Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: WZ8ujN1zd3BtW8wHbDQs403snZ2sG2+boNbuvr8Qev4=
Subject key identifier: 93:CD:7B:32:59:05:69:6B:56:01:D5:39:FF:08:0C:F1:FA:8C:28:65
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 0199FFFE5C3AFED36D6DB82C008526C08DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:23 +0000
Manifest this update: Mon 20 Oct 2025 05:01:23 +0000
Manifest next update: Tue 21 Oct 2025 05:01:23 +0000
Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: e15MRFdMug/j5JnrFB7flK3s6mxMNksk7Gyldn1Majw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5c:3a:fe:d3:6d:6d:b8:2c:00:85:26:c0:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Oct 20 05:01:23 2025 GMT
Not After : Oct 21 05:01:23 2025 GMT
Subject: CN=93cd7b325905696b5601d539ff080cf1fa8c2865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:ca:f6:49:16:e7:e8:da:9b:7f:f8:ef:b6:
84:b7:5a:4b:18:ff:78:7d:a4:90:ef:75:78:64:f1:
91:8b:24:48:ba:2b:d2:f1:ce:8b:6a:00:39:d0:66:
bd:eb:42:47:01:d4:94:70:b5:04:71:d5:d4:4f:ca:
58:a1:5e:86:2b:3e:00:2a:b8:ae:5c:77:ff:13:46:
35:d4:6b:7b:da:8e:26:3a:e6:38:f8:64:98:65:c8:
e7:a7:a6:fa:e3:39:65:42:e1:c6:64:1a:8e:eb:3c:
70:10:97:65:ea:44:b6:a6:96:b8:38:b8:75:be:af:
da:d8:de:37:0f:88:d7:22:46:ae:a8:30:11:c4:a3:
98:00:00:89:8b:ad:b7:3f:60:0e:33:9e:85:5f:6d:
06:05:12:b8:77:fb:c1:ef:ae:35:cc:6f:cc:91:26:
50:c5:90:e2:da:af:d5:e1:4b:5f:8b:f0:74:aa:7e:
49:eb:57:65:b3:71:47:15:e4:f6:97:91:1c:cf:7b:
8a:15:cf:29:37:af:46:1e:a0:bb:84:9e:d6:9b:80:
7e:f1:9a:46:f9:b7:2c:23:6a:e2:90:34:e8:0f:ab:
32:d8:b1:95:a6:a8:04:ef:a9:07:91:ab:96:fc:8d:
2e:4c:1b:df:ca:e3:31:44:d3:ba:ad:d8:c1:32:ea:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CD:7B:32:59:05:69:6B:56:01:D5:39:FF:08:0C:F1:FA:8C:28:65
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:86:f4:c7:39:8a:d4:63:48:00:81:92:2d:91:2a:41:f1:ba:
e8:1b:c7:4f:42:13:ad:51:77:4c:b8:b3:78:8e:49:54:f5:23:
cb:fd:14:f9:12:17:64:a0:49:08:3e:4c:38:49:4d:00:44:27:
e6:e4:0a:cc:57:9b:c4:bc:4f:80:40:8c:0e:c5:8d:82:92:13:
0e:f2:c9:0b:d6:9f:64:86:ea:d9:d4:13:f8:24:40:ed:99:7c:
63:fd:d8:7e:8f:77:d2:d3:a7:58:8c:1d:f7:40:d6:38:d9:2e:
64:77:93:d6:65:69:0f:b6:fe:ca:d5:c9:f7:b9:39:34:3b:d1:
f5:75:dd:68:3f:78:19:f0:33:de:91:9b:06:ae:44:e2:a8:ec:
cf:92:59:37:df:a4:05:81:c9:43:0d:7c:49:d9:f3:c8:7c:30:
d8:a8:22:df:ea:2b:a7:c3:4c:4c:21:f3:ed:bf:10:09:34:72:
f0:26:24:e0:cd:97:31:fe:f9:e8:21:6c:fb:08:bb:6d:ff:33:
77:6a:2d:45:f1:c4:61:16:65:23:fc:5d:50:ff:04:9a:db:3f:
2e:c9:77:38:64:86:0a:4a:15:c2:b9:99:04:0f:86:10:ce:80:
e5:cd:f0:ce:80:73:09:1e:89:07:1a:8d:2a:0f:b9:77:34:8b:
f5:cd:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:30 2025 by rpki-client