Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: ecpook0zRWKrEwdT0QubQNmW3TTbahik69NytIJesxg=
Subject key identifier: E2:BC:86:2B:DE:6E:EC:CF:DD:64:64:D7:70:FC:CD:E0:B3:85:CF:76
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 019A4EF4B3FA6CFAEA2A19CB6F5C9A39AE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0630
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: AlpIHeOf1dAFb5bI7ihZvWf0GR8ZGHrGbXpl0jVrp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b3:fa:6c:fa:ea:2a:19:cb:6f:5c:9a:39:ae:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=e2bc862bde6eeccfdd6464d770fccde0b385cf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:84:90:3f:5f:77:3c:89:00:21:b2:0b:a5:
51:0f:6c:ec:ee:de:70:31:6a:30:48:0a:b1:d1:8c:
24:98:f2:3b:41:1d:e3:84:16:67:25:0e:2e:06:87:
1a:f5:13:bf:4e:50:ba:cb:5f:b7:69:79:cf:74:a3:
4f:67:6c:60:b3:7f:ae:12:fb:23:ad:1a:a2:22:08:
16:f8:e9:2a:d5:8f:eb:76:b9:7d:04:94:ec:b0:94:
d8:bb:ed:73:37:21:cf:42:ec:0a:14:c4:3b:2d:e1:
1d:91:e1:35:0c:b1:7e:b0:30:ec:b0:eb:40:93:20:
97:06:90:fd:f6:d3:1d:ef:a9:84:d4:6c:15:61:bc:
88:97:e6:d8:8b:81:cd:e9:1a:7e:27:9b:db:ca:03:
62:5f:22:f8:01:9b:c6:19:42:38:66:2e:25:07:31:
e9:45:72:da:65:78:f2:10:ec:9e:4f:f2:1e:44:60:
03:17:25:f2:42:68:b8:bf:c9:73:ed:58:7f:e2:43:
27:11:b1:65:74:b3:55:71:d2:5a:3d:48:95:31:ce:
2a:b1:18:20:4e:93:bf:24:a9:fd:68:e0:18:8c:f4:
b9:d6:58:06:a1:86:d7:5b:62:aa:b6:df:ee:6b:43:
fe:ab:2c:b4:3c:77:6d:9f:d8:98:88:4b:40:21:86:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:86:2B:DE:6E:EC:CF:DD:64:64:D7:70:FC:CD:E0:B3:85:CF:76
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:9d:6b:a5:61:34:00:82:92:b7:f1:c9:03:8e:16:e0:ef:
44:f0:d3:ce:ad:aa:01:9a:df:00:73:e8:17:21:d7:b0:77:f9:
b3:bf:d1:6b:60:a7:a1:91:16:de:92:e5:69:56:26:88:e1:82:
93:0d:de:b6:50:8d:87:70:e1:5e:dd:df:30:c9:02:69:10:12:
85:93:65:ca:d9:2c:94:2f:9e:92:d8:5b:e0:ea:30:55:8a:67:
d6:35:3a:c0:82:a3:be:97:f4:ad:1d:5c:ad:cc:37:3f:56:0b:
f7:85:b3:20:85:e4:11:75:5a:3a:e8:c2:71:a0:e0:63:7e:74:
c2:dc:2f:d9:fb:23:ef:02:2e:12:ba:03:f8:05:dd:12:b9:8e:
85:bf:8e:fe:f3:9c:2b:e4:93:56:a6:82:63:f4:74:6c:a2:72:
ec:fb:31:7e:bd:1c:c3:87:f8:df:12:a2:e3:a0:52:00:99:53:
9b:95:36:bf:dd:d0:7f:ae:aa:cd:29:8e:15:5c:93:21:7c:a4:
9c:43:39:28:0d:3a:ec:a7:72:26:ce:af:60:f5:08:b2:a9:85:
97:63:4e:c5:26:1d:7f:4f:fe:bf:a0:62:0b:e1:27:4d:28:7f:
47:ec:bc:e2:0e:8b:0a:2f:18:d0:e7:8c:0e:c0:e5:31:9d:f3:
a4:85:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:20 2025 by rpki-client