Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: AL+3uYUY3/SMqNbIx5+MgwNauTcbPS/o4kC0WBmOV4c=
Subject key identifier: CD:CE:E0:5C:A8:E9:7F:1F:AF:CA:D5:19:2D:00:E0:39:9D:8B:CA:79
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 019A2289A59853D51A936F8BA9CC8B019F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0DDC
Signing time: Sun 26 Oct 2025 22:00:37 +0000
Manifest this update: Sun 26 Oct 2025 22:00:37 +0000
Manifest next update: Mon 27 Oct 2025 22:00:37 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: vmXHJltLZKcSKgpNe00/K5vZViuI8A/LHc3uKtQyaWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:a5:98:53:d5:1a:93:6f:8b:a9:cc:8b:01:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Oct 26 22:00:37 2025 GMT
Not After : Oct 27 22:00:37 2025 GMT
Subject: CN=cdcee05ca8e97f1fafcad5192d00e0399d8bca79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:44:75:40:b1:9c:16:f9:cd:02:e0:01:d1:
90:b3:6e:64:fd:a0:5d:37:ef:23:d1:8b:bc:33:f9:
1a:22:7d:9b:70:62:93:b4:9e:a7:c2:97:b0:35:28:
46:a1:a5:8c:b9:f6:ac:83:24:a0:36:20:b4:37:aa:
03:7c:fb:89:36:15:a4:41:43:05:1f:d1:2a:b2:96:
b8:d0:cc:03:28:da:5b:6a:70:e9:a5:44:11:c2:23:
04:fd:be:fb:06:de:c4:77:6b:dd:ab:da:a8:2c:a2:
08:53:2f:e3:f0:77:2b:8b:fc:9f:74:5f:99:d6:c3:
fa:3f:a4:d7:e2:a6:fc:14:41:9d:b8:6b:b8:34:6d:
01:31:17:fa:fb:e9:37:61:91:b5:2c:66:e4:3d:50:
5e:fb:56:61:15:61:92:12:b5:11:aa:65:8b:ea:ce:
9b:95:b3:ad:68:71:ad:48:20:d2:36:a4:7b:28:ff:
1f:52:26:85:a3:ac:98:94:45:ea:86:c0:7e:2c:28:
b1:09:d0:9c:41:c4:36:be:84:25:e5:64:8d:40:35:
95:fd:b9:01:6a:35:4c:3a:37:1d:c9:6c:4f:d0:90:
d3:d6:53:89:b4:9a:0f:8e:b9:e9:53:25:0b:2f:8c:
a3:d0:31:99:9a:c9:70:ca:08:49:35:a1:ec:a7:be:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:E0:5C:A8:E9:7F:1F:AF:CA:D5:19:2D:00:E0:39:9D:8B:CA:79
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:a7:bd:08:c5:cb:2d:64:ce:62:8a:a8:c0:33:10:e8:66:
6d:a7:40:4b:ce:c2:19:78:5c:07:52:1e:73:95:21:7c:08:b9:
03:36:da:84:5f:94:72:05:42:69:9b:46:ce:04:23:fa:3e:64:
53:71:e4:15:f9:38:4b:ee:b9:9f:45:ab:55:9c:a5:4a:c5:45:
81:3b:20:89:55:4f:21:3f:22:5e:0c:7d:c2:50:bd:72:82:22:
c6:f2:85:31:7f:73:c8:83:bb:58:15:c9:b3:cd:24:00:8e:c8:
0e:35:d6:51:fc:e3:e5:0d:c8:0e:4f:5c:45:50:2c:89:b9:7a:
25:52:da:67:5f:de:a2:5b:fd:d1:2b:44:b7:83:0e:36:b3:b5:
9d:eb:aa:bf:94:0c:1f:59:36:4f:ea:b2:d8:fe:90:62:eb:7c:
5b:4e:b6:21:a5:dc:aa:90:06:f4:53:07:3f:4f:fc:95:09:15:
24:2b:17:fe:e3:c0:9d:da:96:7c:57:4f:79:18:be:f4:17:a0:
47:57:d9:d6:c1:7d:01:43:85:ed:ac:29:1e:71:a2:b9:1b:4c:
60:43:99:49:62:f9:a3:1e:17:3a:fe:87:5d:41:2a:59:d3:74:
36:5e:a3:16:36:0c:67:8b:7a:44:b3:a5:90:1b:0f:f3:53:f0:
fa:0e:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:54 2025 by rpki-client