Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: KMwKP8ek4K5JhcwYsM0ar4XnV7MY/89zIleLQumWg7w=
Subject key identifier: AA:AF:55:FC:6C:85:A3:26:30:A8:92:5A:BD:8D:E6:BA:90:D1:EC:FB
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 0199FBEB1E4F67412C721D1ACC7AACB04866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 0526
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: QYZEXMkXt8+fUQOi44rX594dCHhrZtIBO2oY4or1FC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1e:4f:67:41:2c:72:1d:1a:cc:7a:ac:b0:48:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=aaaf55fc6c85a32630a8925abd8de6ba90d1ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:36:45:c9:56:93:ba:d9:99:1c:db:61:b9:
ea:4b:80:2e:8a:42:97:cb:70:1a:12:7c:28:2f:13:
63:e6:b0:08:eb:dc:98:74:c8:22:c8:db:b7:4e:cf:
50:64:18:4d:2a:21:27:d6:5b:23:e1:52:c4:47:ab:
f0:fe:da:8f:9e:16:1f:88:59:a8:0c:50:19:10:14:
fb:d5:08:fb:f0:fc:40:3d:fa:bb:ab:56:68:98:2e:
be:1f:89:45:c0:81:38:b7:50:df:2e:96:ab:aa:23:
bd:1a:2b:09:44:a8:a6:f2:ee:7d:12:74:cd:6c:31:
39:a1:80:76:37:89:44:0f:12:4f:1f:a0:a4:31:fb:
5b:74:15:23:c3:c3:8e:ed:e4:bd:64:63:b6:26:be:
90:05:7e:12:8c:cf:f7:ff:68:34:b3:b2:5d:96:03:
8e:f0:dc:1f:94:d3:ac:88:53:8d:21:6e:7d:14:81:
0a:30:28:21:03:cc:1c:2f:d3:e8:d3:68:e0:dd:76:
84:f5:3c:1d:17:d8:e3:91:6d:3c:53:92:c8:5d:41:
85:36:9b:01:14:3d:9d:c7:d7:ac:6c:18:09:4e:92:
a8:c7:7c:75:29:e9:25:3d:97:78:c7:b5:28:c3:29:
9a:18:8d:9c:98:84:cd:13:b2:a4:91:f2:c9:9a:a0:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:55:FC:6C:85:A3:26:30:A8:92:5A:BD:8D:E6:BA:90:D1:EC:FB
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:79:c9:d9:97:98:f0:c3:ca:b1:f4:cb:a1:97:d8:5d:4b:b9:
e5:bb:0f:7d:df:91:68:d3:36:73:6f:ed:19:3f:6c:3b:5d:65:
61:58:72:d6:4a:14:46:3c:8f:9a:ba:63:e3:fc:1d:d8:24:90:
2b:09:bf:0f:14:63:44:45:cb:35:1a:c9:46:60:69:04:9f:0f:
91:77:20:43:a3:d7:a2:0c:17:f0:cf:e1:71:ac:5d:43:78:fe:
d0:21:7b:f9:bc:00:41:57:00:13:43:ac:61:34:a0:47:94:08:
04:50:50:e6:31:d0:51:67:80:69:83:0b:3b:e3:80:65:09:76:
d5:d1:2e:64:ca:f1:cb:5c:21:dc:23:c1:42:eb:4e:d9:e4:b9:
9a:22:09:a0:01:31:d3:78:6e:5c:cd:35:3a:c2:1a:f2:ff:c9:
81:c4:df:a5:1f:40:a6:a7:16:62:1a:2e:fa:ff:c8:4d:6b:43:
13:d5:fa:d4:55:84:a0:0e:bc:9c:6b:e3:87:f2:46:dd:f9:b8:
00:4b:0f:c7:b7:55:17:fd:37:e9:3b:c0:5c:1d:ab:84:92:51:
8d:8b:b6:3e:ff:fe:78:1e:5f:59:57:d4:a3:29:8f:aa:1b:95:
d5:1e:db:2b:3b:08:a4:82:b0:25:f4:91:5c:c6:2a:a9:a0:00:
c1:2b:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:54 2025 by rpki-client