Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: tB1E6jOW6nzkELEoSi/YsC+qn7pvT9mo5NWdYN/En9g=
Subject key identifier: C1:8E:16:F1:BD:3E:91:94:84:40:E4:2E:9C:89:7A:4D:22:CC:BD:F8
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019881669962B595E66E8AE477A7AE099CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0D04
Signing time: Wed 06 Aug 2025 22:00:41 +0000
Manifest this update: Wed 06 Aug 2025 22:00:41 +0000
Manifest next update: Thu 07 Aug 2025 22:00:41 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: MzEXKH1X5w+/6CMpyPiHS5pGieg2MFW7Dm4tl7MLe/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:99:62:b5:95:e6:6e:8a:e4:77:a7:ae:09:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Aug 6 22:00:41 2025 GMT
Not After : Aug 7 22:00:41 2025 GMT
Subject: CN=c18e16f1bd3e91948440e42e9c897a4d22ccbdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:5c:98:bf:06:0c:69:a9:fe:8a:ca:1c:9f:
bb:c3:4a:3b:a3:ba:38:a5:43:0c:2a:b8:fc:12:73:
06:54:d1:8d:da:c6:92:13:69:e5:5f:09:b6:83:7c:
02:0b:90:26:cc:5a:c3:e8:ca:b9:7b:31:30:49:90:
8d:7e:b8:8c:35:a9:cb:f8:ca:7d:76:fa:00:00:cf:
03:86:9b:5c:98:b1:74:6b:c1:23:f7:ee:02:d7:d9:
70:9f:fa:bf:c2:eb:f6:67:c9:4d:6b:87:c0:b5:43:
95:02:ea:df:23:5a:fb:85:81:a8:6f:5f:a8:a2:18:
ea:af:d6:3c:f7:9d:60:0b:22:c9:d7:4f:ac:2e:7d:
b4:a6:cc:75:02:4c:6f:cd:e6:f0:59:92:b0:a9:60:
4b:74:69:bb:d3:49:12:2d:0e:c0:21:ca:ff:f3:41:
65:b0:54:03:62:7d:d3:4f:b5:eb:3e:1a:71:a1:89:
34:fa:3b:94:93:3c:bd:89:76:fe:fa:56:60:2d:be:
a0:a9:0f:c8:37:8c:a3:1e:16:42:93:c6:e2:af:d3:
3c:a8:4c:34:03:73:28:ab:f5:5b:82:4f:1c:b2:6c:
54:4c:d9:97:65:78:10:63:e7:04:5a:3f:a2:87:a2:
ba:3f:28:c5:4e:6c:50:42:62:c6:41:26:4c:56:1a:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:16:F1:BD:3E:91:94:84:40:E4:2E:9C:89:7A:4D:22:CC:BD:F8
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:5f:1d:dc:1d:d4:0a:75:bc:29:f6:df:e4:82:b1:b9:c9:
f7:80:93:71:2b:a7:cd:a3:a5:c9:ad:d2:c0:dd:96:74:38:c1:
2d:86:9e:34:ca:64:b2:7c:c9:99:8b:07:97:87:9d:81:25:0f:
c5:18:f3:d8:d4:d9:1e:5f:8c:bc:3d:39:37:99:cc:24:5b:83:
d3:2b:8d:ab:56:b8:2a:84:fd:c8:09:00:7c:44:64:62:32:e4:
40:14:13:37:ba:ca:81:8a:8c:df:ad:85:98:6d:33:83:38:6f:
0e:4d:cc:57:b5:3f:b3:fe:ff:3c:a4:ee:12:73:46:b4:59:6a:
c6:f7:50:10:8f:0a:67:66:8e:9b:46:e9:01:86:7d:4a:c5:f5:
30:25:bf:56:b7:76:97:8b:2f:21:cd:20:db:b6:60:b7:a8:27:
66:71:b8:40:72:1c:53:05:c4:d8:7b:48:c1:1f:d5:6d:36:2f:
2d:bb:9c:db:14:41:1e:d7:52:87:6a:05:f6:54:7f:73:63:42:
e6:6e:83:9f:84:2d:05:bc:2d:4e:57:12:2e:b2:38:74:de:6e:
33:26:6d:81:9f:4a:65:d0:02:e5:1d:5b:57:24:93:f7:b9:d8:
8c:57:64:96:cc:8d:ed:59:7b:36:4b:12:bf:57:e6:e1:ea:80:
db:91:ec:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZplitZXmborkd6euCZzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0
YTJmMTkwHhcNMjUwODA2MjIwMDQxWhcNMjUwODA3MjIwMDQxWjAzMTEwLwYDVQQD
EyhjMThlMTZmMWJkM2U5MTk0ODQ0MGU0MmU5Yzg5N2E0ZDIyY2NiZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXpcmL8GDGmp/orKHJ+7w0o7o7o4
pUMMKrj8EnMGVNGN2saSE2nlXwm2g3wCC5AmzFrD6Mq5ezEwSZCNfriMNanL+Mp9
dvoAAM8DhptcmLF0a8Ej9+4C19lwn/q/wuv2Z8lNa4fAtUOVAurfI1r7hYGob1+o
ohjqr9Y8951gCyLJ10+sLn20psx1AkxvzebwWZKwqWBLdGm700kSLQ7AIcr/80Fl
sFQDYn3TT7XrPhpxoYk0+juUkzy9iXb++lZgLb6gqQ/IN4yjHhZCk8bir9M8qEw0
A3Moq/Vbgk8csmxUTNmXZXgQY+cEWj+ih6K6PyjFTmxQQmLGQSZMVhohKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGOFvG9PpGUhEDkLpyJek0izL34MB8GA1UdIwQY
MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt
Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm
LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0xfHdwd
1Ap1vCn23+SCsbnJ94CTcSunzaOlya3SwN2WdDjBLYaeNMpksnzJmYsHl4edgSUP
xRjz2NTZHl+MvD05N5nMJFuD0yuNq1a4KoT9yAkAfERkYjLkQBQTN7rKgYqM362F
mG0zgzhvDk3MV7U/s/7/PKTuEnNGtFlqxvdQEI8KZ2aOm0bpAYZ9SsX1MCW/Vrd2
l4svIc0g27Zgt6gnZnG4QHIcUwXE2HtIwR/VbTYvLbuc2xRBHtdSh2oF9lR/c2NC
5m6Dn4QtBbwtTlcSLrI4dN5uMyZtgZ9KZdAC5R1bVyST97nYjFdklsyN7Vl7NksS
v1fm4eqA25HslA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:28 2025 by rpki-client