Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: y2BbOTTphgl4ltyI5ZkBxC6pNek9wcZBraX+dTr4xME=
Subject key identifier: 14:52:5B:AC:88:C0:37:AF:80:A5:C5:DD:53:78:C4:DF:1F:8F:9E:D1
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 01993349516C380CDE3C38AD1F4ADC4EFD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0DB3
Signing time: Wed 10 Sep 2025 11:01:06 +0000
Manifest this update: Wed 10 Sep 2025 11:01:06 +0000
Manifest next update: Thu 11 Sep 2025 11:01:06 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: Sby4TnyihUTBthp0yNNGOF+8gpEyOLqM+HhZ2Q3JlXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:51:6c:38:0c:de:3c:38:ad:1f:4a:dc:4e:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Sep 10 11:01:06 2025 GMT
Not After : Sep 11 11:01:06 2025 GMT
Subject: CN=14525bac88c037af80a5c5dd5378c4df1f8f9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:99:46:d4:cc:a2:8a:a6:cb:33:c5:59:50:
c2:cc:78:45:3e:f3:bb:f4:37:ea:ce:ad:53:1e:ad:
7d:25:48:46:5d:e1:26:88:2d:a0:c2:fc:31:f6:6c:
2b:d2:ed:b9:83:32:ac:b4:d5:05:f4:cb:bc:de:19:
61:56:a0:0c:bb:67:8b:06:1a:ee:a1:35:2d:fb:d3:
b2:9c:36:8c:ba:77:46:6b:0b:f2:f8:a7:28:93:ce:
9b:d4:91:35:dd:b6:05:7d:b4:c4:e6:3d:61:4f:9e:
af:04:5d:ac:18:f8:24:e9:28:ea:67:35:ae:5e:7b:
1b:6c:20:cb:54:bb:de:e6:b5:1f:dc:bb:47:cf:95:
8d:7f:4b:38:f4:f9:a5:ac:bd:8f:53:16:4d:46:30:
89:9c:b0:80:b6:9f:46:35:0d:74:90:0e:2c:4f:8b:
c9:0b:03:2b:e8:f1:6b:f7:d3:28:8b:83:a0:f5:6b:
6f:6a:99:5d:26:56:b8:da:66:fa:db:d9:d9:18:7c:
8c:ba:76:c7:bd:43:4f:e0:a8:31:10:a0:27:3e:c3:
89:d7:2b:d3:b3:30:02:1c:5a:86:47:9f:26:1f:c4:
35:77:f7:88:f5:30:c7:86:25:c5:67:31:ce:24:a4:
a5:ff:a8:7f:01:26:dd:f2:f0:cb:5a:ff:04:34:61:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:5B:AC:88:C0:37:AF:80:A5:C5:DD:53:78:C4:DF:1F:8F:9E:D1
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:58:da:a1:33:86:8d:cc:64:5d:e0:46:51:15:0d:9b:2a:
05:8c:ad:6b:40:0f:69:64:99:d1:4b:08:a5:fe:00:d9:e5:46:
0a:7c:f4:7c:28:be:13:78:f1:87:d5:d6:e7:15:c1:93:3a:89:
25:01:4e:1c:d2:90:e8:a1:38:54:1c:c7:73:12:28:53:c1:f7:
e0:06:f8:12:d7:43:03:1a:f5:a2:03:b5:5b:bf:2b:0d:8a:bd:
f5:18:52:3c:ba:10:e1:93:db:7f:96:36:ae:f7:0c:42:c4:f2:
74:de:ef:c7:35:f5:eb:09:89:4e:e8:76:0d:1c:9a:9f:5b:cd:
dd:5d:0e:e4:cc:a6:6c:58:23:eb:01:4f:7a:bc:00:51:82:cf:
d4:dc:c6:c0:9e:3d:e1:1a:ca:3c:14:65:9f:62:5f:51:0d:b4:
f7:d7:70:02:6f:a8:6f:8b:63:56:3f:3c:0c:52:00:72:61:54:
66:09:43:71:3b:f1:92:bf:e3:67:9b:d8:70:5b:a5:96:8e:fe:
b4:07:e1:58:f8:12:f6:f9:ff:5e:33:d0:92:15:b5:83:47:7d:
ab:2d:9f:c8:71:30:e9:59:5b:f7:76:28:89:ee:33:c0:fc:d7:
89:5c:8b:2b:91:c3:8d:f4:44:d5:39:50:22:74:1e:a1:6f:72:
16:b9:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:14:05 2025 by rpki-client