Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: cJ50/YCL4AHEiA+NFq5oiXaJy7sI+VYaqUZhNu5ITGo=
Subject key identifier: 36:B5:F4:9D:CF:5B:45:FD:5D:17:2D:F1:2F:14:CE:C0:AF:27:C9:83
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 01974742C18B67BF65760FE9BF17A3CDFD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 11B0
Signing time: Fri 06 Jun 2025 22:00:46 +0000
Manifest this update: Fri 06 Jun 2025 22:00:46 +0000
Manifest next update: Sat 07 Jun 2025 22:00:46 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: Vh6nan0ii23GTvBzndczOd/OB4/cZCHODpi7Qoj34Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:c1:8b:67:bf:65:76:0f:e9:bf:17:a3:cd:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Jun 6 22:00:46 2025 GMT
Not After : Jun 7 22:00:46 2025 GMT
Subject: CN=36b5f49dcf5b45fd5d172df12f14cec0af27c983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:2c:bd:4c:ff:5e:08:01:6f:e1:58:6a:d0:
6a:ab:fb:d7:d5:55:e7:a2:6d:c7:31:03:97:02:08:
f9:e4:fa:f4:74:69:34:16:c0:9e:60:0a:a4:77:d8:
c3:b6:41:68:c4:cc:0d:c1:40:de:cc:20:1f:47:ef:
f8:2f:26:d6:31:34:d7:c5:7a:0b:b5:e7:47:9f:b8:
a1:54:75:8f:da:b2:b4:a8:71:6c:44:69:81:1c:65:
aa:47:11:18:68:86:ac:59:d8:c0:ac:4d:d1:d6:e9:
6f:59:9b:9e:6d:29:ad:b2:76:78:fe:61:57:75:b3:
93:b4:d2:2d:97:19:76:4c:3e:67:5a:08:80:41:66:
f4:80:26:eb:64:2a:65:03:97:e5:50:2f:8d:55:8c:
66:39:62:74:01:ac:57:d0:65:91:6e:9d:f6:bf:30:
34:42:7f:e2:d2:08:e8:a4:4f:6b:3f:90:27:d4:0b:
12:f8:c1:e7:9e:f5:d1:2f:5f:73:e0:a0:b1:42:3c:
bf:45:8e:b1:b5:90:77:d9:7d:08:01:6b:d9:c7:7e:
2d:26:0d:9a:1f:46:49:af:dc:bf:c6:39:eb:b1:84:
44:16:77:43:24:f5:63:32:7f:14:1d:89:39:3c:5b:
73:d2:62:9f:fe:72:70:1c:1d:df:0f:de:05:3e:54:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:F4:9D:CF:5B:45:FD:5D:17:2D:F1:2F:14:CE:C0:AF:27:C9:83
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c6:69:e0:71:ad:61:f9:c9:e9:a6:46:39:85:79:bc:aa:73:
dd:2a:0b:cd:8d:38:07:ea:88:49:ae:dd:1a:c7:96:88:eb:82:
d5:ff:42:5b:ef:bf:49:8a:22:1e:5f:92:7b:1c:0c:04:30:4d:
59:eb:b7:34:f3:b7:22:9e:89:1b:9e:07:9d:22:e6:01:9f:f7:
b2:81:5c:75:e2:5a:4a:77:ed:b8:27:f1:08:23:c5:8b:ca:e7:
5a:a7:7c:b0:e5:32:42:e2:77:97:47:87:f6:20:c0:60:83:91:
fd:d8:07:85:64:9d:3b:9d:dc:06:79:d6:f6:9a:7b:a5:59:42:
3d:78:3a:d7:7e:f5:4e:85:d1:47:ef:8b:da:89:07:b5:dc:8f:
8b:e6:90:a4:1f:9b:19:c7:8c:87:8f:89:1e:40:e4:e0:42:4c:
bc:c1:3f:fb:f6:f1:e3:9b:5a:ac:06:6f:77:e8:5e:4f:44:ed:
2e:da:bb:51:5d:d8:07:d0:8d:37:dc:00:94:c2:37:f0:5e:6b:
f5:a2:3a:c6:4c:ed:cd:ab:7a:45:c0:00:56:22:26:7e:9b:fd:
13:0b:a1:93:3b:22:9d:c9:a8:11:f3:e1:f9:48:4f:05:e1:e3:
8d:80:3c:f6:fc:b4:ab:f4:e1:4b:f2:71:30:4b:19:1f:0e:42:
62:0c:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:30 2025 by rpki-client