Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: jSU/XyoEk/O87cTjMGnYElKBr3xhird8umnBg0v9qVs=
Subject key identifier: BC:DA:67:C9:6A:68:51:D5:77:C4:2F:A6:37:58:A4:6E:8C:BB:70:4B
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 019A71EE5BC8D9E6F9DF5BCAD4612A3E9BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: bIrk5WNeDaXUJ0VuFcOv4QC2rcy90d/tzN9keQ4mGFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5b:c8:d9:e6:f9:df:5b:ca:d4:61:2a:3e:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=bcda67c96a6851d577c42fa63758a46e8cbb704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:e8:27:11:08:ee:06:23:5b:2b:c2:48:01:
3e:a8:95:13:5d:58:ca:d7:61:a8:6a:bb:a1:1e:05:
3e:1d:b3:d5:ad:52:be:d6:da:84:c2:e9:75:29:32:
26:28:3e:b3:70:b8:9f:45:db:53:9a:48:b3:03:68:
68:da:d8:ff:56:91:94:de:3d:76:c8:b4:61:77:b3:
b7:ca:d9:ba:f6:9c:90:46:00:a9:1a:8a:85:32:e2:
a3:42:43:38:53:28:c9:81:75:c5:ca:ab:38:3e:05:
ea:92:e7:6c:1d:9c:69:93:70:ae:36:cb:aa:82:4e:
2f:4d:af:35:70:9f:61:d3:bf:de:c0:5c:6a:63:4b:
e2:00:21:b5:b7:8d:7f:99:30:4a:a7:21:4c:f1:b0:
18:77:ec:c7:d6:12:b8:ee:e0:6f:2a:10:81:e9:e7:
0c:c7:9c:71:c6:49:d1:bf:82:ed:56:d6:b3:c5:71:
f9:fa:de:d9:0b:0b:5d:d1:10:8e:1c:9c:1f:3a:3e:
ad:50:d4:63:f7:0e:f1:dd:82:46:01:a0:f4:21:ea:
46:96:98:ba:f2:38:ae:b4:2d:a9:03:4d:aa:4a:2b:
f7:21:e6:57:54:a1:4a:a0:cc:79:46:2f:61:74:26:
1d:fe:97:5e:03:5c:5d:e9:16:b5:b5:3e:28:97:38:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:67:C9:6A:68:51:D5:77:C4:2F:A6:37:58:A4:6E:8C:BB:70:4B
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c8:6b:b1:61:02:c0:e8:1c:4e:77:de:30:21:30:b9:cb:36:
12:98:d4:56:ce:86:13:e9:48:f3:ba:1c:c8:2a:11:4d:0a:e9:
0c:26:d0:46:48:ea:b3:26:03:59:bf:75:6b:4c:09:57:37:2f:
87:b5:56:6d:a4:16:f2:41:d2:36:ef:13:a5:aa:b5:db:4d:0a:
88:ff:fa:07:ec:60:7e:43:d0:37:6f:1a:58:4f:b8:e4:bc:c2:
73:3e:8d:77:74:09:bc:45:5e:da:d6:ce:51:24:1b:4c:17:35:
e2:03:7b:03:13:3f:95:a7:cf:b0:86:f8:26:5d:9d:2a:ef:56:
97:38:61:f7:a9:3f:32:6a:79:d6:00:ef:08:51:f4:17:02:fb:
46:ae:70:7b:46:4b:53:f9:8c:09:8b:c8:03:6e:c7:31:c6:34:
93:00:61:bf:80:a7:f1:ee:ea:1a:44:2d:ea:1a:40:ef:6c:59:
ca:a5:c5:98:99:c4:70:8f:a4:0c:5e:3c:ea:77:08:11:98:06:
af:a5:4c:46:59:e6:80:02:f7:bb:e0:36:0c:0f:aa:8b:41:72:
f7:ba:e5:23:e4:73:e4:f5:de:1e:fb:c0:66:43:ab:1a:5f:d4:
b4:e2:3e:5f:f6:d3:32:59:56:50:7a:a5:d2:de:ff:d8:74:ac:
97:84:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:13 2025 by rpki-client