Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: xHiiqQ39qG16fsp15BlcxqB89uTk0Kfu9Kb7RbCj4RM=
Subject key identifier: 5C:C9:E4:58:F5:8F:92:40:FA:78:4D:B1:F0:87:39:55:D1:3A:C4:B0
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0198D660F3C409CC4A79CCA4CFB928A55A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: loFEhDF67NSSglphBJXCW95Zc+PFmxon7+OyiYgTvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f3:c4:09:cc:4a:79:cc:a4:cf:b9:28:a5:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=5cc9e458f58f9240fa784db1f0873955d13ac4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:b2:8b:72:2a:df:e8:5d:cf:b9:b4:2a:19:
7d:f4:82:af:be:03:88:b0:e3:ca:41:4e:41:59:c9:
d4:5a:8b:18:46:50:a8:53:87:44:4b:2c:7f:60:50:
a4:90:93:d6:cb:03:5a:d6:38:41:45:cb:64:3f:c5:
07:11:f7:a3:7f:86:69:94:6f:52:52:14:3d:62:7b:
43:41:b6:38:ea:b0:4a:4f:8a:22:b5:c6:f7:dd:78:
5e:c4:59:28:8a:5b:cd:97:e2:39:55:4c:5a:86:ae:
52:3e:f7:7e:ed:bb:69:d6:ac:22:85:b4:24:11:1e:
a8:a4:52:3e:23:e3:ac:a3:a6:f1:bf:a7:0a:38:54:
33:6b:01:c0:87:bc:96:00:2a:10:bb:c9:bb:c1:c1:
70:47:34:8b:98:92:49:e4:23:cf:90:3e:99:10:4d:
6b:fe:13:2e:1c:73:33:d8:8d:5a:fd:cc:65:fa:72:
1c:bf:56:76:09:9c:9d:3a:15:0c:48:36:86:0c:a3:
28:55:5d:cb:81:a9:f7:57:e9:99:ef:a5:e7:c7:7a:
30:2a:f1:2f:c5:26:eb:bc:45:27:26:8b:57:6a:ca:
ef:46:31:db:83:9e:c2:47:bc:d0:4b:d9:99:37:ee:
70:7e:58:50:96:7c:a2:ce:a8:d1:dc:69:50:de:46:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:E4:58:F5:8F:92:40:FA:78:4D:B1:F0:87:39:55:D1:3A:C4:B0
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:ec:75:0d:ae:62:f4:86:f4:3b:02:1c:c7:e7:12:36:64:
ed:14:3d:c5:dd:66:ed:cb:75:95:15:dd:a1:c5:75:c8:be:45:
ed:cd:53:52:59:f0:89:9c:f9:0c:30:67:60:84:4c:37:6c:85:
77:c7:d0:a2:ca:f4:8f:dd:2d:b2:b5:f0:15:00:44:28:9f:65:
a6:74:8a:0f:09:24:89:6f:b3:4c:bb:4e:26:1f:b5:12:cc:1b:
9c:42:a4:a2:75:a9:9a:c9:24:97:5c:3e:f9:c4:00:6f:aa:e1:
f5:51:72:9b:34:25:d2:ef:4b:a8:56:d7:9b:6c:81:e4:98:ba:
49:ea:04:99:69:4a:8d:67:14:92:75:58:34:97:4f:9c:af:53:
98:d1:cb:60:a5:85:1f:96:41:9d:61:28:57:61:fe:c0:4b:d0:
95:06:75:d3:6b:fb:22:53:73:c3:a7:bd:ae:aa:b0:08:74:80:
56:77:17:8d:47:cd:08:7e:dd:48:1c:a6:03:64:51:57:59:4b:
e8:13:35:1d:87:d7:cd:93:8c:3d:aa:ea:9e:c7:9e:fe:96:d0:
88:30:64:48:72:d6:be:33:10:d9:93:ad:d8:62:a8:e3:4a:ba:
24:11:47:41:c7:76:2b:4c:76:59:f0:53:c6:28:74:6f:79:13:
ec:a4:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:28 2025 by rpki-client