Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: vW7H3UKgeIF0IRiB9vSF7rEEx1/qg1jSSWf98qyim+4=
Subject key identifier: E3:0F:98:55:D0:23:00:DD:3E:E2:15:D5:25:AB:86:55:86:9E:21:BF
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 01987418FD12768F5F6FAE5CC64F0E38FC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: aghAYVkvHa3cQPYWrjDs6U3YkaCEeJlLdz2MdvQ8JIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fd:12:76:8f:5f:6f:ae:5c:c6:4f:0e:38:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=e30f9855d02300dd3ee215d525ab8655869e21bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:87:91:fa:a9:47:3d:4b:f3:4d:1f:d0:37:
15:c8:e0:ec:3b:cd:82:94:c4:45:3e:b4:26:cc:7e:
69:14:1e:28:71:b9:95:3b:e1:54:4a:20:6c:42:52:
f2:b0:30:5f:40:39:72:93:04:dd:c0:b3:ff:4d:2e:
b1:5f:47:53:10:b6:b6:cd:06:bf:a2:b6:63:5a:95:
b1:2c:bd:08:66:55:57:ad:ca:12:b5:9c:f7:56:aa:
bb:94:ca:16:45:34:c2:b9:3f:10:08:aa:4c:09:14:
7e:33:54:5f:f9:ee:80:65:a4:8e:f6:af:53:a4:1e:
39:7e:9a:81:1b:07:b3:96:03:4d:5f:95:8b:81:48:
b4:a1:13:38:d0:72:3c:91:b3:ad:1e:f6:48:7b:09:
91:45:8b:80:a9:ae:56:13:2b:1c:46:c9:95:a4:1e:
05:cf:d6:3a:75:0e:13:cb:a5:f7:a2:db:09:aa:41:
1f:8e:7d:db:86:00:ca:63:56:a0:99:31:87:96:ea:
4f:43:3f:da:b8:37:35:2c:ef:b2:e7:96:fc:d4:45:
74:70:50:95:3c:64:b0:dc:af:65:ad:61:b7:ff:b7:
85:dc:f1:62:aa:8b:b5:60:5c:df:e3:70:ea:96:47:
0d:7b:14:9c:5e:f9:6c:cd:3a:45:a2:fb:5b:58:3a:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:98:55:D0:23:00:DD:3E:E2:15:D5:25:AB:86:55:86:9E:21:BF
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:97:6f:fb:01:9b:fa:0d:b8:5c:db:a6:a0:cc:89:12:19:
20:cd:e2:b5:e2:b5:a1:42:ab:06:71:84:b6:fe:b0:e5:6a:a8:
72:71:8e:29:b7:11:2d:dc:18:e3:b9:fa:c5:e1:f3:f5:73:bf:
33:47:48:f9:19:35:e8:e7:86:b1:e7:1b:a2:79:4f:38:d2:79:
a7:77:2a:a1:c2:91:25:3a:f5:23:9a:0c:fb:cf:21:7a:d1:85:
2b:90:63:70:a7:9b:af:29:94:ad:e1:2f:4d:f0:db:1b:c1:98:
3d:f4:64:b3:bf:1d:fe:94:26:aa:69:62:c7:24:34:f2:92:ae:
a9:f4:e9:8b:c9:3c:29:a9:58:1e:be:90:63:03:59:ab:8d:c9:
bd:2b:d3:f8:9e:a5:6f:21:12:18:83:23:31:04:72:3d:8e:8e:
08:ab:10:15:35:83:c2:79:2f:14:78:7f:0b:76:c9:ff:d4:5b:
03:01:8f:95:81:f9:11:78:45:c0:ed:54:28:6c:7f:79:b1:99:
fa:2f:f0:44:1b:6f:dd:9d:68:d2:83:46:93:fb:29:3d:6d:1d:
69:e6:a3:85:bd:53:db:74:3f:6c:e0:98:25:ef:4b:09:70:83:
18:f4:d3:f7:5f:b8:d0:06:01:aa:a1:77:bc:46:e5:5d:0e:a7:
bd:4a:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:45 2025 by rpki-client