Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: 4dyRSs3p6NPRAE1QmC4hRroxba5UBNhwvYbPQUdUDw8=
Subject key identifier: 4D:81:13:D7:54:E5:0D:6F:74:2E:2E:3A:99:DE:B8:25:2B:64:93:11
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 01987E6605371AD9F7308E381B65AAE4FA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 0605
Signing time: Wed 06 Aug 2025 08:01:11 +0000
Manifest this update: Wed 06 Aug 2025 08:01:11 +0000
Manifest next update: Thu 07 Aug 2025 08:01:11 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: FkPIOpa+zfAHAoMdjYnDbCb0X7UxMWEN3VD0BaOoZv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:05:37:1a:d9:f7:30:8e:38:1b:65:aa:e4:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Aug 6 08:01:11 2025 GMT
Not After : Aug 7 08:01:11 2025 GMT
Subject: CN=4d8113d754e50d6f742e2e3a99deb8252b649311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:b7:0a:47:3d:f0:bf:1e:a2:7e:26:81:78:
14:20:65:97:6c:65:f7:cf:35:4f:93:2a:1f:ca:89:
50:71:fb:74:30:78:9e:9b:3c:7f:70:75:18:d2:3c:
c8:24:72:68:63:ec:6d:bb:45:f7:68:7b:96:62:3c:
69:10:ec:bc:99:c6:1b:17:47:0b:37:96:94:b5:e0:
a7:a2:4d:6a:dd:70:71:33:5b:45:b1:dd:00:07:b6:
55:c8:cb:cb:cf:d7:50:01:3b:2d:50:92:da:41:33:
0b:12:78:ea:af:0b:76:cf:73:be:95:4c:44:aa:28:
f3:29:9e:9f:b0:72:8c:a8:8c:72:f7:46:29:56:16:
d3:51:8b:d1:16:a7:7c:37:c1:ad:f5:af:cf:f7:93:
6b:e7:e3:19:d8:9a:60:13:0c:c0:ed:41:5b:5f:62:
76:59:09:6e:d2:fe:96:93:5a:8d:41:80:46:69:cd:
14:f0:75:53:23:0d:37:7c:d6:9e:48:3b:92:38:19:
ec:06:7d:e7:41:37:74:23:07:18:cd:b7:43:60:bd:
8c:e9:0d:49:d0:e6:cb:44:fd:4e:d7:36:66:46:6f:
5f:84:2f:75:4c:a7:55:ee:d0:0a:cf:47:47:57:52:
4c:fc:f0:e0:33:8b:7d:50:f9:f5:56:48:84:99:90:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:13:D7:54:E5:0D:6F:74:2E:2E:3A:99:DE:B8:25:2B:64:93:11
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:e6:0e:68:7e:f2:38:15:5a:8c:65:2e:db:ff:5b:b0:ac:
58:92:ff:d3:96:c6:63:d1:e9:a1:33:67:7e:15:7c:7b:7c:87:
35:8a:58:fb:fb:96:db:07:5f:cc:c4:21:3e:62:cb:67:bf:3b:
16:f4:5d:98:c5:b8:f6:83:51:ab:19:d4:b7:43:a8:a5:dc:28:
33:b1:4d:e9:45:c5:a3:ea:76:b6:50:0a:9c:eb:0f:66:2d:72:
2a:78:ac:31:6e:20:c2:00:4b:df:a3:d5:75:e2:3e:62:7d:a5:
d4:8d:35:37:29:99:3f:54:11:be:41:c7:3f:9c:4a:d7:c0:ac:
86:8e:d9:19:cc:36:be:30:23:cc:6a:e3:94:be:51:1a:04:55:
41:3c:a1:40:fb:05:6f:da:c5:6b:db:2b:7d:67:3d:08:77:48:
41:06:ad:52:2d:bd:89:99:2e:fb:f7:b0:4b:28:11:6d:12:3b:
c6:86:23:20:82:0f:5c:c5:8f:1a:c3:6c:cc:9b:ec:d9:70:e5:
8e:80:54:e0:00:14:d7:2a:af:c5:f3:d0:65:97:8d:21:e9:da:
e2:ac:d2:2f:35:0c:1e:ef:46:45:ff:0b:63:7b:2c:87:7c:70:
1d:e5:32:5b:07:e4:bf:51:ce:9c:79:41:f4:f2:84:f9:63:a0:
88:37:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:07 2025 by rpki-client