Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File: YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier: kivxXEm1u27eXwjPCCNjdP3McLnrrzdsHvIZOHS315Y=
Subject key identifier: F8:CF:6E:26:A8:49:C5:33:65:09:66:EC:8A:11:63:60:45:72:94:81
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial: 019A50E288257016999E8AE19E4DA1D3C2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number: 0695
Signing time: Tue 04 Nov 2025 22:00:14 +0000
Manifest this update: Tue 04 Nov 2025 22:00:14 +0000
Manifest next update: Wed 05 Nov 2025 22:00:14 +0000
Files and hashes: 1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=)
2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: fS9eh6htxPZPzoLZxX7MXCAsd9mEXZJAXXnWG34FmG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:88:25:70:16:99:9e:8a:e1:9e:4d:a1:d3:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Validity
Not Before: Nov 4 22:00:14 2025 GMT
Not After : Nov 5 22:00:14 2025 GMT
Subject: CN=f8cf6e26a849c533650966ec8a11636045729481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:46:4f:b2:9c:63:59:f4:b2:97:19:68:93:
c3:70:a7:7e:0e:57:b7:4e:07:12:a1:58:65:8f:c6:
f9:3f:55:5f:ba:03:7b:8a:84:79:29:04:10:ca:48:
34:8c:6e:70:9b:59:e3:93:09:62:3d:5b:43:98:a5:
fa:ef:af:55:ca:7f:0b:92:70:d5:22:44:4e:c4:b0:
2a:82:5f:8d:d4:6a:32:f2:9f:cb:6d:ce:5c:54:99:
6c:61:33:a1:e0:b3:21:b0:77:2f:d3:7f:fc:9a:68:
db:04:f3:9a:26:06:90:51:cd:5a:ff:bd:1a:42:21:
73:05:52:7d:c3:e8:ea:09:a5:68:4e:27:33:0d:ac:
55:30:f1:59:80:23:ac:fb:07:5f:8f:35:c8:85:ea:
ce:81:29:70:24:0b:62:04:71:41:1e:0d:6d:4f:52:
88:c6:2c:84:57:aa:3e:33:40:ba:22:3f:4a:8f:d5:
fd:5f:3e:f8:f1:e0:dc:0d:9a:12:4b:f5:ce:57:64:
35:3d:98:3c:27:be:42:bf:4e:47:65:90:f4:4e:93:
41:3b:e2:cf:1b:4c:d5:c2:9e:7d:6f:89:2b:be:7e:
e4:93:3d:1c:85:9a:33:4a:57:85:fe:46:e7:7c:ba:
58:ee:06:06:da:05:c0:e0:6f:d2:79:b2:92:d2:ca:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:6E:26:A8:49:C5:33:65:09:66:EC:8A:11:63:60:45:72:94:81
X509v3 Authority Key Identifier:
keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fd:de:61:d4:97:dc:2c:c3:4a:ae:9d:85:28:8c:e4:33:a2:
8c:29:f2:35:64:5f:30:2b:d6:46:30:5e:61:53:4c:af:6f:df:
62:08:b7:63:b6:21:2a:6c:46:9f:15:89:73:62:e5:c2:53:71:
50:93:81:38:c5:35:f2:ac:ff:c1:6f:6c:30:49:4a:62:f8:8f:
16:97:2d:e1:94:8e:d1:ce:5c:59:e2:5b:97:de:cf:e8:77:ca:
40:64:9a:63:4c:f7:ea:bb:ff:57:58:99:76:2d:60:80:93:5b:
07:ea:5d:b3:b6:a2:42:b6:52:0f:e6:16:68:45:22:2e:76:89:
79:60:6c:91:7b:bf:3c:77:7b:38:32:52:66:1a:fe:82:44:71:
53:96:4e:49:3e:bd:12:6d:fc:bb:64:a9:e1:8b:ff:4b:0a:3b:
a6:f5:d0:0e:89:34:bd:7d:8f:8f:67:a7:a1:c2:3e:c5:96:78:
50:33:2f:f4:57:12:2a:bf:46:79:8f:5c:b6:27:46:26:be:84:
b9:44:a5:35:77:c6:96:0c:19:0d:db:ab:fb:44:c9:f8:6f:0c:
fe:11:40:9f:bd:b8:0c:67:63:3b:20:1f:3f:61:61:90:7f:85:
06:0b:10:47:43:80:8b:61:ff:0a:1c:3e:ef:a9:ef:37:5a:2e:
81:04:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:44 2025 by rpki-client