Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: 028FIzgNJXYS+izEUSgkMmoMlodzSh4uVGDD3gmElq0=
Subject key identifier: 5B:A6:74:DD:BA:D6:42:9E:95:A7:55:5A:A1:5F:8C:1E:B1:F6:64:72
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019A01EBA218FA455DB08DF6CD9B47FBD971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 16F1
Signing time: Mon 20 Oct 2025 14:00:10 +0000
Manifest this update: Mon 20 Oct 2025 14:00:10 +0000
Manifest next update: Tue 21 Oct 2025 14:00:10 +0000
Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
5: YzdSzrn2g46QLg-Ab4yA5f8O1xU.roa (hash: juEIYlvSOfWVe6E6l6/j9UJcOILOSNhDvqnCdtQBLU0=)
6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: uqCnkaQbEK9FFYecXDD/4TBOpBN4K9Nt5m+UIxJcs5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:a2:18:fa:45:5d:b0:8d:f6:cd:9b:47:fb:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Oct 20 14:00:10 2025 GMT
Not After : Oct 21 14:00:10 2025 GMT
Subject: CN=5ba674ddbad6429e95a7555aa15f8c1eb1f66472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:60:c2:96:48:b8:98:14:22:c5:28:59:bc:
69:75:7b:1e:d8:fe:46:de:dd:21:7d:23:30:cf:7b:
b4:0d:26:e9:d6:ca:10:45:98:a2:11:35:24:9d:f7:
89:7a:79:8b:48:0a:5a:b0:e9:f7:d4:d9:43:9b:e0:
98:74:62:80:61:45:05:b6:69:c6:c9:42:ce:43:9d:
03:c3:d3:64:25:b7:d0:53:b2:e1:19:80:d2:38:91:
c6:4a:c7:8e:e4:10:5d:af:b8:f5:e8:16:64:b6:49:
91:a2:91:c7:d5:9b:76:57:bf:de:92:6e:69:12:8c:
97:20:56:79:2c:e3:99:97:50:f0:4b:74:88:dd:18:
25:c6:b6:60:7b:8c:1c:97:4a:39:50:96:71:f6:bd:
95:4b:bc:74:a7:04:b7:96:91:61:e8:1a:6f:14:34:
35:34:6e:c4:d8:18:8f:40:c6:dc:62:a4:ac:db:fc:
b7:bf:9a:34:36:a2:9c:d1:2b:a9:ee:d6:e4:26:2a:
2b:04:50:fa:09:f6:a8:95:69:40:b1:5f:f9:ef:83:
b6:0b:67:aa:52:c1:5b:79:59:62:27:ca:92:ac:30:
86:59:ed:4a:55:a6:19:11:7d:fa:e8:6d:c9:fd:20:
0a:8b:70:48:8d:b9:76:66:1d:a3:32:80:62:e3:85:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:74:DD:BA:D6:42:9E:95:A7:55:5A:A1:5F:8C:1E:B1:F6:64:72
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:40:4d:5c:0a:3f:3f:7a:3c:a7:3e:8d:8e:c0:e6:37:74:f4:
00:48:65:23:68:eb:9c:1e:7b:84:e6:15:54:93:58:f5:4e:66:
b4:ea:a8:d8:ae:8d:3a:c5:ce:cb:52:e2:5b:d1:77:f9:fc:33:
66:df:c3:5e:ba:86:c0:4a:7a:3b:bb:43:07:01:0a:85:52:46:
6b:0b:d7:e2:f7:a7:3a:60:6d:33:e6:ed:ec:d0:b7:27:7f:a5:
e2:dc:05:87:b4:0a:3e:cd:b8:f5:36:9c:f4:24:9b:4b:0b:d5:
56:bc:68:ca:f1:7a:4d:bd:95:b0:fa:32:72:ae:21:59:78:2d:
71:21:ab:21:fc:78:5e:e9:78:1f:b5:e9:35:08:e3:ce:8b:74:
f1:48:ce:46:e7:05:27:36:27:4d:9f:0e:14:fe:f8:09:fe:f7:
fa:bd:ab:20:cb:96:87:64:f3:72:b8:a1:40:c8:6b:35:a7:10:
15:65:27:59:4e:93:73:3b:98:6f:5a:f8:57:e8:29:17:8a:e4:
a3:8f:16:20:6a:07:da:5d:cd:5c:91:ae:63:ae:35:81:64:74:
5e:42:4a:bf:59:67:b7:ee:fa:ac:9a:62:b1:05:0e:2a:41:16:
f4:3c:5f:f0:5e:6f:2f:5e:45:b5:2f:9e:1e:e2:28:35:bb:43:
64:a5:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:57 2025 by rpki-client