Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: F2rLQ0xutzVBd8TMXkO1thqkIhI/T/avmGGBDdVe4ow=
Subject key identifier: 76:83:93:F6:2C:67:23:4D:33:00:EE:F0:C7:ED:42:87:C5:CC:99:2E
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 0198428736B1E50E22A55A9240A3F94AE8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1609
Signing time: Fri 25 Jul 2025 17:00:14 +0000
Manifest this update: Fri 25 Jul 2025 17:00:14 +0000
Manifest next update: Sat 26 Jul 2025 17:00:14 +0000
Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
3: 9A16luPCk5IhyoBkFIK_ch_6NEk.roa (hash: YUMSqsjWHZSFmuwztOpT/BJPAUyhmWd6R2m1BEABazs=)
4: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
5: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: iqYnjUhgUCMpxeR5RU/ilXEbMzkZ3CVB2k7CxeaWmP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:36:b1:e5:0e:22:a5:5a:92:40:a3:f9:4a:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jul 25 17:00:14 2025 GMT
Not After : Jul 26 17:00:14 2025 GMT
Subject: CN=768393f62c67234d3300eef0c7ed4287c5cc992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:3e:c8:9a:4b:02:ef:de:7d:bf:7b:b6:19:
db:f8:16:b8:9f:20:2f:02:b2:91:a8:3a:19:30:1f:
ff:48:02:f5:3f:7b:a8:8b:96:9a:96:0c:68:6d:cc:
74:20:d4:a4:5e:ec:be:48:43:7a:9e:62:af:a8:14:
1d:2d:7b:2b:d8:21:92:86:27:69:33:a0:f6:42:36:
09:a2:d6:74:19:55:12:20:70:0f:e2:f5:f6:80:d1:
9d:06:30:d9:ed:06:5e:5a:a5:70:24:d3:50:61:f2:
ae:76:3b:f5:3c:6e:2f:df:ab:8e:2b:b4:a9:3a:a4:
a0:d4:d2:69:c6:09:2b:6d:b6:6c:98:8a:8d:b1:9a:
93:16:60:59:63:21:2e:7b:51:a8:60:87:f8:f2:90:
4a:10:04:a2:98:c9:27:85:61:2f:fe:95:96:7b:30:
ae:db:51:19:84:29:b4:b0:44:f8:4d:17:4f:de:74:
7e:de:60:fc:90:39:50:84:9b:af:3e:45:a5:5a:4a:
a2:70:43:15:9a:3e:e1:90:0a:02:29:fd:a2:9f:72:
65:2d:23:41:0c:e8:49:86:f1:9c:c5:ac:c0:e5:e2:
b3:09:2a:6b:0b:35:a8:d1:de:66:03:ed:05:4e:78:
c7:36:a0:9b:4f:b9:0e:6c:ce:11:fc:93:86:3f:d6:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:93:F6:2C:67:23:4D:33:00:EE:F0:C7:ED:42:87:C5:CC:99:2E
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:95:d7:b9:dd:bd:f9:52:5c:ff:03:e0:78:7a:4b:8e:c8:dd:
ad:c9:36:14:cb:44:87:04:ca:28:7b:ec:92:13:bd:79:9b:e7:
5a:0e:a2:3b:e9:f1:7e:ab:f9:75:04:b2:94:66:86:88:05:9f:
5b:84:76:09:5f:47:3d:d9:05:4a:55:06:df:18:ea:ff:6c:73:
a7:d1:f3:1f:dd:25:49:a8:fa:5c:26:25:91:82:27:40:7a:e8:
91:ff:68:1e:91:5d:bf:7a:13:0a:cd:11:a8:e9:0e:94:84:e6:
43:79:8d:43:d5:01:db:02:4d:77:f2:cf:05:29:67:e8:e0:5e:
34:90:dd:ae:8f:90:7c:b1:be:33:83:5f:34:bd:db:3a:ff:64:
52:fb:57:a6:4c:e3:9d:34:1a:e0:12:9c:8c:fc:61:e6:e4:6d:
34:4d:f5:8e:50:a5:d5:28:c8:2a:d3:85:a5:a7:39:b6:f8:10:
1d:0c:1c:20:58:4a:fb:1a:ca:03:b3:51:a4:b5:86:bb:75:ec:
a1:6e:c4:24:09:38:14:a3:b6:40:7c:e1:da:fa:ec:6d:ec:1a:
5a:1c:ae:3b:a8:50:f3:7d:cd:7b:c9:3f:eb:86:98:b3:1b:44:
83:9b:94:84:09:15:f5:d1:dd:6d:fd:05:46:f5:f8:db:1c:42:
ab:56:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:39:00 2025 by rpki-client