Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: NkrT/5LGK8S206evdglUyzDKoyu/R4A79AW2BSSB2H8=
Subject key identifier: 65:C9:7F:A5:8B:BC:19:31:2B:23:56:70:46:22:FB:23:3A:84:4D:42
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 0198462D87F840454DD216E6344FE163E932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 1234
Signing time: Sat 26 Jul 2025 10:00:45 +0000
Manifest this update: Sat 26 Jul 2025 10:00:45 +0000
Manifest next update: Sun 27 Jul 2025 10:00:45 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 2LFQGFcMvBLMMpFhpWo5dod8wNWzcJ30d8RJJPxEtkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:87:f8:40:45:4d:d2:16:e6:34:4f:e1:63:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Jul 26 10:00:45 2025 GMT
Not After : Jul 27 10:00:45 2025 GMT
Subject: CN=65c97fa58bbc19312b2356704622fb233a844d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:90:97:1f:49:f3:1e:a3:3c:5a:2a:8b:5f:
a1:2e:f6:04:7d:bf:5e:5a:95:aa:2c:f7:8f:c5:81:
39:80:43:a7:a2:13:cf:73:a8:61:e8:6e:3c:7a:fd:
ae:5f:fc:fb:ea:02:38:6c:87:6b:72:ce:c1:5b:9e:
d1:35:e0:f3:79:01:f3:71:f7:74:e3:aa:28:a1:2e:
c5:2d:82:22:4c:47:87:32:67:63:e1:ff:2f:84:73:
01:b2:74:2e:67:e1:87:50:f4:35:a7:ee:44:2d:01:
89:f1:85:d9:96:1a:11:eb:aa:68:24:08:f6:b2:2a:
1e:9a:8a:d2:2c:af:6f:89:6a:46:01:d9:da:3b:c7:
42:77:ab:58:d2:68:9e:6a:a9:84:01:34:b4:b3:74:
32:40:4b:c7:45:0b:a7:f5:c8:2d:b5:3c:66:1c:27:
90:c3:92:b2:8a:c8:c6:1b:aa:a2:c6:c2:eb:7a:d4:
d7:71:6c:a4:91:4d:b8:8d:e1:ff:e0:a2:8e:34:4a:
c3:d2:ae:bc:b1:24:8e:33:ca:a1:d4:38:bc:25:db:
6b:40:6e:ce:0d:a8:51:76:1e:f7:3f:51:80:8d:52:
c0:0e:fa:fa:a6:01:37:8a:fe:b7:8b:56:25:d2:01:
9d:24:1f:00:a3:2b:36:a1:f3:d6:97:03:6f:c0:c6:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:7F:A5:8B:BC:19:31:2B:23:56:70:46:22:FB:23:3A:84:4D:42
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:90:18:1f:49:73:33:59:be:86:d9:b1:33:f6:71:2c:b5:3c:
87:36:5f:62:f6:72:a0:b9:ab:86:b3:69:83:65:60:b0:40:55:
24:36:e6:d1:45:e9:a6:3c:52:5d:1f:2b:2e:7f:64:47:af:cd:
59:e9:4c:cc:fd:6c:64:e9:7e:4b:4f:e6:23:3d:45:59:70:e7:
0f:4d:d2:23:4f:f0:b1:57:fb:6e:38:4d:a1:ef:e1:02:8c:5a:
76:7e:cf:34:65:13:f4:62:a3:bd:aa:04:4a:17:47:49:08:a9:
87:b1:d6:a6:60:ed:e2:fc:40:00:f0:5e:96:94:8d:c7:df:1b:
e5:b2:19:a4:d5:26:e7:ce:6f:19:c7:8f:8c:74:b3:e3:6b:34:
cc:91:b3:c4:1e:41:5e:b5:73:f2:27:af:89:35:3e:68:4d:90:
21:7d:b4:15:d0:5a:97:fc:e0:30:5a:71:b2:fd:69:df:6e:04:
3b:e9:84:eb:30:4b:22:ac:3d:26:9b:94:20:6b:e1:e3:65:d2:
69:ca:8f:ff:cf:ea:55:62:37:d5:b7:4d:ab:1c:1e:91:f5:ce:
bd:9d:19:12:bc:b7:60:aa:93:ad:da:d6:a7:bf:ff:b1:84:6c:
04:72:1e:b9:ad:ca:44:ec:8f:e6:d4:46:4a:ac:d1:e0:6d:5d:
c2:91:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:42:11 2025 by rpki-client