Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: G5BA+CYFN3WMStQgyYt9Z29kx+pKrQSmuG3eArGler4=
Subject key identifier: 72:80:B4:51:C1:4B:86:69:18:01:79:D5:03:91:42:A5:E9:54:CC:64
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019A4D0695F8AEC87DD3C2071F36BC2F87D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 04:01:08 +0000
Manifest this update: Tue 04 Nov 2025 04:01:08 +0000
Manifest next update: Wed 05 Nov 2025 04:01:08 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: AU2RCSqdwkDlwBF0Gvv3lUoJRh3I4tIX6QAAZ0wWNyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:95:f8:ae:c8:7d:d3:c2:07:1f:36:bc:2f:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Nov 4 04:01:08 2025 GMT
Not After : Nov 5 04:01:08 2025 GMT
Subject: CN=7280b451c14b8669180179d5039142a5e954cc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:2e:0b:f5:c5:72:1e:f2:75:d9:dc:5f:43:
f1:f8:c9:90:9a:04:af:e6:74:52:a9:04:a4:fd:71:
b0:f1:e9:cc:fd:cc:22:f2:c5:ae:d5:97:5d:1d:2c:
cc:b0:6d:ec:63:87:5f:9f:9b:04:3e:76:1e:cf:0d:
76:a3:57:e3:32:40:6f:1f:53:6f:29:e4:99:44:92:
b1:17:f9:14:a0:32:71:16:49:e0:a2:1b:c0:6a:b7:
57:15:ec:10:c3:96:91:f2:0e:7e:ad:bb:18:3d:6b:
83:0e:a1:38:97:08:5e:a4:d5:19:7c:6c:6d:46:84:
4d:40:ba:c5:79:e2:0f:5a:b4:6d:19:56:bf:de:53:
c3:60:13:88:4b:36:54:4f:36:b8:c7:f4:93:64:89:
89:2b:1a:fb:17:b1:0f:07:39:62:d2:5e:1a:ca:4f:
57:8c:de:c8:b0:0f:50:4a:35:87:1b:bc:37:dd:50:
cd:25:88:dc:be:c7:37:4e:8c:e6:17:ed:c0:b7:48:
44:81:6e:70:bc:18:40:96:31:08:c7:4e:0d:75:a0:
77:84:ea:d4:de:c9:66:14:bc:91:9c:de:2d:27:a4:
31:72:57:66:47:54:e3:f7:16:5e:11:19:61:32:50:
8b:d7:03:56:26:70:f2:95:b7:08:04:ff:44:d9:10:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:B4:51:C1:4B:86:69:18:01:79:D5:03:91:42:A5:E9:54:CC:64
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:46:c8:df:97:cf:49:72:b6:00:fb:2b:f1:c4:00:fa:84:
1a:ca:5a:88:02:b9:44:a2:68:40:c3:9e:05:34:0e:9d:bf:58:
10:20:2f:04:5a:14:f4:79:0f:44:d3:3b:f1:d8:62:8d:ad:62:
5a:fa:17:3b:02:0a:aa:e6:3d:a8:be:77:fd:df:95:1f:3b:79:
c7:da:27:8a:b9:f4:4b:7f:2a:99:c3:e8:29:c0:17:d4:de:bf:
37:8c:49:18:ff:e2:19:84:32:5c:11:8d:3f:9b:44:d3:d3:14:
46:e6:32:3c:31:d6:1d:38:b6:ca:e2:4e:be:41:22:28:27:a6:
7c:79:54:fa:a8:d1:f9:c5:d3:1f:e2:f5:5f:39:78:4e:13:6f:
0b:02:4b:3f:d5:be:73:65:78:de:2b:9b:26:b6:90:71:60:68:
b0:d0:28:84:d8:87:ec:5e:bd:d1:29:e6:0f:bb:80:82:44:5a:
a0:a5:a8:de:74:64:33:23:34:8f:8d:13:76:ee:9b:25:f2:d8:
a4:53:5b:a1:26:d1:44:45:fc:ba:85:db:e5:fe:87:08:77:de:
b6:e7:bb:08:48:c7:37:aa:33:d1:b7:58:92:dd:e7:7e:0d:e3:
7d:15:1e:58:a8:51:a6:64:2c:d2:70:e7:d7:33:a2:fd:6f:8a:
90:93:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:41 2025 by rpki-client