Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: i1dCKvcWyrQWCAt5fJEFoIUth1mU5o06HGGrgL0yUUU=
Subject key identifier: 5B:11:20:55:08:F5:BC:AF:62:31:35:3D:9A:E5:FD:DE:CF:5A:B7:9C
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 0198D54EA05C8758C71A8218023065BA4DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 0632
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: 1iVd+lWp6Mh4Xy9XVpC9VV7m8wUlai2oOhjxldrTc+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a0:5c:87:58:c7:1a:82:18:02:30:65:ba:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=5b11205508f5bcaf6231353d9ae5fddecf5ab79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:39:80:f7:f8:44:bc:7e:10:89:97:77:eb:
e1:f0:8a:de:7a:9a:79:a6:60:20:ca:83:94:1c:19:
b2:f1:89:be:b2:8a:16:3c:64:a5:94:d9:72:83:c8:
ad:29:63:e8:bf:d7:73:c0:29:cf:30:a4:38:fa:9c:
5c:4b:17:8f:03:8f:ad:87:67:a3:0b:9b:70:1e:f7:
91:fc:03:c9:27:18:d2:df:2e:f6:84:0c:fe:ab:45:
de:a9:f8:4d:59:69:bd:47:b8:77:e6:a1:17:50:46:
c9:bd:15:b1:b7:0e:cd:7c:b9:97:38:5f:ff:ff:ec:
a4:09:40:c2:b4:8d:f7:05:b5:35:29:04:58:b5:cb:
dd:71:08:3d:9e:04:4c:45:05:c7:71:7c:9b:c2:8a:
b0:c1:4c:50:ff:39:35:15:07:03:d1:b7:ce:0c:d1:
29:2d:57:cd:34:6b:ec:8e:83:18:b2:7f:03:55:cb:
49:e8:79:d9:ee:cc:15:12:1a:f7:7b:37:ba:07:9d:
53:bb:ca:7c:d8:5b:13:9c:7b:63:8f:73:a3:23:a4:
9a:83:b4:6f:ea:54:dd:51:64:59:98:3a:9b:55:d1:
30:49:90:08:7a:22:a6:65:b0:46:89:28:01:54:12:
86:28:4f:dc:e5:77:5f:11:c5:98:e0:d3:2c:2c:f3:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:20:55:08:F5:BC:AF:62:31:35:3D:9A:E5:FD:DE:CF:5A:B7:9C
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0a:31:77:0e:19:52:29:41:df:cf:cc:6f:34:e1:b5:16:fb:
a9:a4:71:ae:b3:45:82:e9:c4:1d:4a:18:14:ae:96:f8:c9:bf:
63:d2:ea:17:a2:f4:d4:9a:64:24:76:81:07:8b:12:ad:68:81:
7a:06:fe:95:89:d8:48:81:79:b3:c2:39:3b:83:6f:77:fb:8f:
91:8d:98:ee:ce:e7:2f:0a:90:43:7f:88:3b:30:5e:3e:81:0f:
a9:5e:2f:b2:25:8b:13:9e:dc:2d:98:7b:21:b0:4f:21:f4:75:
48:b2:f5:ba:ab:52:ae:dd:93:21:31:53:81:83:c7:e7:80:58:
c5:11:9d:b1:2a:5a:4c:57:85:89:ed:0b:b5:a2:84:89:27:bd:
20:eb:3f:68:bb:81:28:2b:13:2e:40:ac:cb:cf:dd:df:0b:1e:
83:14:b2:4f:dd:e7:c8:0a:a1:07:d0:14:04:0f:a4:cd:ea:7a:
7a:de:a0:17:92:61:ae:b4:dc:ab:e3:0e:06:b7:02:2c:c5:7b:
98:3c:8b:8c:59:bc:03:2c:d7:bc:86:a4:97:f6:99:90:9f:33:
e0:e8:ee:89:a0:64:96:0a:90:02:a5:10:97:38:8a:fd:21:f6:
96:72:14:dc:eb:72:7a:36:eb:f5:f9:e5:b1:11:f7:14:40:d3:
1d:08:64:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqBch1jHGoIYAjBluk3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTMyMjUxZjExYmNmZTk5M2QyNTQ3ODAyNGMxZTYxZGQ0
N2E3OWYwHhcNMjUwODIzMDUwMjM2WhcNMjUwODI0MDUwMjM2WjAzMTEwLwYDVQQD
Eyg1YjExMjA1NTA4ZjViY2FmNjIzMTM1M2Q5YWU1ZmRkZWNmNWFiNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszE5gPf4RLx+EImXd+vh8Ireepp5
pmAgyoOUHBmy8Ym+sooWPGSllNlyg8itKWPov9dzwCnPMKQ4+pxcSxePA4+th2ej
C5twHveR/APJJxjS3y72hAz+q0XeqfhNWWm9R7h35qEXUEbJvRWxtw7NfLmXOF//
/+ykCUDCtI33BbU1KQRYtcvdcQg9ngRMRQXHcXybwoqwwUxQ/zk1FQcD0bfODNEp
LVfNNGvsjoMYsn8DVctJ6HnZ7swVEhr3eze6B51Tu8p82FsTnHtjj3OjI6Sag7Rv
6lTdUWRZmDqbVdEwSZAIeiKmZbBGiSgBVBKGKE/c5XdfEcWY4NMsLPONzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsRIFUI9byvYjE1PZrl/d7PWrecMB8GA1UdIwQY
MBaAFMrjIlHxG8/pk9JUeAJMHmHdR6efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDct
ODFmOTk2NmU0MjcxLzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDctODFmOTk2NmU0Mjcx
LzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgoxdw4Z
UilB38/MbzThtRb7qaRxrrNFgunEHUoYFK6W+Mm/Y9LqF6L01JpkJHaBB4sSrWiB
egb+lYnYSIF5s8I5O4Nvd/uPkY2Y7s7nLwqQQ3+IOzBePoEPqV4vsiWLE57cLZh7
IbBPIfR1SLL1uqtSrt2TITFTgYPH54BYxRGdsSpaTFeFie0LtaKEiSe9IOs/aLuB
KCsTLkCsy8/d3wsegxSyT93nyAqhB9AUBA+kzep6et6gF5JhrrTcq+MOBrcCLMV7
mDyLjFm8AyzXvIakl/aZkJ8z4OjuiaBklgqQAqUQlziK/SH2lnIU3Otyejbr9fnl
sRH3FEDTHQhkHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:02 2025 by rpki-client