Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: jc5rnqEH6YuYHe0hxKK4OtIZhy+cUhpbVldbPr9adcA=
Subject key identifier: C1:C2:74:9E:5B:17:5F:3D:05:5B:68:C7:01:58:5A:36:4F:CE:DC:6C
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0199FBEAD926920BC9EF1A3740CF42E5359C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: egd2OIEcF72SwIITBc4XSGbj/sIvMFpnlF+SFRGHwv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d9:26:92:0b:c9:ef:1a:37:40:cf:42:e5:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=c1c2749e5b175f3d055b68c701585a364fcedc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:f5:9f:52:4b:60:b6:0c:9f:fb:8b:05:ac:
90:ba:76:db:ce:88:4e:0b:e6:ea:6e:b2:e9:56:46:
63:bf:5d:3b:b1:f2:46:ed:2b:59:6c:d8:66:51:d7:
ab:f8:5b:72:e6:02:6f:54:81:73:42:78:00:4d:07:
d7:1c:d0:f8:d6:2d:2b:25:2b:00:6d:72:65:4b:2e:
87:cb:b2:0c:89:dd:7d:59:49:41:90:3c:98:8e:f9:
5f:de:c5:6f:90:99:86:88:06:d1:47:9e:e1:ac:eb:
b1:e7:af:c0:f4:95:c7:d1:fb:68:e7:ab:eb:2c:f9:
56:ab:61:e3:a0:7e:49:08:ed:9d:81:73:cd:02:f9:
28:a0:0b:fb:a3:a4:17:09:2c:f4:cd:07:6b:33:4d:
aa:11:93:8c:f8:d8:c4:5d:7a:c6:ac:43:e7:51:99:
d8:c7:f5:14:54:86:a3:25:4f:12:53:ec:93:17:e4:
ec:0f:1f:65:67:13:cf:63:bb:27:87:93:80:11:01:
7e:6d:ef:0d:88:f2:56:69:89:70:c6:68:38:80:3d:
2d:4f:b3:7e:5b:7f:9f:bf:a1:bd:f2:0b:6d:8e:6f:
5e:78:e3:3f:f4:b0:33:cc:4e:6f:de:6e:da:34:90:
eb:47:08:05:81:8c:61:63:7a:bf:70:f4:10:82:cd:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:74:9E:5B:17:5F:3D:05:5B:68:C7:01:58:5A:36:4F:CE:DC:6C
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bc:0f:fb:a9:a1:b7:c6:57:ed:a7:c3:cb:ce:14:7c:c5:ce:
f8:46:64:df:7f:8d:6e:47:bc:78:c7:3d:b6:4c:af:de:7d:b3:
d7:fd:0a:3b:eb:b7:81:8b:2e:23:35:eb:d2:51:64:e9:51:58:
71:a5:41:8e:b9:67:df:d7:84:25:f6:32:b0:10:2e:1f:02:9e:
05:f7:00:b2:51:86:0b:17:27:bc:fa:a9:1b:d4:79:cb:f4:7d:
25:04:ef:68:cc:a5:56:f2:20:48:db:d5:31:b3:79:2f:71:d9:
ae:43:b0:38:11:03:c8:97:6b:08:09:b1:cf:b1:88:fb:7a:f9:
b2:55:c6:47:8f:94:e9:73:56:d3:8f:e5:02:ef:f5:38:cf:6c:
d7:b1:73:8e:24:70:0d:67:f4:2e:1c:c2:5f:93:9c:b0:76:59:
08:cb:e5:11:ad:42:c6:69:ac:6c:64:f7:ec:bd:04:c8:74:cb:
57:3c:16:1a:4f:94:31:fe:98:8a:ac:80:0f:49:77:01:a3:aa:
e3:c5:2b:92:2b:27:52:bf:fa:88:ea:77:02:22:bb:79:17:02:
e1:98:aa:b0:50:d9:43:c5:08:9f:2e:86:30:d7:43:5e:47:62:
1d:a0:9e:f7:51:b3:63:00:c9:52:d0:4d:98:29:a4:c9:0d:16:
80:c9:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:38 2025 by rpki-client