Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
File: yuzkHLwsMGJu8qKNGDny1sR1fz8.mft (raw, json)
Hash identifier: Fvf3cHOMGh4DehWxDX9th/5fGWryn9mC5Egn1L/mtng=
Subject key identifier: 8F:62:6F:82:3C:99:7C:1B:16:8E:2D:62:12:96:E6:F2:9F:51:D3:8D
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01992DB5361F97A3964ABC4F5008B2C268B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
Manifest number: 1683
Signing time: Tue 09 Sep 2025 09:01:14 +0000
Manifest this update: Tue 09 Sep 2025 09:01:14 +0000
Manifest next update: Wed 10 Sep 2025 09:01:14 +0000
Files and hashes: 1: 4e_esTadQCaE3n5sXcrWU4jOosk.roa (hash: 6WRB/tXZjMM79bwzWzJPIybrouf6h4CCu2BnZyX47DM=)
2: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (hash: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=)
3: HCBFWHPbguHhYNXyj3CYrDXYNWo.roa (hash: YWHjbWrm4zcEsBNnp7QDqMn1mBuhsTvb3ueYJ3IoUgs=)
4: V_-pi-_FRBXageOHGy8QNDeBiFk.roa (hash: VgqGvjscQM+9CLy4OZeK0OAAcSQ66x9VqqFHfhpG7Dw=)
5: YzdSzrn2g46QLg-Ab4yA5f8O1xU.roa (hash: juEIYlvSOfWVe6E6l6/j9UJcOILOSNhDvqnCdtQBLU0=)
6: hDp1-1e9H-OB_XxdhBwbZmZOjwU.roa (hash: RlVKHFwEDLlyQQzASoSjM9hIAoQIeVOrf1r1UW38OlQ=)
7: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (hash: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=)
8: yuzkHLwsMGJu8qKNGDny1sR1fz8.crl (hash: 1yrlvO1UIW36+VjwK6bnPWzs2tvbaF+bPmmamsuz3/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:36:1f:97:a3:96:4a:bc:4f:50:08:b2:c2:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Sep 9 09:01:14 2025 GMT
Not After : Sep 10 09:01:14 2025 GMT
Subject: CN=8f626f823c997c1b168e2d621296e6f29f51d38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:82:69:44:d9:01:56:1a:23:d4:04:f4:8d:
65:4a:10:9d:07:2c:34:af:be:53:34:0c:58:c9:ea:
c6:16:e4:f7:57:20:98:88:f3:31:52:ef:c8:8b:55:
08:3f:c9:90:1d:3f:af:67:01:27:7a:89:e1:de:a4:
da:a1:dd:83:d6:03:6b:1b:60:ff:2f:ee:bb:60:ca:
9f:70:d8:43:0e:07:7d:ef:8a:2c:9d:52:f9:00:42:
80:fc:3e:f2:87:4f:62:90:4a:b0:31:42:d7:79:50:
66:35:0d:21:78:78:c6:af:8b:70:08:07:85:ae:2d:
6d:18:80:55:20:e1:f8:d5:2d:ee:ee:90:77:ec:bb:
31:e1:56:69:ca:05:55:7c:52:85:50:59:1b:77:49:
01:5f:30:cf:c2:27:d3:77:e8:51:37:fb:b8:a7:97:
37:a4:32:b3:f3:80:34:20:96:8a:c8:e0:7f:1a:71:
8f:e8:ec:02:51:17:d0:6a:af:8e:d9:63:cf:98:82:
fe:2f:18:c2:0e:92:52:c2:52:9e:8b:6b:cf:5a:51:
39:69:d7:1f:46:a4:17:a1:dc:e6:04:e5:e4:29:7f:
