Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier: arpyBxclA/UrRz2XKyVFBrDl0wzKmJUY4Q3kuEXq+jA=
Subject key identifier: AA:B1:62:4B:91:37:48:5F:E6:6B:2D:E8:64:0F:6B:F7:94:C4:74:37
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial: 0199350014A9AD70CD7608A4C45E82C40CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number: 0D61
Signing time: Wed 10 Sep 2025 19:00:21 +0000
Manifest this update: Wed 10 Sep 2025 19:00:21 +0000
Manifest next update: Thu 11 Sep 2025 19:00:21 +0000
Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: SRz/cwj5QhmzNxRQtEo86k2HIg76/fnSQnVlFcDW0vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:14:a9:ad:70:cd:76:08:a4:c4:5e:82:c4:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
Validity
Not Before: Sep 10 19:00:21 2025 GMT
Not After : Sep 11 19:00:21 2025 GMT
Subject: CN=aab1624b9137485fe66b2de8640f6bf794c47437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:14:9f:b6:e9:2e:4b:b7:8e:7a:82:5c:57:
9b:32:6f:0b:c5:55:f0:63:ce:19:e1:17:c9:64:f0:
a4:4f:b6:69:b2:c7:42:cd:d0:59:40:4c:52:4b:22:
ad:89:76:02:3e:06:59:c4:66:b1:a9:15:db:10:af:
33:a2:36:95:ef:62:97:6f:ad:b1:00:17:8b:37:c1:
a3:2e:2e:0b:88:1e:37:7b:8b:8c:34:03:7c:e0:af:
06:c2:d4:fc:c3:84:8d:72:fb:97:f4:06:8a:46:a2:
f3:e7:68:ff:e5:a0:db:c5:23:a4:cd:60:f9:f6:83:
49:7d:f9:70:e9:a2:85:71:82:75:d3:5a:7b:d1:47:
73:f3:bd:90:42:35:c6:a2:a3:0c:f3:53:e8:a3:b6:
9a:f0:c1:c4:38:7a:de:19:51:98:60:09:52:53:6a:
e7:e2:a6:3d:70:7a:72:69:54:16:03:f9:d7:2d:53:
18:47:0a:69:b0:98:92:b8:54:6e:60:b2:e0:cb:30:
24:ac:e5:59:68:4a:51:8d:11:8d:0f:f8:9c:25:5f:
ce:6e:c8:56:4e:f4:59:9f:11:81:24:81:8f:98:ab:
01:22:d0:6d:a5:76:b2:01:23:f2:58:b2:d4:bd:e4:
43:f6:03:26:e4:44:3f:da:ac:98:23:3e:6d:94:b1:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:62:4B:91:37:48:5F:E6:6B:2D:E8:64:0F:6B:F7:94:C4:74:37
X509v3 Authority Key Identifier:
keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ee:f7:14:db:0d:db:31:c1:22:c9:f5:fa:78:fd:fa:58:c5:
ea:ba:b5:09:72:ef:aa:32:d4:ef:19:f7:10:8b:ec:07:0a:5b:
39:14:cc:5a:33:14:c3:87:ca:0b:db:3f:b6:bf:16:23:75:60:
fa:cd:8d:41:d9:98:d4:79:7d:37:40:25:3c:06:cf:4b:68:3e:
92:d8:b7:f4:f4:f7:f6:39:f5:98:51:60:c0:07:ca:f3:97:54:
7c:2f:e9:6f:d3:4c:12:14:e8:ae:68:a6:00:0a:39:7c:e9:72:
2f:93:f9:22:1f:b5:78:36:2f:98:00:bb:74:57:2d:81:4d:22:
d7:7c:18:f7:30:cb:fb:f2:2f:c3:69:c2:f2:de:e6:24:01:1c:
be:95:94:3c:90:76:4a:82:95:85:e5:38:8c:83:b1:20:71:e7:
05:bf:6e:53:27:60:42:23:52:5e:78:f0:16:3b:5e:24:61:01:
d3:91:6e:42:4a:f8:2c:7a:17:3e:ab:ee:1b:c1:5a:a3:4a:f0:
e9:ac:6a:35:a6:80:26:fd:ed:cd:14:c3:6f:30:1c:af:b2:5a:
80:37:df:5a:a6:c1:54:e4:9c:2b:23:70:9a:35:fb:ae:40:76:
60:0e:17:68:6b:7d:d6:5e:70:9f:ca:ab:6d:5e:af:a9:d3:d0:
ac:e0:21:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1ABSprXDNdgikxF6CxAz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0
YTJmMTkwHhcNMjUwOTEwMTkwMDIxWhcNMjUwOTExMTkwMDIxWjAzMTEwLwYDVQQD
EyhhYWIxNjI0YjkxMzc0ODVmZTY2YjJkZTg2NDBmNmJmNzk0YzQ3NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8wUn7bpLku3jnqCXFebMm8LxVXw
Y84Z4RfJZPCkT7ZpssdCzdBZQExSSyKtiXYCPgZZxGaxqRXbEK8zojaV72KXb62x
ABeLN8GjLi4LiB43e4uMNAN84K8GwtT8w4SNcvuX9AaKRqLz52j/5aDbxSOkzWD5
9oNJfflw6aKFcYJ101p70Udz872QQjXGoqMM81Poo7aa8MHEOHreGVGYYAlSU2rn
4qY9cHpyaVQWA/nXLVMYRwppsJiSuFRuYLLgyzAkrOVZaEpRjRGND/icJV/ObshW
TvRZnxGBJIGPmKsBItBtpXayASPyWLLUveRD9gMm5EQ/2qyYIz5tlLFBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqxYkuRN0hf5mst6GQPa/eUxHQ3MB8GA1UdIwQY
MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt
Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm
LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe73FNsN
2zHBIsn1+nj9+ljF6rq1CXLvqjLU7xn3EIvsBwpbORTMWjMUw4fKC9s/tr8WI3Vg
+s2NQdmY1Hl9N0AlPAbPS2g+kti39PT39jn1mFFgwAfK85dUfC/pb9NMEhTormim
AAo5fOlyL5P5Ih+1eDYvmAC7dFctgU0i13wY9zDL+/Ivw2nC8t7mJAEcvpWUPJB2
SoKVheU4jIOxIHHnBb9uUydgQiNSXnjwFjteJGEB05FuQkr4LHoXPqvuG8Fao0rw
6axqNaaAJv3tzRTDbzAcr7JagDffWqbBVOScKyNwmjX7rkB2YA4XaGt91l5wn8qr
bV6vqdPQrOAhQQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:31:33 2025 by rpki-client