Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: Z3CJQvC/4njgrvtM1+jFQcusyE7d9pzrBJ0cfaHOtfo=
Subject key identifier: 4A:3B:C6:A3:F6:E5:46:97:51:36:56:FD:39:77:2E:DD:AA:42:83:AC
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 019A4D3D2B1CE2788144B4E05A08022EB1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: OduzBTxDRuiiukTB19CauPKGXUUR7PSGM/PGzVzcRU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2b:1c:e2:78:81:44:b4:e0:5a:08:02:2e:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=4a3bc6a3f6e54697513656fd39772eddaa4283ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:00:b7:91:58:1f:8f:1f:76:64:1c:d4:6f:
92:92:a6:53:0f:a1:74:67:e7:cb:67:8b:0a:a4:e0:
9c:0a:2a:1f:9e:07:a8:9c:e6:56:c4:81:5c:26:d2:
25:f0:ef:ee:7a:28:99:36:1d:07:ce:52:07:89:07:
9c:d3:fa:c2:fd:c6:a1:a4:6b:78:66:80:ff:d8:85:
96:10:34:aa:48:73:10:4b:54:11:52:4f:38:19:94:
b5:c0:f8:c2:d4:85:c0:c3:1e:20:c8:38:56:2e:1b:
c9:b5:ed:0f:81:a6:0f:03:4d:c2:a6:1e:11:e5:1a:
c0:30:33:91:0a:1a:9a:a2:f5:18:4f:67:a9:8d:ef:
09:8b:66:d5:63:45:e3:22:7f:fc:39:9e:b6:bd:82:
73:be:66:05:e1:91:f7:73:f1:fe:f0:93:f9:7e:a7:
0f:7b:69:c0:8a:a5:cb:95:c0:96:92:aa:de:7a:a5:
61:29:30:87:cf:ac:e7:41:da:15:30:ac:0c:af:79:
df:03:a2:9c:ff:a7:9b:08:a7:61:2e:3f:56:ff:b8:
2e:76:b5:12:26:e6:90:0c:f1:ed:74:26:c2:2d:86:
65:28:95:3a:37:e2:d2:75:67:a2:46:ca:8e:a4:e4:
e0:1b:e3:3d:ae:6e:da:5d:28:98:25:de:22:3c:78:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:C6:A3:F6:E5:46:97:51:36:56:FD:39:77:2E:DD:AA:42:83:AC
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:2e:b2:c9:18:c0:6a:88:37:7b:17:dc:3a:11:dc:d3:ac:
ef:73:95:37:38:d9:50:40:62:12:3e:65:68:3c:07:75:5b:fc:
3e:63:db:51:22:72:f4:d7:52:3e:82:64:e9:db:8d:5e:00:b1:
c2:58:d7:1f:e3:d6:6f:92:38:f6:66:85:e6:03:6d:a2:da:55:
37:ce:a3:68:b2:31:f7:4d:20:78:5b:86:95:09:2e:61:9a:df:
23:22:90:0c:91:14:6c:d5:c0:b4:d1:b4:76:ec:3d:f9:26:f2:
75:1e:85:41:c1:2b:cf:76:38:bd:73:cd:47:4a:9e:e0:b3:11:
74:64:95:95:e8:98:fe:73:5d:26:53:c5:0e:cf:15:c3:50:e6:
b7:f0:78:d9:91:6e:47:a6:fc:88:60:fe:8a:9d:9b:53:3a:9c:
a2:c3:ef:71:84:45:f5:f5:10:7f:c6:ec:c1:28:a3:e7:3b:7b:
c6:f3:e1:23:53:f1:ce:af:1a:4e:c8:bc:a8:2d:57:1d:c1:33:
8d:a4:a5:c3:82:8e:a8:be:53:ab:66:37:e9:41:cc:54:cd:92:
a2:dd:0f:9f:3c:a3:6f:f3:58:9d:57:74:c9:da:75:75:5f:19:
ce:d8:90:fb:bc:fe:a9:42:0e:b1:00:2b:53:6b:27:12:31:e6:
98:52:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:43 2025 by rpki-client