8a:5c:97:e4:da:78:03:e6:38:e6:10:7e:37:d3:39:
54:41:f2:aa:67:8f:d8:44:f8:f3:40:f2:3d:06:4e:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:6F:82:3C:99:7C:1B:16:8E:2D:62:12:96:E6:F2:9F:51:D3:8D
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:0f:0b:ab:89:5b:7c:ee:ca:c7:63:b9:3d:22:e3:62:48:
5f:e6:30:af:74:bd:c3:c7:88:ba:a6:25:56:60:b0:2b:44:35:
90:65:f7:fa:f3:69:11:13:1d:05:a1:22:e6:b3:cf:96:12:72:
c5:cd:5d:3c:52:ff:f6:6f:0b:de:d6:af:cc:84:b8:11:ad:99:
35:f9:0c:e2:f9:98:86:8e:41:43:2b:88:6a:ee:11:c4:f1:9a:
03:d0:eb:80:98:c0:b4:45:ee:a0:dc:f2:34:c3:59:4f:63:f6:
9d:af:2e:85:30:8a:6b:42:45:bd:00:be:99:0c:cf:bf:8b:04:
31:d1:ad:b4:66:62:c1:cb:0b:2e:76:47:59:65:d4:d0:0d:59:
03:9d:aa:db:a2:a4:d3:7e:c8:e3:b4:71:ab:17:99:3b:95:28:
ef:19:ff:eb:00:7e:72:96:27:9c:c1:11:d0:f3:ad:0f:2a:97:
83:e1:67:64:2e:63:2b:28:73:bc:6f:16:31:89:e4:36:1a:b3:
08:e8:d1:27:5f:d9:2f:d4:eb:71:67:f9:41:be:7d:75:7d:da:
a7:3d:8c:b3:bf:87:51:66:37:fc:d6:d8:d5:dc:12:e6:f9:84:
b2:0c:2c:c6:02:35:76:bc:7a:f5:5a:17:de:f6:ec:f9:f1:15:
64:d7:24:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttTYfl6OWSrxPUAiywmizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3
NTdmM2YwHhcNMjUwOTA5MDkwMTE0WhcNMjUwOTEwMDkwMTE0WjAzMTEwLwYDVQQD
Eyg4ZjYyNmY4MjNjOTk3YzFiMTY4ZTJkNjIxMjk2ZTZmMjlmNTFkMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjqCaUTZAVYaI9QE9I1lShCdByw0
r75TNAxYyerGFuT3VyCYiPMxUu/Ii1UIP8mQHT+vZwEneonh3qTaod2D1gNrG2D/
L+67YMqfcNhDDgd974osnVL5AEKA/D7yh09ikEqwMULXeVBmNQ0heHjGr4twCAeF
ri1tGIBVIOH41S3u7pB37Lsx4VZpygVVfFKFUFkbd0kBXzDPwifTd+hRN/u4p5c3
pDKz84A0IJaKyOB/GnGP6OwCURfQaq+O2WPPmIL+LxjCDpJSwlKei2vPWlE5adcf
RqQXodzmBOXkKX+KXJfk2ngD5jjmEH430zlUQfKqZ4/YRPjzQPI9Bk7dBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9ib4I8mXwbFo4tYhKW5vKfUdONMB8GA1UdIwQY
MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt
ZDg1MWU0MGQ1N2JmLzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm
LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtwPC6uJ
W3zuysdjuT0i42JIX+Ywr3S9w8eIuqYlVmCwK0Q1kGX3+vNpERMdBaEi5rPPlhJy
xc1dPFL/9m8L3tavzIS4Ea2ZNfkM4vmYho5BQyuIau4RxPGaA9DrgJjAtEXuoNzy
NMNZT2P2na8uhTCKa0JFvQC+mQzPv4sEMdGttGZiwcsLLnZHWWXU0A1ZA52q26Kk
037I47RxqxeZO5Uo7xn/6wB+cpYnnMER0POtDyqXg+FnZC5jKyhzvG8WMYnkNhqz
COjRJ1/ZL9TrcWf5Qb59dX3apz2Ms7+HUWY3/NbY1dwS5vmEsgwsxgI1drx69VoX
3vbs+fEVZNckkw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 14:29:48 2025 by rpki-client