Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: cSUF5kUfZTxo5PRbR7szT1OipOHftZnY6S1bVxL9RoM=
Subject key identifier: 56:E0:7D:3F:26:72:6E:C9:67:C3:CA:D8:62:0D:34:93:44:E7:65:A7
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019A725CA576C80892E68A1CC096052FCF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 1354
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 3q8ElrC4pJ1oZxb8t/HCMtb4U1JTw+0NoUubWIIR5yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a5:76:c8:08:92:e6:8a:1c:c0:96:05:2f:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=56e07d3f26726ec967c3cad8620d349344e765a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:d0:4f:3c:32:26:6d:75:5e:ad:e8:c1:6b:
b8:90:c0:9a:5f:a2:a6:2f:1a:79:2e:92:86:47:66:
bc:10:36:4a:8e:d3:63:cd:45:be:6d:06:8c:89:a8:
57:d5:ef:04:39:c1:78:88:9b:13:d9:40:ce:48:81:
57:e4:59:54:b7:26:8f:64:ae:e2:f2:5f:21:d2:44:
fc:08:bb:1b:78:9d:56:a8:f7:18:9d:23:c4:cc:45:
2e:bb:33:ec:e7:b5:2d:8b:ff:b7:8e:6f:88:ca:ed:
7d:ff:5b:f6:88:1a:0f:30:99:b6:f9:2e:2a:19:90:
26:96:98:88:61:9c:cf:b6:d5:01:c4:8a:a3:cf:64:
70:68:4c:a6:c4:9a:2a:d6:4e:fb:3d:4a:7c:61:32:
45:b6:28:9e:8d:5b:e9:7f:de:16:4b:c7:86:e0:c6:
5d:f5:a3:fb:d4:e5:4c:a1:97:9e:19:86:43:57:c5:
4e:77:0f:90:62:7d:80:da:bb:e6:d1:86:e1:94:9b:
d7:4d:70:87:4b:63:26:d8:95:97:98:3e:16:1c:7b:
9d:cc:ad:60:5c:5c:e8:61:40:bf:1c:f1:c9:40:d0:
93:55:d0:1d:8b:7b:8a:a9:9b:26:e6:c8:a9:0d:68:
7a:f8:13:ca:c6:17:0b:11:cd:86:76:d9:1a:71:27:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:7D:3F:26:72:6E:C9:67:C3:CA:D8:62:0D:34:93:44:E7:65:A7
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:64:42:d6:f6:4f:ec:17:7c:cc:01:b1:9d:46:04:2b:67:
7d:39:76:bb:37:f5:39:48:83:85:d7:14:7e:16:b9:9b:5f:27:
04:ed:6d:0b:2e:40:69:ec:e6:8f:b9:4b:7d:54:54:c5:01:e1:
1b:de:b3:5f:70:8d:53:45:1c:cc:85:36:55:29:07:a0:41:d8:
86:7f:f3:1c:77:0e:8d:e6:d3:c5:db:e8:45:0c:d5:ed:1c:22:
57:d1:95:f6:13:51:82:1f:70:10:7b:8f:c0:ad:a1:04:52:ed:
65:fd:d2:79:d9:b6:80:3d:80:15:02:28:86:76:3c:8c:d9:57:
5f:59:ff:d8:e8:96:8c:aa:78:de:13:da:f4:04:e7:6c:2e:72:
6f:73:27:7c:e5:fb:4f:f2:9b:fa:18:9d:f9:be:19:bc:a5:fe:
8c:70:c3:d8:6d:a0:2e:34:d7:26:fc:90:c1:1d:ca:b9:88:92:
bc:a0:a0:de:61:20:56:0a:6f:3e:08:69:98:23:d7:e8:8f:b4:
97:d6:95:4a:26:c7:48:0b:fc:47:fb:23:4d:7a:5d:07:db:c4:
8d:68:7f:e2:53:12:af:88:79:3c:91:73:a2:71:c4:b0:28:22:
b8:93:ab:0d:de:02:73:5c:c3:00:47:d2:97:67:53:d1:ef:a4:
b3:fc:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client