
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
File: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft (raw, json)
Hash identifier: 4YjbtglqGXqRzYzCzF83yHND8b2vmkP710/NDv2zWOw=
Subject key identifier: BB:7E:D2:08:4D:A3:F1:48:45:C0:AD:16:4A:87:1F:9A:4E:96:4E:79
Authority key identifier: CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1
Certificate issuer: /CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
Certificate serial: 019873E228660E6F6748CE2C031672A005A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
Manifest number: 0103
Signing time: Mon 04 Aug 2025 07:00:57 +0000
Manifest this update: Mon 04 Aug 2025 07:00:57 +0000
Manifest next update: Tue 05 Aug 2025 07:00:57 +0000
Files and hashes: 1: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl (hash: L5LbBju/GS8k5c9I6x0jEXUxdCdLxOFfwuJf+tJdmpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:28:66:0e:6f:67:48:ce:2c:03:16:72:a0:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
Validity
Not Before: Aug 4 07:00:57 2025 GMT
Not After : Aug 5 07:00:57 2025 GMT
Subject: CN=bb7ed2084da3f14845c0ad164a871f9a4e964e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:7c:25:d1:78:cd:d4:d2:37:a6:b2:99:16:
26:b7:83:f7:59:ac:23:e1:04:4a:c3:0c:3e:e3:1e:
b3:4e:04:89:08:38:4c:1f:9d:cd:04:2b:55:2f:5f:
56:23:d5:a2:be:d4:19:87:f5:a5:2a:1c:72:6d:c3:
e8:13:94:9a:03:c5:43:3c:f1:0e:69:f9:a8:ee:27:
e1:a2:46:b4:f3:f8:78:d0:49:8a:a9:69:c9:b1:c5:
0f:e6:97:ba:cf:aa:51:31:6d:36:1f:d6:b2:92:67:
e7:a5:e9:de:d8:96:b1:27:c1:bb:0b:4c:a0:c8:e1:
88:d2:95:18:1e:a6:a0:9c:cc:d2:75:4f:c7:51:05:
1b:cf:11:dc:c7:7f:89:e5:6d:ff:ad:0f:02:a1:b9:
8f:f0:da:fb:68:26:92:38:8e:fa:23:7c:e6:36:37:
72:fc:57:f6:c7:7f:b7:eb:f7:8b:ce:74:21:e7:d0:
2c:f4:f2:e7:cc:80:53:52:e4:11:f9:71:d3:c9:84:
23:de:43:ba:da:4f:2c:4b:17:24:8c:36:79:c6:2b:
9f:78:1c:e3:fc:79:56:af:68:35:6f:f1:01:85:e5:
c3:30:43:c9:ec:fa:ea:a6:73:17:9a:17:07:3e:a0:
4a:29:46:34:ce:c2:a8:db:38:d4:93:ef:dc:c8:fa:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:D2:08:4D:A3:F1:48:45:C0:AD:16:4A:87:1F:9A:4E:96:4E:79
X509v3 Authority Key Identifier:
keyid:CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:82:27:96:4a:fc:f0:1b:f3:84:70:fb:b3:ff:a4:52:a3:4a:
f3:a0:47:d1:3a:6a:61:31:f2:ee:2a:1d:db:fe:ee:6e:15:13:
36:08:65:6e:9f:7c:da:13:1a:9a:90:99:f3:f2:af:13:fd:d5:
50:3a:e0:73:9e:0c:72:64:be:b9:8a:f0:f7:d8:c5:2b:21:c7:
f4:72:3e:53:fe:3e:46:64:02:77:d0:7e:cb:b6:37:27:20:c8:
97:9c:c7:a7:e7:7a:36:27:22:33:eb:c0:30:79:88:e4:fb:e1:
23:46:7c:c2:60:04:39:02:26:01:5a:82:45:a0:02:66:5c:0b:
b2:ed:6d:0b:6a:87:ef:91:90:09:a9:7e:1d:cf:d6:d1:f4:ee:
3c:68:5e:44:4c:c5:6a:59:8c:38:fe:d6:b7:82:7d:74:e9:5c:
62:ea:db:2f:6f:09:47:47:01:8e:4e:cf:2a:a4:57:a9:75:08:
52:dd:0a:dd:00:f5:2a:83:a2:32:e8:da:43:13:ff:77:28:ab:
cc:f8:b8:c5:6f:f1:aa:40:d6:d0:3b:ef:b2:f9:c0:b8:dd:45:
51:2a:64:65:54:38:e8:38:ee:16:8a:a8:9d:9f:51:b1:50:bb:
b7:de:82:27:c4:98:a4:ed:6f:3f:36:91:a8:68:32:96:ed:e1:
af:32:3c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ihmDm9nSM4sAxZyoAWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNmNlZWEyYzMyYmUwMzg2Y2UwN2FmMWZlNjNkMjI0ODVj
MTJlZjEwHhcNMjUwODA0MDcwMDU3WhcNMjUwODA1MDcwMDU3WjAzMTEwLwYDVQQD
EyhiYjdlZDIwODRkYTNmMTQ4NDVjMGFkMTY0YTg3MWY5YTRlOTY0ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhB8JdF4zdTSN6aymRYmt4P3Wawj
4QRKwww+4x6zTgSJCDhMH53NBCtVL19WI9WivtQZh/WlKhxybcPoE5SaA8VDPPEO
afmo7ifhoka08/h40EmKqWnJscUP5pe6z6pRMW02H9aykmfnpene2JaxJ8G7C0yg
yOGI0pUYHqagnMzSdU/HUQUbzxHcx3+J5W3/rQ8CobmP8Nr7aCaSOI76I3zmNjdy
/Ff2x3+36/eLznQh59As9PLnzIBTUuQR+XHTyYQj3kO62k8sSxckjDZ5xiufeBzj
/HlWr2g1b/EBheXDMEPJ7PrqpnMXmhcHPqBKKUY0zsKo2zjUk+/cyPpGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt+0ghNo/FIRcCtFkqHH5pOlk55MB8GA1UdIwQY
MBaAFMps7qLDK+A4bOB68f5j0iSFwS7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZDA2ZjMtYjFkYy00ZjhlLWI4NGQt
ZTEwOWFhOTUyZjZjLzEveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZDA2ZjMtYjFkYy00ZjhlLWI4NGQtZTEwOWFhOTUyZjZj
LzEveW16dW9zTXI0RGhzNEhyeF9tUFNKSVhCTHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Inlkr8
8BvzhHD7s/+kUqNK86BH0TpqYTHy7iod2/7ubhUTNghlbp982hMampCZ8/KvE/3V
UDrgc54McmS+uYrw99jFKyHH9HI+U/4+RmQCd9B+y7Y3JyDIl5zHp+d6NiciM+vA
MHmI5PvhI0Z8wmAEOQImAVqCRaACZlwLsu1tC2qH75GQCal+Hc/W0fTuPGheREzF
almMOP7Wt4J9dOlcYurbL28JR0cBjk7PKqRXqXUIUt0K3QD1KoOiMujaQxP/dyir
zPi4xW/xqkDW0DvvsvnAuN1FUSpkZVQ46DjuFoqonZ9RsVC7t96CJ8SYpO1vPzaR
qGgylu3hrzI8dA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:49 2025 by rpki-client