Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: SwLrceGNKezqDVAWh4jOm9h5SbFTIcj9WUuo5kWisTQ=
Subject key identifier: 55:77:22:F2:AB:0E:90:98:37:EF:5F:41:FD:E6:D4:D8:99:49:16:08
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 019A7293A156BE7035E9FBD07F6681FD4306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 0708
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: W5vPFB61iHgRnu1mT1+3BwDZcHYxDx6xzARBTggpW/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a1:56:be:70:35:e9:fb:d0:7f:66:81:fd:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=557722f2ab0e909837ef5f41fde6d4d899491608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fe:e7:35:f5:dc:43:cd:a5:34:ca:22:7e:b6:
0b:47:e4:6f:15:45:44:50:f5:cd:29:50:9a:54:3f:
c5:fb:8a:72:5c:27:8a:ee:8f:9c:a7:c1:f0:f8:76:
6c:88:12:38:0c:20:32:03:97:db:45:15:37:cf:f7:
b0:74:16:c6:fc:b4:46:df:f2:2d:bd:a8:8d:94:81:
46:5a:76:5b:e5:43:81:81:52:b6:8d:13:17:28:8a:
bb:71:d4:e9:6c:8a:d5:a7:89:f5:0e:f8:ee:e7:ae:
a3:f5:2a:c6:f9:03:b7:22:91:8c:37:0c:ab:de:81:
ac:03:5e:a4:11:f1:e5:03:f6:9c:41:30:9c:e1:f0:
fc:6e:61:ba:75:5a:8f:dd:df:08:0f:74:94:db:d1:
d6:85:ff:fe:a6:ca:6c:14:af:81:04:69:12:97:81:
36:6d:2c:60:a9:55:17:3d:71:c1:28:03:fa:a8:38:
ab:2e:cd:a1:17:cf:60:ab:84:b6:d4:4d:8a:01:d5:
88:68:4e:26:ca:ca:3c:14:2d:0e:8e:f6:54:26:5d:
29:dc:4b:8a:f1:94:db:f2:46:7b:d2:b2:33:ac:16:
37:6e:3e:23:0f:3b:19:de:3f:cd:5a:47:69:76:92:
f1:1f:27:c1:b5:5f:0c:96:70:11:ee:48:8d:e4:9d:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:22:F2:AB:0E:90:98:37:EF:5F:41:FD:E6:D4:D8:99:49:16:08
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cc:ac:b1:24:71:69:66:d0:c2:86:fe:52:ba:13:ac:2c:c4:
f2:70:17:e9:0e:4f:ed:be:71:dd:be:09:58:c4:2d:ac:85:c4:
77:d8:0a:1a:e3:88:f3:ed:b5:8f:26:2d:f6:b5:76:f7:40:b2:
38:d2:30:e5:92:d5:d0:8f:e7:ba:f2:a1:14:f1:a1:69:32:50:
ca:c6:91:61:11:89:c8:f4:76:6d:60:49:7b:2b:bb:63:00:8c:
6c:67:b2:99:e0:86:28:07:ec:29:54:83:4f:93:26:60:c4:cc:
4a:bf:b2:e7:11:3e:3c:19:ea:3c:fb:51:3a:4b:3c:2b:74:08:
06:d1:4e:9b:a9:2d:71:1a:4f:b5:91:9c:45:db:ae:41:90:a6:
7e:53:42:d6:ed:2f:06:9d:95:7c:67:27:4d:6b:f8:63:8d:b2:
57:34:3f:36:49:90:8f:9c:bd:c4:f9:5c:74:e8:ac:a6:11:ce:
53:99:b5:3b:0c:76:73:03:88:d9:b5:a7:cf:69:e3:71:c5:35:
e5:68:b2:9e:13:88:e5:47:52:4f:c1:4f:4e:d9:1b:cd:1a:60:
01:c6:16:e9:b9:f9:d9:75:7e:24:cf:73:1b:54:9b:43:72:79:
7d:c1:d2:a3:ab:f8:b5:3c:84:c3:54:9d:3c:f1:fe:de:34:72:
27:f5:3c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6FWvnA16fvQf2aB/UMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTMyMjUxZjExYmNmZTk5M2QyNTQ3ODAyNGMxZTYxZGQ0
N2E3OWYwHhcNMjUxMTExMTEwMTA4WhcNMjUxMTEyMTEwMTA4WjAzMTEwLwYDVQQD
Eyg1NTc3MjJmMmFiMGU5MDk4MzdlZjVmNDFmZGU2ZDRkODk5NDkxNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/f7nNfXcQ82lNMoifrYLR+RvFUVE
UPXNKVCaVD/F+4pyXCeK7o+cp8Hw+HZsiBI4DCAyA5fbRRU3z/ewdBbG/LRG3/It
vaiNlIFGWnZb5UOBgVK2jRMXKIq7cdTpbIrVp4n1Dvju566j9SrG+QO3IpGMNwyr
3oGsA16kEfHlA/acQTCc4fD8bmG6dVqP3d8ID3SU29HWhf/+pspsFK+BBGkSl4E2
bSxgqVUXPXHBKAP6qDirLs2hF89gq4S21E2KAdWIaE4myso8FC0OjvZUJl0p3EuK
8ZTb8kZ70rIzrBY3bj4jDzsZ3j/NWkdpdpLxHyfBtV8MlnAR7kiN5J2OUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV3IvKrDpCYN+9fQf3m1NiZSRYIMB8GA1UdIwQY
MBaAFMrjIlHxG8/pk9JUeAJMHmHdR6efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDct
ODFmOTk2NmU0MjcxLzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MjRmZmItYjk4NC00OTkwLWE4NDctODFmOTk2NmU0Mjcx
LzEveXVNaVVmRWJ6LW1UMGxSNEFrd2VZZDFIcDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsyssSRx
aWbQwob+UroTrCzE8nAX6Q5P7b5x3b4JWMQtrIXEd9gKGuOI8+21jyYt9rV290Cy
ONIw5ZLV0I/nuvKhFPGhaTJQysaRYRGJyPR2bWBJeyu7YwCMbGeymeCGKAfsKVSD
T5MmYMTMSr+y5xE+PBnqPPtROks8K3QIBtFOm6ktcRpPtZGcRduuQZCmflNC1u0v
Bp2VfGcnTWv4Y42yVzQ/NkmQj5y9xPlcdOisphHOU5m1Owx2cwOI2bWnz2njccU1
5WiynhOI5UdST8FPTtkbzRpgAcYW6bn52XV+JM9zG1SbQ3J5fcHSo6v4tTyEw1Sd
PPH+3jRyJ/U83g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client