Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier: yGEDrc+G6hNH46ySFcMhMy27byaDNNh5nIBZZnqigcI=
Subject key identifier: D9:97:AB:8D:C3:BB:79:B1:F9:A7:CB:53:6D:55:DB:D1:7F:C2:5F:8D
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial: 0198D5BB994935FA70A97A9AB579B91EC497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: SLFsCm+kOrfo9w41RheaCOjsBX6Gp8z7qD4IeV0YCyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:99:49:35:fa:70:a9:7a:9a:b5:79:b9:1e:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=d997ab8dc3bb79b1f9a7cb536d55dbd17fc25f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:dd:a4:8d:66:ff:ab:09:1f:14:76:ac:af:
9b:d2:fe:b1:e3:51:b6:e8:24:d7:ec:70:cd:7d:91:
17:22:ab:5d:15:90:3a:ec:99:cf:96:df:c2:03:61:
8f:fa:9b:01:0f:1b:39:d6:f4:04:0f:82:5b:2e:14:
06:36:63:5c:e6:66:8b:e0:e7:67:50:e5:3d:2c:5e:
01:c3:0f:d2:6e:33:a6:e4:b7:7c:7c:37:70:ae:6c:
51:91:b8:05:1f:38:af:1c:b1:1a:36:0a:86:14:ea:
58:87:e8:bd:93:39:8c:5e:df:64:47:6c:37:2a:31:
2a:b2:74:2b:1e:39:dc:85:a4:81:a4:52:0c:83:9d:
59:cb:6c:e9:d0:b6:fd:0c:04:df:55:0b:e1:62:26:
4e:48:3b:c6:8e:86:a7:21:1c:22:fe:0f:73:d4:af:
2a:a6:7b:5e:16:ff:19:a2:10:b7:67:74:99:51:e2:
0e:f5:d0:eb:64:1b:fb:20:b9:30:10:39:02:34:0d:
69:6b:da:d4:90:58:37:b7:7b:6c:af:49:ed:34:56:
c6:b1:0a:a0:22:8b:b4:45:38:35:45:97:9b:4f:9c:
9e:70:66:cc:27:a3:b6:8c:db:e9:f5:cc:56:3f:9a:
d6:93:a3:51:df:e8:74:c3:50:9a:d6:58:e1:95:48:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:97:AB:8D:C3:BB:79:B1:F9:A7:CB:53:6D:55:DB:D1:7F:C2:5F:8D
X509v3 Authority Key Identifier:
keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:9f:ad:d8:fd:0c:8f:43:63:76:2a:ec:6a:97:bf:fc:9f:
c9:29:ee:eb:02:c5:04:c8:dc:90:35:2b:94:09:2f:2a:8c:7a:
5a:6b:3a:c1:de:b6:d3:a9:b9:aa:f9:a6:e2:95:aa:3c:0c:fa:
fe:a2:82:e5:c3:23:08:01:68:56:a1:f2:62:9b:a7:95:ca:ac:
e0:4b:9a:ed:e9:4d:47:b8:7c:6b:9c:1a:d8:6a:d0:4c:dd:68:
91:1e:f9:1c:1b:19:21:0f:17:a6:eb:74:eb:84:dc:c4:ad:fe:
5e:4f:0f:6a:24:fe:a4:91:d1:49:83:9f:5a:3b:bd:4a:5e:d3:
bd:32:8f:ca:d6:52:47:06:a7:28:81:57:ad:4d:e8:08:11:f7:
c5:0f:b9:de:9e:19:b9:b7:e6:6e:86:d4:dd:78:79:1f:05:db:
1b:03:e8:1e:85:dc:6b:9f:ca:15:8c:4f:58:56:af:ae:91:54:
88:0f:e7:c2:50:fd:4f:c8:41:c0:4e:76:b1:05:65:9f:64:a2:
6b:08:fc:88:fe:66:d8:74:cd:04:30:04:32:ec:ca:da:36:89:
b2:c5:54:9d:29:43:8f:03:10:34:56:f1:21:3a:b7:47:c0:bc:
56:d5:08:98:1d:ee:c4:f1:3d:47:39:b7:3f:87:fd:30:2a:d0:
f8:c9:74:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5lJNfpwqXqatXm5HsSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmE1ZGIzYmEzM2UzNmMxNmRiZjUyNjBiMmZlMjc0YWU3
ZmIyMjIwHhcNMjUwODIzMDcwMTM4WhcNMjUwODI0MDcwMTM4WjAzMTEwLwYDVQQD
EyhkOTk3YWI4ZGMzYmI3OWIxZjlhN2NiNTM2ZDU1ZGJkMTdmYzI1ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGzdpI1m/6sJHxR2rK+b0v6x41G2
6CTX7HDNfZEXIqtdFZA67JnPlt/CA2GP+psBDxs51vQED4JbLhQGNmNc5maL4Odn
UOU9LF4Bww/SbjOm5Ld8fDdwrmxRkbgFHzivHLEaNgqGFOpYh+i9kzmMXt9kR2w3
KjEqsnQrHjnchaSBpFIMg51Zy2zp0Lb9DATfVQvhYiZOSDvGjoanIRwi/g9z1K8q
pnteFv8ZohC3Z3SZUeIO9dDrZBv7ILkwEDkCNA1pa9rUkFg3t3tsr0ntNFbGsQqg
Iou0RTg1RZebT5yecGbMJ6O2jNvp9cxWP5rWk6NR3+h0w1Ca1ljhlUhWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmXq43Du3mx+afLU21V29F/wl+NMB8GA1UdIwQY
MBaAFP8qXbO6M+NsFtv1Jgsv4nSuf7IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTIt
NTI2MGNkNWMyNGMzLzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTItNTI2MGNkNWMyNGMz
LzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndufrdj9
DI9DY3Yq7GqXv/yfySnu6wLFBMjckDUrlAkvKox6Wms6wd6206m5qvmm4pWqPAz6
/qKC5cMjCAFoVqHyYpunlcqs4Eua7elNR7h8a5wa2GrQTN1okR75HBsZIQ8Xput0
64TcxK3+Xk8PaiT+pJHRSYOfWju9Sl7TvTKPytZSRwanKIFXrU3oCBH3xQ+53p4Z
ubfmbobU3Xh5HwXbGwPoHoXca5/KFYxPWFavrpFUiA/nwlD9T8hBwE52sQVln2Si
awj8iP5m2HTNBDAEMuzK2jaJssVUnSlDjwMQNFbxITq3R8C8VtUImB3uxPE9Rzm3
P4f9MCrQ+Ml00A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:14 2025 by rpki-client