Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: qHzAdxYhZvs9tsAG0PDEMh/WIc6xvOAEB5208tHdBGw=
Subject key identifier: 89:84:61:AF:17:DA:F8:A7:E6:58:BC:ED:EE:C3:71:DB:BA:99:09:23
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 0199228D00E72BC833D2A8050BFA96C647C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 065A
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: tOo36ktW0gJL9UvMkwbmUcAPZdc32fsEYssu+VIEeig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:00:e7:2b:c8:33:d2:a8:05:0b:fa:96:c6:47:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=898461af17daf8a7e658bcedeec371dbba990923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:05:19:8d:56:81:43:ac:d5:64:68:df:75:
1a:70:f6:a5:f0:69:b6:19:85:06:bb:99:15:38:c9:
6b:9b:90:93:22:f6:94:eb:4a:53:bd:07:29:0a:72:
45:04:6e:14:19:8b:62:88:d4:71:32:8e:44:6f:3c:
f2:f4:80:fe:28:ff:df:3f:02:04:5e:50:c9:9c:0e:
83:71:cb:64:c0:90:b5:04:40:76:dd:95:d9:d0:58:
7c:9a:29:41:ae:89:8c:cd:a3:43:4d:3b:90:70:2c:
6d:8f:7f:be:a5:95:69:15:6c:30:d2:01:bf:91:5e:
a4:23:69:08:9b:50:74:70:2f:e7:bf:1f:04:d1:ed:
27:2a:8a:48:95:13:e4:c9:f7:c0:3a:ae:96:9f:93:
e7:55:5d:ed:91:78:aa:5d:11:91:c1:e1:e5:65:98:
85:5e:a9:30:b0:f7:3f:b1:8a:18:96:6b:32:c8:25:
dc:47:33:53:ea:0b:f4:9c:f8:97:62:da:b8:f3:8a:
cd:7d:7e:e6:45:c1:c9:fe:c3:5d:9b:3b:4e:c1:70:
57:8b:13:28:a3:39:d0:5a:90:85:53:15:5d:7f:ac:
16:0f:fd:f8:13:ce:a3:c5:d3:d1:dc:db:a4:4a:1f:
87:8b:5b:33:2b:64:d2:fb:31:89:c7:32:50:8c:ec:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:61:AF:17:DA:F8:A7:E6:58:BC:ED:EE:C3:71:DB:BA:99:09:23
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:29:bc:d7:36:c0:1f:17:c4:66:ff:f3:2a:c8:dc:eb:52:84:
56:76:f4:aa:77:94:9a:ac:87:aa:9e:4d:87:2c:30:06:e6:72:
77:65:8d:16:84:70:b8:60:6f:db:dc:5f:3a:ac:e7:43:73:bb:
81:14:76:de:34:af:63:d3:44:13:d2:a3:33:e5:56:59:a8:37:
26:cb:86:c9:f2:ef:20:96:72:3a:a8:e6:e3:82:69:ac:3c:1e:
4b:8a:96:0c:61:ae:55:42:cd:c3:6e:53:8f:26:01:a4:eb:6f:
8f:bf:16:91:b1:3e:b1:f9:26:ea:b0:86:38:51:1e:83:8b:02:
05:29:97:b7:40:67:64:77:cd:27:53:a1:21:a9:a1:d6:2a:a6:
ee:cf:5a:08:40:76:27:1c:47:06:e4:64:b1:49:9a:8b:9b:69:
7d:3c:0c:8e:84:c8:85:10:c3:2d:02:53:e7:c7:36:ed:4c:99:
c8:29:5c:ec:4f:63:98:44:db:66:39:2d:70:7f:de:96:2a:4c:
a9:28:79:98:de:29:6c:aa:58:0d:75:a5:c1:09:68:d5:cb:03:
84:c5:e1:2a:48:ea:97:da:4f:01:e0:8b:a6:03:a0:5c:7d:b7:
84:3b:e8:11:5f:04:96:30:ea:39:67:5b:dc:bc:cf:b3:bf:f0:
58:0f:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client