Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: NL0sSN9cP72msMro3wip/qJO6JzL2pTdXTCNURl0IzY=
Subject key identifier: 2C:B7:F2:1E:3C:B2:FE:20:94:30:9B:04:04:4A:97:23:E9:53:53:30
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 01987298F38E64A39E12CA0550B8A924434E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 124B
Signing time: Mon 04 Aug 2025 01:01:23 +0000
Manifest this update: Mon 04 Aug 2025 01:01:23 +0000
Manifest next update: Tue 05 Aug 2025 01:01:23 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: m3RMtjmMQ0kMMWjEK7zUAzWBXRmqNbPKva0bNfrGpBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f3:8e:64:a3:9e:12:ca:05:50:b8:a9:24:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Aug 4 01:01:23 2025 GMT
Not After : Aug 5 01:01:23 2025 GMT
Subject: CN=2cb7f21e3cb2fe2094309b04044a9723e9535330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:43:10:d3:1b:04:12:4f:63:76:1b:45:35:
c2:0e:2e:72:1a:b5:32:18:0e:29:bc:a7:ae:10:10:
29:39:e8:ef:a0:53:a3:d4:7b:9c:f2:32:8f:3a:04:
07:97:f0:78:06:ca:17:46:e8:a2:50:3e:a0:3f:49:
7d:7a:bb:85:0e:59:88:da:3f:a1:9e:12:77:b1:da:
85:e8:98:c8:64:86:c2:09:54:e1:57:81:c2:77:32:
e1:5e:a7:89:59:cb:52:b4:a7:53:d1:c3:16:7d:bc:
ad:40:a4:d5:de:f3:fc:ee:c8:c4:57:32:b3:20:61:
1b:10:9d:83:86:cf:e3:d6:43:9a:8b:cb:30:ae:f4:
ce:48:85:d3:51:c9:4f:21:a7:71:69:72:14:91:2e:
11:39:80:d3:dd:49:59:00:3f:85:0a:99:37:de:70:
97:7b:47:f8:2d:ba:7f:44:f5:44:b1:e0:43:03:b2:
00:59:eb:94:90:44:f4:a5:8c:6b:23:08:9f:d6:bd:
f6:63:a6:f4:38:bf:16:85:b1:55:ae:90:17:27:bc:
c7:ff:f6:64:98:d5:6b:15:47:d3:c3:dc:06:66:8f:
58:0a:aa:c2:25:85:07:1c:0c:4f:3b:03:a6:c9:7d:
76:d9:75:90:23:80:5c:14:e9:a1:a1:2a:9c:d1:29:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:F2:1E:3C:B2:FE:20:94:30:9B:04:04:4A:97:23:E9:53:53:30
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f6:88:a9:81:d8:da:04:51:81:b6:a0:9c:75:93:0a:e8:f5:
68:4c:f2:d1:98:75:74:0a:d6:58:61:e3:e5:a9:12:16:3d:fe:
6f:4e:1b:6d:cc:4a:ca:d5:3d:7f:9b:3e:32:08:01:b2:e6:52:
b9:9b:8a:2f:62:46:13:ad:34:48:88:ad:1f:9f:b1:86:fc:c7:
13:c1:fa:ab:80:21:ab:b6:a8:89:8e:ba:e3:1c:31:12:a4:f8:
68:95:63:68:5b:2a:da:48:16:ce:b4:1f:6d:50:80:bb:f0:54:
07:d3:5c:e3:8c:e5:93:75:5d:3c:34:5c:e5:80:cf:25:75:e7:
ee:69:74:a4:4e:84:35:90:bf:49:e1:18:0c:d0:1d:8e:bc:18:
be:c2:3b:f5:c0:87:16:3e:b3:02:e1:da:c7:73:b0:80:f7:dc:
7d:a2:af:61:4b:df:f0:cf:e6:53:7f:c6:4b:cf:71:3c:7f:5e:
90:df:2c:08:78:76:68:37:77:14:1d:fb:66:26:02:29:6b:a6:
5b:3f:7c:ca:50:74:60:bc:05:05:de:af:52:c0:65:26:19:76:
95:ce:da:ff:7e:37:4e:7e:85:ca:a7:bc:20:09:81:10:e4:8e:
4a:8d:2b:6e:e6:f1:ca:d2:80:fb:a7:54:04:fe:29:d0:b9:44:
33:f8:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:20 2025 by rpki-client