Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: AxLu2FlLUK6gHEUcEyjHyyawnfCPKZuEAeFh5yO0JLc=
Subject key identifier: 57:AA:80:B6:B7:99:DF:78:27:D7:B2:D8:E8:CC:4A:98:10:55:44:B8
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 01974AB1CA238F3DE1CBEFC01E3C11EEECEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0CB6
Signing time: Sat 07 Jun 2025 14:00:54 +0000
Manifest this update: Sat 07 Jun 2025 14:00:54 +0000
Manifest next update: Sun 08 Jun 2025 14:00:54 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: GgLi5urGWpYFpAcqVD+R/GFBG6PKc8OMHwT8QjLFiLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ca:23:8f:3d:e1:cb:ef:c0:1e:3c:11:ee:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Jun 7 14:00:54 2025 GMT
Not After : Jun 8 14:00:54 2025 GMT
Subject: CN=57aa80b6b799df7827d7b2d8e8cc4a98105544b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9a:fd:8a:54:4a:5f:e8:cb:ca:10:12:78:15:
e7:3b:6d:a6:cd:3a:2a:dc:16:12:77:c0:a1:d1:47:
84:d3:8c:56:a2:14:f7:d1:5b:5a:74:f1:5f:f4:c1:
26:78:70:7a:43:1f:d0:53:7d:11:03:ef:7a:fc:8c:
46:d5:43:84:d2:4b:e5:a9:9e:c3:91:5a:c0:9f:7b:
73:cc:ec:32:c9:8c:de:09:5c:b4:53:8a:ee:3b:34:
22:6e:04:df:76:7c:27:21:49:03:f8:7c:e0:48:5d:
de:3a:59:de:13:65:b7:a3:99:a8:2e:a7:dd:ab:04:
79:d7:d1:6c:14:c6:bd:ee:c2:d2:ad:43:f4:e2:df:
47:88:10:cf:57:99:ce:49:2a:02:58:68:ba:f6:4c:
d8:af:24:3d:bd:38:ea:9c:97:2f:65:31:cd:e5:ee:
ff:bb:25:03:7c:c8:d8:27:1c:ba:e6:95:ac:d0:94:
f1:13:36:19:d4:a6:64:a7:4a:97:ff:9a:c3:de:dc:
6d:da:e9:42:b5:a0:d6:40:58:72:17:77:2e:50:82:
3f:c5:6f:60:c3:73:6f:d1:91:29:2d:3d:f4:55:8d:
09:e2:00:b6:a7:12:21:80:98:2a:09:51:5e:99:7f:
1a:f2:92:41:a5:b6:a1:2c:74:34:b8:fa:d6:52:48:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:80:B6:B7:99:DF:78:27:D7:B2:D8:E8:CC:4A:98:10:55:44:B8
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:63:4b:48:ee:92:8f:29:69:b3:0b:b7:b1:41:7e:88:4d:
c5:8d:02:35:30:ec:eb:51:54:b8:76:0a:25:0e:a3:70:44:12:
bc:f7:ab:8b:f0:b3:68:4c:cf:88:7f:88:16:46:17:d7:18:3f:
fc:cf:19:24:66:62:f4:65:14:a3:ba:2c:59:b0:cf:2e:ef:af:
f6:53:91:6e:6a:a6:df:50:6a:19:e4:e4:c5:1c:31:38:ef:c6:
30:b3:f3:e2:04:61:86:9a:c2:5d:d0:85:18:0c:08:9a:9f:f7:
e1:6c:b4:56:a0:d1:f0:09:47:91:fa:80:fb:07:71:3a:6e:94:
e6:fa:69:33:63:c2:dc:af:a0:8a:7d:30:f1:41:1a:ad:ec:1a:
ed:ff:fc:fc:d9:95:5a:34:62:ff:a1:11:0f:69:a5:85:a8:fb:
28:94:7f:79:0e:84:d7:14:9d:ff:82:cd:35:4e:b8:f5:29:00:
48:95:8d:62:cd:bb:0b:90:42:42:77:86:d6:95:fb:9f:33:41:
46:42:eb:64:96:b6:71:9e:8e:26:12:a7:f2:a5:fa:dd:ee:a3:
2c:2a:f0:06:70:d3:23:8c:00:e4:50:43:09:97:37:54:3b:38:
f0:2a:5c:58:a0:72:d4:e5:fd:9a:60:73:9c:7c:ff:92:0d:91:
4a:33:82:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKscojjz3hy+/AHjwR7uzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2
NTVlYjYwHhcNMjUwNjA3MTQwMDU0WhcNMjUwNjA4MTQwMDU0WjAzMTEwLwYDVQQD
Eyg1N2FhODBiNmI3OTlkZjc4MjdkN2IyZDhlOGNjNGE5ODEwNTU0NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jr9ilRKX+jLyhASeBXnO22mzToq
3BYSd8Ch0UeE04xWohT30VtadPFf9MEmeHB6Qx/QU30RA+96/IxG1UOE0kvlqZ7D
kVrAn3tzzOwyyYzeCVy0U4ruOzQibgTfdnwnIUkD+HzgSF3eOlneE2W3o5moLqfd
qwR519FsFMa97sLSrUP04t9HiBDPV5nOSSoCWGi69kzYryQ9vTjqnJcvZTHN5e7/
uyUDfMjYJxy65pWs0JTxEzYZ1KZkp0qX/5rD3txt2ulCtaDWQFhyF3cuUII/xW9g
w3Nv0ZEpLT30VY0J4gC2pxIhgJgqCVFemX8a8pJBpbahLHQ0uPrWUkg4DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeqgLa3md94J9ey2OjMSpgQVUS4MB8GA1UdIwQY
MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt
YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx
LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLVjS0ju
ko8pabMLt7FBfohNxY0CNTDs61FUuHYKJQ6jcEQSvPeri/CzaEzPiH+IFkYX1xg/
/M8ZJGZi9GUUo7osWbDPLu+v9lORbmqm31BqGeTkxRwxOO/GMLPz4gRhhprCXdCF
GAwImp/34Wy0VqDR8AlHkfqA+wdxOm6U5vppM2PC3K+gin0w8UEarewa7f/8/NmV
WjRi/6ERD2mlhaj7KJR/eQ6E1xSd/4LNNU649SkASJWNYs27C5BCQneG1pX7nzNB
RkLrZJa2cZ6OJhKn8qX63e6jLCrwBnDTI4wA5FBDCZc3VDs48CpcWKBy1OX9mmBz
nHz/kg2RSjOCvg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:45:48 2025 by rpki-client