Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File: YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier: 3R4MkBYN5tF0szSHxPxXhpqnCEFHV8yZNHae1h/Pe2M=
Subject key identifier: D5:CF:D5:88:BF:32:5E:4C:E4:88:61:EB:53:57:F8:C4:2C:2D:81:DE
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial: 019A71B90BBD2F053CE483861B907539AA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number: 06A6
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=)
2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: baDfCsdRvvbZWOzqF1Zy5e2xAAFjXrepLOObnEAtiSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0b:bd:2f:05:3c:e4:83:86:1b:90:75:39:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=d5cfd588bf325e4ce48861eb5357f8c42c2d81de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:a7:39:b1:94:3b:c5:40:e0:18:f4:c0:7b:
55:4d:5c:c3:7f:e1:ca:37:53:88:3c:97:c8:8e:5d:
da:aa:f1:da:fb:e9:a9:9b:b4:4e:60:56:f0:26:12:
2d:e3:33:7e:e2:f5:27:04:92:c9:d0:cf:07:02:67:
47:b5:ab:f6:64:5d:c8:e3:44:35:fa:05:c6:27:c9:
e3:e8:5c:a7:43:2f:17:59:c9:92:46:e3:97:bc:f3:
e2:42:15:a6:0d:a4:c2:77:c1:cf:0d:2e:09:47:69:
88:d0:42:73:1e:2d:09:f7:d9:b5:bf:9d:24:8c:06:
bc:7d:97:76:ca:5e:03:2c:12:dc:29:ce:a5:10:7c:
55:30:a8:d4:a0:84:56:e8:78:42:86:c6:7c:30:00:
94:1d:ca:58:98:1d:02:43:e2:dd:55:e9:ec:00:0b:
43:e1:28:a0:03:d4:f4:1b:1b:63:44:96:b3:40:22:
ed:6e:87:bb:50:2d:65:29:ef:db:a6:12:07:92:29:
02:3e:bc:82:9d:4f:17:f7:78:e6:c0:2b:b3:9e:06:
61:cf:c4:4e:1d:36:e2:c9:94:98:87:c2:de:54:1a:
10:1f:48:31:5a:95:08:14:b8:a4:10:9e:2c:1d:d4:
8b:79:a4:c7:92:2b:e6:76:4c:9c:b2:73:a1:03:dc:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:D5:88:BF:32:5E:4C:E4:88:61:EB:53:57:F8:C4:2C:2D:81:DE
X509v3 Authority Key Identifier:
keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:1f:9b:43:ba:79:5b:c5:6a:ed:a0:d9:3a:72:cb:94:ca:
b1:0c:a4:45:7b:f3:ab:12:a0:ed:75:eb:27:2b:61:d2:45:34:
35:08:ff:0b:88:5c:9b:ed:16:9b:34:c0:6b:f4:ee:fd:b6:bc:
0b:44:17:13:8d:2c:a6:7d:81:30:41:22:f0:77:5e:e6:d2:72:
ee:05:73:c7:83:b8:ce:3d:5c:76:29:a7:ef:de:f2:e3:1f:66:
65:2e:a5:26:e0:1b:50:2d:e1:76:e8:69:63:f9:92:a8:d7:19:
96:62:03:e2:ff:fd:d4:cd:f1:18:e9:eb:c2:ca:a1:32:d2:59:
d2:dc:0f:11:66:80:4e:6f:a7:a6:c8:78:00:3d:67:a2:e6:dd:
42:69:ca:ff:0a:5e:98:1e:38:9d:14:63:a2:57:b3:a9:99:b5:
cf:86:af:0b:06:1d:64:b0:fa:3d:8c:77:d7:01:02:d6:49:25:
d1:eb:8c:89:55:3e:44:34:12:e6:71:ad:e6:b2:c8:70:22:30:
1e:90:a1:39:f5:6f:13:14:e0:df:7e:0d:cf:07:80:ed:80:87:
fc:b3:41:11:60:00:df:e7:e0:7c:29:da:86:61:6d:2b:08:e8:
a6:0c:f4:a9:24:95:c1:90:05:a1:e6:a7:71:9a:33:37:30:e4:
fc:5c:a0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:38 2025 by rpki-client