198D65F0AA5C48715A363B1A3547769E77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 048E
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: aLKqjx4TmWUdws3KWtPRWhuQcfj8TDcw34IzUljb0WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:a5:c4:87:15:a3:63:b1:a3:54:77:69:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=2e1a582c8d521d4896ca1f3289c70d8825cc7b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:bf:b4:09:e8:b5:8d:76:73:d5:ab:dd:eb:
3b:55:db:11:2d:b2:11:9a:15:e3:55:2d:87:35:80:
8f:2d:17:1a:53:b1:e9:f1:7b:09:6a:fb:3f:9a:d3:
c1:64:12:01:3e:a2:49:4d:18:ad:19:25:50:5c:8a:
66:5a:ab:1f:ee:86:96:be:b8:25:95:4a:a0:5a:aa:
d8:bd:79:38:16:bf:2d:10:78:0a:86:1b:8f:57:b0:
6b:2e:3e:fc:3e:9d:57:5d:42:a6:a2:b4:6b:d9:8b:
7f:e4:25:d2:d9:7d:15:2f:38:69:96:5c:59:1c:e8:
cd:69:76:d9:e7:d8:61:ad:bf:1c:45:91:56:15:17:
48:47:2a:64:90:7f:b2:6e:dc:e6:d6:57:c0:36:40:
d3:fc:ef:a2:b1:1b:fa:85:1e:8a:bc:d6:0b:4f:ce:
ec:e0:aa:e7:ef:5c:f6:bc:14:51:9d:32:4d:7e:7a:
30:d6:83:d1:83:2a:df:60:a6:43:ea:41:0c:9a:07:
7c:e7:ae:ec:2d:6f:75:de:25:1b:b2:2f:e5:5a:50:
c2:f7:ba:c7:7d:c3:6f:56:dc:5c:3a:12:66:9c:26:
b0:af:ab:cf:dd:44:20:d5:d6:3f:33:70:6c:6f:d0:
58:5a:98:a7:ad:66:01:2e:d0:1e:5a:9f:1d:21:54:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:58:2C:8D:52:1D:48:96:CA:1F:32:89:C7:0D:88:25:CC:7B:88
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:5a:16:01:8d:d2:b4:74:18:d2:5e:37:8e:15:f8:f7:46:
e8:36:de:bf:71:f0:83:25:9a:f0:aa:92:19:9b:c7:18:d2:4c:
b9:7a:f3:ba:fe:89:ca:a2:5a:82:d5:b1:26:de:b3:9d:fa:5c:
2c:b4:d6:81:47:15:f1:e9:1a:4a:3d:76:ef:67:c8:c9:8a:e0:
ff:4a:a2:d7:0c:76:6c:56:e1:bd:a0:da:16:ee:f0:15:7d:65:
1e:a0:59:26:56:bb:ce:aa:61:df:08:80:34:e4:60:e7:60:fe:
6d:a2:26:28:f7:86:7e:df:8f:71:9d:1b:ea:3f:bd:6e:f1:6d:
1d:38:01:fb:5f:52:9a:eb:06:0e:4a:8d:93:13:43:75:3c:65:
8b:6e:a1:85:be:02:f6:7a:61:19:07:40:6e:ea:a9:ff:c6:e6:
c9:05:f9:c9:ab:0e:2a:35:dc:03:e1:1b:41:6f:67:aa:2e:4a:
12:39:b3:3f:df:58:b2:96:1a:fb:7d:4f:bb:c1:f6:a1:db:08:
ba:f8:87:07:4c:4e:29:20:2e:d0:4d:e3:6a:2e:41:05:ca:05:
cb:d8:34:20:ac:29:a1:a1:b5:eb:5a:f0:0b:37:37:e7:d3:3c:
aa:93:a6:ee:cb:b2:a6:5a:f7:3f:20:b6:77:db:28:56:71:63:
69:18:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:45 2025 by rpki-client