Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: Emec5pF6dYyqvKaJBlWzzgL/dbeo7fQMi9ypJvDDtCk=
Subject key identifier: 58:09:18:6B:2B:C8:91:27:90:17:86:07:74:53:55:9D:4E:E1:8D:0B
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 019A52D1B5587FBCEEC3CA82CEBD087A15DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 0553
Signing time: Wed 05 Nov 2025 07:01:06 +0000
Manifest this update: Wed 05 Nov 2025 07:01:06 +0000
Manifest next update: Thu 06 Nov 2025 07:01:06 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: 28EjXY2XcEJBSLWk+/+d/XexsECx6RUgKzZoDayOOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b5:58:7f:bc:ee:c3:ca:82:ce:bd:08:7a:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Nov 5 07:01:06 2025 GMT
Not After : Nov 6 07:01:06 2025 GMT
Subject: CN=5809186b2bc89127901786077453559d4ee18d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:56:ef:79:4b:ba:0a:49:b6:e3:f6:4e:e1:
93:9f:9c:01:2c:06:3c:c8:40:d0:45:eb:19:50:21:
7f:ad:2a:9e:a9:30:50:20:4a:23:e1:10:e6:74:50:
a4:12:8a:42:41:ff:ba:bd:d6:d3:13:4d:ab:1a:49:
f4:de:bc:cb:5e:40:48:5c:00:4d:a8:9d:4f:a8:75:
b3:7b:ca:35:bf:38:a7:2c:84:92:30:c0:65:59:e1:
83:d4:72:aa:38:41:da:de:62:40:6a:61:11:3d:70:
2c:bc:b3:b1:e6:5a:69:52:59:79:5e:36:d8:01:db:
9a:21:12:b9:7b:e1:02:0c:9c:19:23:2d:4c:a8:1a:
34:ec:36:7c:95:5b:19:d5:f6:48:99:96:50:8b:37:
6b:0b:55:9f:2f:68:38:9a:8f:f5:99:20:62:ee:6f:
6d:f0:b0:4c:2d:94:7d:6a:03:4c:ee:18:08:c2:60:
66:4e:d7:55:1d:ec:a0:00:d2:10:48:3f:0d:80:84:
7d:33:b5:02:12:8e:52:ec:a8:bf:71:69:9d:78:90:
01:b8:bc:49:4c:3f:4b:e1:f0:6b:bb:74:db:33:1b:
e8:3f:9b:75:bc:a6:8b:91:a7:da:37:b5:85:8c:6f:
41:48:37:13:ac:92:d4:a8:b2:d4:6d:b6:83:9a:69:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:18:6B:2B:C8:91:27:90:17:86:07:74:53:55:9D:4E:E1:8D:0B
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2d:3b:1a:3b:ed:ae:b2:2f:00:c4:8b:bd:52:cf:db:38:13:
a3:1e:c4:77:99:a8:bf:a4:56:87:75:1f:b6:a8:52:01:01:54:
83:c2:c6:79:2b:42:e8:0c:be:98:ab:1c:c1:94:43:30:ca:67:
a4:4e:28:4c:57:93:7a:d9:fb:16:21:a9:a4:b1:50:6b:ea:c4:
da:70:53:b0:ec:ac:5f:fb:1c:36:68:ed:b8:21:51:6b:83:d2:
f4:ca:6d:87:85:f0:0d:4f:23:d6:3a:16:2c:60:d0:bd:dd:8b:
eb:5e:92:0d:c4:e9:43:95:90:e0:e2:ac:55:9c:87:82:c4:8d:
dc:77:71:ee:0e:8d:a1:18:25:b2:5b:fe:f5:32:81:7e:ce:59:
b7:b9:ab:11:bb:ab:01:8f:1c:b8:d3:3b:52:fe:d0:5f:f8:d0:
cd:00:cd:32:66:c5:02:97:4e:bb:be:ff:a0:64:53:86:6d:d4:
86:e9:83:cb:28:7e:3c:98:19:7d:14:d5:2f:12:48:76:c0:c8:
97:59:a3:ca:cc:a5:94:7e:e7:76:58:fe:ee:53:2c:40:58:5f:
e8:92:11:2d:cc:a9:2a:40:f0:ff:be:8e:c9:51:35:aa:9d:9a:
a3:78:e9:da:4a:dd:74:0c:61:90:f4:1e:00:3e:7b:f5:bf:e8:
b1:4e:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:54 2025 by rpki-client