Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: PhDRE7ZELkNJK+KdcjssZMfPT/ve0OJjeTx1eZryG1E=
Subject key identifier: 36:A0:4A:CD:3C:6B:8E:29:F9:BC:75:86:B8:5A:AA:1F:93:4C:4D:F3
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 01987E9C86BE621250B478D00EACE1E15478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0E3B
Signing time: Wed 06 Aug 2025 09:00:43 +0000
Manifest this update: Wed 06 Aug 2025 09:00:43 +0000
Manifest next update: Thu 07 Aug 2025 09:00:43 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: jFBsWgMi7yWzvbQk5BuS/knn5BVTa0+tPQBV6k6xizk=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:86:be:62:12:50:b4:78:d0:0e:ac:e1:e1:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Aug 6 09:00:43 2025 GMT
Not After : Aug 7 09:00:43 2025 GMT
Subject: CN=36a04acd3c6b8e29f9bc7586b85aaa1f934c4df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:97:b9:b2:a4:2f:49:d9:ab:f3:aa:b4:96:
ae:dd:df:a6:81:6d:d0:0e:0c:37:92:70:1e:dc:23:
ce:0f:94:42:b1:47:95:53:56:46:c4:c6:1e:f2:17:
c3:e7:c8:cc:a9:9f:45:39:5c:21:10:62:80:df:ab:
84:de:1c:2f:92:94:8f:b6:73:70:00:45:71:5b:17:
da:7a:08:ea:86:5d:88:a9:41:b8:38:f0:d0:67:77:
93:3b:f9:06:12:2d:8d:45:bc:7a:95:33:8f:48:fd:
15:83:fc:73:66:85:65:73:01:c1:43:21:84:26:30:
55:2d:bf:d3:86:e2:92:66:01:8c:b8:8b:10:d9:0c:
1f:a4:b5:4d:fe:c1:48:9b:08:bb:d1:c5:e0:a8:3c:
ef:92:47:ce:2c:24:35:ee:64:5d:f3:5b:12:ce:a1:
0c:34:e6:4e:54:3e:36:6e:0a:dd:39:ca:7d:d8:ec:
bd:1b:73:2c:c3:06:0d:78:7e:d4:73:75:ad:59:7f:
ba:cc:a8:ea:9b:34:b2:b7:73:a3:77:ae:c3:7e:6e:
c8:69:f3:05:65:89:23:e2:51:c3:fa:e2:4a:fa:c8:
9c:d6:a8:48:bf:0e:21:10:6c:ae:ba:b8:2a:c1:ad:
30:f6:7d:8f:23:6a:f1:72:12:a1:bb:94:d5:2b:31:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:4A:CD:3C:6B:8E:29:F9:BC:75:86:B8:5A:AA:1F:93:4C:4D:F3
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:d2:a6:c7:99:56:7f:28:b5:a3:ae:8c:4c:d2:0c:cc:96:
d4:33:83:93:94:c6:a9:33:e0:08:2c:71:35:7a:23:cc:a6:86:
89:8f:a7:84:9a:a4:3f:ca:85:e8:61:7d:99:cd:22:4b:79:51:
f8:4e:22:04:cb:9b:0d:41:b2:6a:e5:07:5c:f3:07:94:76:c6:
21:09:9f:61:e0:31:e5:c2:f5:2d:75:a8:4f:e9:c9:3a:58:03:
b9:b7:bb:c5:b1:1d:95:e7:17:19:82:b6:1a:86:da:11:97:b3:
92:11:87:fe:5e:4b:e9:c6:d7:e3:bc:8d:8b:a5:78:98:36:f3:
0d:d7:32:6d:bc:74:d6:9e:75:41:58:20:32:85:ad:82:4f:3d:
61:2b:d5:b4:a8:ce:3c:ba:72:c5:a5:c0:af:9c:69:05:1f:45:
bc:9b:94:f5:8d:08:27:e2:6b:1e:91:36:fa:cc:8d:75:02:7d:
03:6a:d7:09:90:6c:ed:b3:72:c7:6b:4a:c3:46:67:79:3d:cb:
7c:04:1e:dc:ad:14:0e:d4:b5:94:26:09:f8:57:e8:92:a5:9c:
8c:50:1f:98:da:b5:1f:99:fa:4c:08:45:42:34:b9:8d:57:be:
d9:42:60:f5:e1:99:40:10:f9:14:d8:1e:86:ac:cb:09:08:71:
45:b3:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:08 2025 by rpki-client