Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: rY/KPfiNOFVZcNkSJa322xlE/KCE2vrFWQxO3kb9Db8=
Subject key identifier: 21:68:AD:40:5D:4A:11:58:70:62:A7:25:64:AC:5E:67:2D:82:FD:DC
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 019922C326A083D9449B0563B584758E61A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0E90
Signing time: Sun 07 Sep 2025 06:00:38 +0000
Manifest this update: Sun 07 Sep 2025 06:00:38 +0000
Manifest next update: Mon 08 Sep 2025 06:00:38 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: Jylb5rC2oKhMRYizE4LPZZ69uCz40V08cchQTfStyi8=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:26:a0:83:d9:44:9b:05:63:b5:84:75:8e:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Sep 7 06:00:38 2025 GMT
Not After : Sep 8 06:00:38 2025 GMT
Subject: CN=2168ad405d4a11587062a72564ac5e672d82fddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:83:79:1a:7c:65:fb:b5:8c:4f:c7:12:08:
5e:f4:3d:30:09:30:bc:43:58:ce:14:90:33:df:0e:
b8:c1:9d:dc:5d:1c:ab:e6:a1:a9:9c:0f:78:9d:c5:
b3:c5:7c:c6:25:46:d6:2d:e5:33:08:6a:b9:c6:37:
48:dc:1b:18:12:9f:c0:f9:0a:fa:d8:35:58:aa:fa:
71:a8:39:d7:b6:3f:b3:2a:05:9a:e6:a1:1c:7b:ef:
b4:54:df:94:c6:22:b3:85:09:b7:02:73:47:40:d8:
8d:6e:30:a5:6d:4a:9b:99:fc:b8:83:34:63:4f:6b:
13:77:f1:98:82:75:bb:70:6f:d0:93:66:52:ab:12:
6c:28:10:b1:37:fe:a3:9f:19:d9:0a:13:52:d1:de:
e9:67:12:d2:cf:44:b2:2c:29:57:db:35:03:6d:3f:
07:1c:2d:f8:29:5e:da:15:fa:54:3f:a3:6f:6f:62:
4d:be:84:7a:f1:7f:9c:20:87:e9:60:a7:ba:32:38:
e5:6a:5e:0a:64:82:74:d7:8b:6b:8e:07:82:40:91:
ec:05:33:24:c4:94:3d:03:6a:28:24:7b:10:76:fb:
8e:44:f5:aa:22:01:fd:f9:da:ab:a8:c7:1f:6b:c3:
06:56:76:29:92:27:bd:08:a3:a3:a6:c4:e9:07:f0:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:AD:40:5D:4A:11:58:70:62:A7:25:64:AC:5E:67:2D:82:FD:DC
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:72:8c:91:0e:a1:b0:df:8b:ef:93:3e:88:1a:5f:88:84:
b2:7e:2c:47:c4:ee:95:12:bf:5c:21:9a:4f:d7:6f:99:6d:99:
2e:96:06:ef:be:49:7d:9c:a1:75:fd:d8:ba:7b:ea:eb:4f:8c:
36:78:36:67:17:4b:e4:c0:e2:5c:a3:28:57:ba:2c:f4:31:bd:
a5:3c:db:20:81:d0:40:09:db:bd:ac:67:4c:f9:db:17:8c:05:
1b:4b:bc:66:3b:ca:46:7e:f4:1c:34:1a:89:ab:2f:23:ea:38:
3c:49:9d:a6:7e:fc:eb:74:bc:5f:5f:d3:3e:55:e4:e7:54:7c:
03:36:c0:c1:9a:69:37:4e:5a:3a:f6:33:9f:93:d2:bb:a7:96:
b5:fc:f1:3f:b9:89:df:44:9a:3f:c9:13:e4:6c:3b:53:4a:e9:
93:5f:ee:d6:d9:83:a3:d7:89:7b:f1:3a:53:6b:9a:07:1b:f5:
5d:9d:ed:da:84:4b:dc:aa:1c:d5:0e:ac:3d:44:45:d2:3f:2e:
01:17:e8:1f:43:bd:f4:27:43:57:61:db:37:29:6e:32:b4:9b:
fb:89:af:4f:d0:bc:f5:dd:bc:ae:4f:63:df:85:cd:8b:0e:9e:
87:1d:5f:f3:f6:e4:10:45:c7:fd:22:55:ae:3a:83:29:62:de:
93:9c:44:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwyagg9lEmwVjtYR1jmGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4
MzM1ZTgwHhcNMjUwOTA3MDYwMDM4WhcNMjUwOTA4MDYwMDM4WjAzMTEwLwYDVQQD
EygyMTY4YWQ0MDVkNGExMTU4NzA2MmE3MjU2NGFjNWU2NzJkODJmZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQCDeRp8Zfu1jE/HEghe9D0wCTC8
Q1jOFJAz3w64wZ3cXRyr5qGpnA94ncWzxXzGJUbWLeUzCGq5xjdI3BsYEp/A+Qr6
2DVYqvpxqDnXtj+zKgWa5qEce++0VN+UxiKzhQm3AnNHQNiNbjClbUqbmfy4gzRj
T2sTd/GYgnW7cG/Qk2ZSqxJsKBCxN/6jnxnZChNS0d7pZxLSz0SyLClX2zUDbT8H
HC34KV7aFfpUP6Nvb2JNvoR68X+cIIfpYKe6Mjjlal4KZIJ014trjgeCQJHsBTMk
xJQ9A2ooJHsQdvuORPWqIgH9+dqrqMcfa8MGVnYpkie9CKOjpsTpB/BrIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCForUBdShFYcGKnJWSsXmctgv3cMB8GA1UdIwQY
MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt
MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx
LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAedyjJEO
obDfi++TPogaX4iEsn4sR8TulRK/XCGaT9dvmW2ZLpYG775JfZyhdf3Yunvq60+M
Nng2ZxdL5MDiXKMoV7os9DG9pTzbIIHQQAnbvaxnTPnbF4wFG0u8ZjvKRn70HDQa
iasvI+o4PEmdpn7863S8X1/TPlXk51R8AzbAwZppN05aOvYzn5PSu6eWtfzxP7mJ
30SaP8kT5Gw7U0rpk1/u1tmDo9eJe/E6U2uaBxv1XZ3t2oRL3Koc1Q6sPURF0j8u
ARfoH0O99CdDV2HbNyluMrSb+4mvT9C89d28rk9j34XNiw6ehx1f8/bkEEXH/SJV
rjqDKWLek5xEiw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:14 2025 by rpki-client