Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: diOXmPTEjw+s9Ttmy4qD+caW2zZj5VURXfrUc53YW8M=
Subject key identifier: 5F:9B:44:D2:7C:03:E5:C5:DD:6F:B3:1A:2C:63:5E:41:C2:B4:40:4C
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019A4F9962213B3E5FB097EA2BDEA962C008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 1342
Signing time: Tue 04 Nov 2025 16:00:43 +0000
Manifest this update: Tue 04 Nov 2025 16:00:43 +0000
Manifest next update: Wed 05 Nov 2025 16:00:43 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 4X8hbWMq/jeImboU/x7QqUaMOukJIJ7VRuzwlM1k6Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:62:21:3b:3e:5f:b0:97:ea:2b:de:a9:62:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Nov 4 16:00:43 2025 GMT
Not After : Nov 5 16:00:43 2025 GMT
Subject: CN=5f9b44d27c03e5c5dd6fb31a2c635e41c2b4404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:ec:10:9f:a2:05:e4:4f:9f:ed:15:40:4c:
63:c1:94:74:28:62:f0:c9:a3:a5:fc:9b:5b:4c:8b:
c0:b6:d8:24:2b:a7:6f:2f:e1:f8:7d:be:21:f7:fe:
f1:17:b1:1d:9d:98:74:b9:90:56:a7:7f:20:4d:0c:
e6:c5:ed:14:88:fd:01:ef:79:d1:90:42:3f:e4:94:
a7:d7:19:7b:ac:e9:85:c3:e6:7a:ea:8a:09:45:65:
14:2f:45:7d:11:7b:c8:6f:c2:30:e1:2c:c5:d6:04:
9e:28:54:0e:68:a1:08:8d:7c:0d:11:e0:6d:62:56:
77:ac:c1:63:97:e0:79:79:46:70:46:01:be:5c:ab:
a7:5d:9b:15:dd:b4:db:64:c2:85:e8:3f:3d:c1:11:
f9:cf:b5:85:4e:b1:50:90:74:dc:43:71:f4:d3:e6:
09:7c:a7:23:c9:36:3f:82:c4:a0:84:ef:43:5b:88:
d5:f0:06:e5:4a:2e:c0:3e:f1:f3:d6:80:0c:2c:1e:
6b:da:64:06:5c:65:cb:ee:3c:5e:dd:cb:14:73:01:
ea:3a:aa:4f:d5:00:ce:2b:2a:00:ce:37:58:e0:54:
64:41:25:4f:71:6e:fb:e6:9b:a8:9f:e1:f6:05:1c:
e7:6d:cc:2b:d6:51:73:37:c0:6b:6d:6f:bd:6e:3f:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:44:D2:7C:03:E5:C5:DD:6F:B3:1A:2C:63:5E:41:C2:B4:40:4C
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:66:8b:cf:fb:9e:83:93:60:f8:db:25:3b:e8:4a:d0:b9:
65:f4:1c:04:aa:9a:a5:bd:a4:10:27:df:2c:2b:17:7e:b8:fc:
d2:d1:fe:87:ba:05:98:28:98:04:09:e6:af:58:ea:e3:18:5f:
7d:84:fc:16:91:aa:f5:19:09:13:f2:f9:bb:5c:e9:43:67:4a:
cd:78:95:99:8c:bd:d8:de:c1:07:1f:1e:0c:82:01:b1:69:db:
c4:cd:36:1f:92:a8:8f:f6:4a:a9:48:39:cf:6b:ff:cf:7a:ec:
77:1c:06:68:b2:04:14:53:17:24:dd:58:a2:0e:10:8d:f6:9b:
ed:64:1e:2b:52:b4:da:7a:ee:a7:f1:43:85:77:64:0f:67:39:
ee:c3:1c:06:38:96:d5:c0:4b:36:3e:47:d5:58:3c:61:3a:95:
16:41:93:f0:eb:e1:ab:ab:4e:62:14:94:4e:7f:22:23:45:a2:
73:13:b0:9a:d8:14:10:34:53:28:15:53:de:ce:96:f3:52:06:
10:59:a0:34:24:af:07:2c:78:06:28:72:94:81:46:8d:49:4b:
62:4f:1b:36:54:4d:c8:de:6a:ea:61:58:3a:bc:75:e1:0f:2b:
22:11:80:ba:75:06:7c:89:58:9e:99:a1:43:b0:1d:f0:7a:06:
0a:a6:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:22 2025 by rpki-client