Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: 0Bhm/kemQinfS8PVgM2ryTVXdHO6hdOxFNCMU5gRDpE=
Subject key identifier: CB:DA:18:16:AE:BF:2F:E4:62:D6:32:87:E3:1F:19:60:81:4D:20:06
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 0198D4A84304CBA15E1DB2A8E0BFBC0F2B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0D82
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: UxLmuhX5YEtzY7Z07bikK1+vsb1tMObmxqx2Lx0NR4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:43:04:cb:a1:5e:1d:b2:a8:e0:bf:bc:0f:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=cbda1816aebf2fe462d63287e31f1960814d2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:93:b0:a7:c9:82:cb:f2:40:19:85:93:5d:
71:a0:4b:ad:d7:e0:60:00:22:da:a7:e9:57:83:d2:
74:e1:a1:52:dd:83:bf:e6:b2:98:e7:83:73:87:8c:
5a:5d:de:d8:b2:d2:3a:9e:46:30:69:a0:4f:12:fa:
26:fc:53:a7:68:c9:d6:9f:25:10:de:c3:54:55:60:
bf:ca:13:d5:dc:0e:6a:b9:04:cf:25:83:80:6d:8a:
11:00:48:9e:e2:4e:20:08:58:04:c9:88:5b:15:32:
e7:1f:48:b3:02:87:f7:ea:8d:b9:57:d7:66:a6:4f:
fd:a6:43:f3:31:23:c5:f8:7b:85:e9:de:fb:7f:45:
bf:44:8d:ba:e7:f0:3f:73:2d:ea:ef:99:62:8f:db:
c6:d6:8f:0a:54:fc:db:04:e3:5f:b9:19:ba:e3:19:
ed:7a:08:c0:84:47:3e:88:73:77:80:c1:d7:b1:2a:
57:7b:66:8b:b2:79:91:03:ff:66:94:b5:a6:7d:ed:
96:88:13:62:20:a9:e1:20:9e:2b:89:5a:9c:33:84:
92:85:e4:ef:23:ff:d7:f6:54:c9:ba:05:e0:d4:85:
ed:e7:44:bb:42:ba:a9:68:79:b0:60:37:33:a2:4d:
28:81:5d:2e:27:46:68:e4:8a:25:13:00:85:4a:1f:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DA:18:16:AE:BF:2F:E4:62:D6:32:87:E3:1F:19:60:81:4D:20:06
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f8:ac:34:a6:11:95:ee:6e:d7:37:dd:b9:af:7e:a0:dd:56:
4f:0d:9c:01:23:80:70:68:ac:bf:2d:df:36:be:7f:77:87:6c:
c6:41:35:43:c0:97:e4:70:f9:4c:58:61:c9:74:81:86:4a:e9:
89:43:cc:17:03:96:40:1e:98:47:9f:2d:2c:92:7d:f8:e8:02:
c3:b9:f8:0f:cf:0b:85:e3:cd:57:b3:75:6a:af:ba:66:03:db:
f7:2f:25:23:c8:82:b2:17:be:f8:4f:4f:16:e1:04:1e:24:e6:
8e:12:ae:70:ae:49:c2:48:b8:fa:85:fe:86:a8:5d:85:22:bf:
12:5c:82:07:f7:88:a5:df:db:48:4d:64:0f:07:ba:14:5f:ff:
f7:77:ea:ed:0c:14:77:c0:53:6c:a9:b2:95:2d:84:b5:76:13:
43:de:49:02:59:9c:b6:7c:78:6a:aa:7a:9d:2a:f7:98:2b:82:
6b:14:33:85:50:4d:25:33:76:6b:c4:0d:2c:55:0a:74:d5:53:
b9:91:f3:80:1f:60:a6:5d:1f:0c:d7:c8:03:4d:2d:14:47:73:
9e:63:14:1c:6e:5e:75:cd:94:e2:97:00:4f:8a:04:e9:c0:66:
44:c3:e7:52:87:a2:b5:2b:58:1d:ee:7c:6a:a0:e5:ac:e9:64:
be:7c:3a:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEMEy6FeHbKo4L+8DysdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2
NTVlYjYwHhcNMjUwODIzMDIwMDUzWhcNMjUwODI0MDIwMDUzWjAzMTEwLwYDVQQD
EyhjYmRhMTgxNmFlYmYyZmU0NjJkNjMyODdlMzFmMTk2MDgxNGQyMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOGTsKfJgsvyQBmFk11xoEut1+Bg
ACLap+lXg9J04aFS3YO/5rKY54Nzh4xaXd7YstI6nkYwaaBPEvom/FOnaMnWnyUQ
3sNUVWC/yhPV3A5quQTPJYOAbYoRAEie4k4gCFgEyYhbFTLnH0izAof36o25V9dm
pk/9pkPzMSPF+HuF6d77f0W/RI265/A/cy3q75lij9vG1o8KVPzbBONfuRm64xnt
egjAhEc+iHN3gMHXsSpXe2aLsnmRA/9mlLWmfe2WiBNiIKnhIJ4riVqcM4SSheTv
I//X9lTJugXg1IXt50S7QrqpaHmwYDczok0ogV0uJ0Zo5IolEwCFSh/bOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvaGBauvy/kYtYyh+MfGWCBTSAGMB8GA1UdIwQY
MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt
YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx
LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovisNKYR
le5u1zfdua9+oN1WTw2cASOAcGisvy3fNr5/d4dsxkE1Q8CX5HD5TFhhyXSBhkrp
iUPMFwOWQB6YR58tLJJ9+OgCw7n4D88LhePNV7N1aq+6ZgPb9y8lI8iCshe++E9P
FuEEHiTmjhKucK5Jwki4+oX+hqhdhSK/ElyCB/eIpd/bSE1kDwe6FF//93fq7QwU
d8BTbKmylS2EtXYTQ95JAlmctnx4aqp6nSr3mCuCaxQzhVBNJTN2a8QNLFUKdNVT
uZHzgB9gpl0fDNfIA00tFEdznmMUHG5edc2U4pcAT4oE6cBmRMPnUoeitStYHe58
aqDlrOlkvnw65w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:30 2025 by rpki-client