Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: O7IY8I3zoAWrIq7j13yNhY17rfTPXoqLd6kJnqwSw7Y=
Subject key identifier: 13:DA:87:CD:9D:6A:CF:A3:C4:2F:35:18:3A:31:C8:3C:A3:7C:A2:AB
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019897EF04CBC3128FC07DD8F63253CFBC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0FE9
Signing time: Mon 11 Aug 2025 07:01:20 +0000
Manifest this update: Mon 11 Aug 2025 07:01:20 +0000
Manifest next update: Tue 12 Aug 2025 07:01:20 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: licLNmXSZKNobbDMN1gZhdRIiGGbIMlPS+4yyEly4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:04:cb:c3:12:8f:c0:7d:d8:f6:32:53:cf:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Aug 11 07:01:20 2025 GMT
Not After : Aug 12 07:01:20 2025 GMT
Subject: CN=13da87cd9d6acfa3c42f35183a31c83ca37ca2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:72:31:3e:0d:46:fd:a3:40:dc:bf:7c:80:
73:7f:05:ac:e6:53:42:41:89:4f:33:41:bb:02:b0:
8f:65:4d:80:00:83:8d:35:4b:a9:39:92:21:4d:e7:
5d:bb:1f:78:18:0e:d5:d1:53:7c:1c:50:7d:15:67:
60:05:b7:ef:e2:09:25:ff:fe:13:31:c0:75:ca:07:
78:b8:a4:dc:ae:ef:ea:fc:8e:a0:f5:2c:c0:52:a3:
df:96:02:b8:9f:13:84:cc:c0:88:f2:ac:c2:ac:43:
89:e6:3f:0e:f5:1c:6c:7f:2e:c0:0d:68:11:40:78:
7a:63:86:02:c2:61:14:5e:91:bc:14:76:70:e4:3b:
58:a6:6b:57:08:90:b4:f4:a2:fb:67:a1:0e:db:97:
7c:f3:fe:0b:d6:4f:db:4f:2d:e5:07:85:5d:42:77:
f6:79:fc:f7:bb:c6:a2:4d:37:d2:21:1b:51:6c:95:
18:ff:64:38:03:15:2a:57:93:57:42:be:b7:d3:4b:
85:dc:91:fe:c7:8f:ab:24:06:41:04:92:b7:f7:cb:
14:99:a5:38:dc:5e:1a:41:09:52:b8:67:37:42:50:
cc:3d:18:62:d7:2d:22:a6:a8:90:ff:05:48:c0:e7:
4e:a8:ca:3b:61:b4:ea:0d:18:a1:81:58:69:88:77:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:87:CD:9D:6A:CF:A3:C4:2F:35:18:3A:31:C8:3C:A3:7C:A2:AB
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:e4:0c:04:26:59:f2:98:44:fb:6b:10:70:b9:b6:f0:9b:
9e:27:9a:04:ed:78:53:3b:98:74:69:04:5c:47:ee:37:b2:1a:
12:2a:a1:25:53:91:d1:74:2d:4b:0b:74:b1:75:6c:2b:54:f1:
ed:0f:f8:6c:35:b2:9b:b0:cc:b1:65:d7:bc:18:20:48:d6:26:
70:a0:08:4c:c3:a1:23:5f:44:88:a2:70:86:49:4a:97:14:5e:
3a:30:6f:9a:c9:1d:33:36:0f:74:aa:c5:8a:99:2b:1e:68:1d:
d1:9f:e6:f0:66:61:b8:35:28:46:3e:db:45:0d:5d:01:41:3c:
b1:e2:52:3e:c1:91:19:e4:18:7d:42:07:6e:20:99:91:3f:d4:
da:29:90:b3:34:12:55:b2:32:b4:6b:d9:74:c2:bf:8a:f5:48:
eb:36:95:94:96:f8:7a:c6:73:f6:9d:99:8a:32:44:03:d2:4d:
4a:9d:8b:bb:44:07:97:42:ad:9d:c1:a7:44:27:18:c9:cd:ec:
e5:f6:64:87:b2:b9:d6:e0:9a:43:9d:11:fd:bd:81:e1:ff:6a:
9b:30:94:09:b9:fd:83:2c:4f:ce:d1:98:0c:07:71:31:33:55:
17:f3:49:b9:21:b4:a2:f6:f4:ae:ac:ba:e5:1f:39:a0:f2:26:
5e:8e:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:54:01 2025 by rpki-client