Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: OLNqPnI3KQu6kPsbYvr4D5vjYiaiGOtC1uNN9Ose0G8=
Subject key identifier: C8:B2:F1:8F:A9:9A:3D:02:B4:4D:C1:9D:A0:19:64:39:9C:B6:10:8C
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 0198D58404242B94639AB0AAA7C9DAFC8B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0E68
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: LrJXBquLIVR9TBT0Rjjanro2XK4xIA6vZPwyTU3cKmY=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:04:24:2b:94:63:9a:b0:aa:a7:c9:da:fc:8b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=c8b2f18fa99a3d02b44dc19da01964399cb6108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:ba:09:73:34:bb:f9:9a:3e:b0:1f:c0:8c:
93:a3:1f:ad:98:d7:a9:9a:94:69:7c:d9:65:54:71:
e5:52:0c:6d:a4:0c:67:da:c5:8c:25:68:00:ac:d0:
c0:41:82:b3:21:6d:f4:bd:82:9d:dc:07:c1:51:fa:
87:5c:f0:ab:c4:6e:56:d6:f5:8f:a5:3e:29:c3:54:
66:22:80:f5:c4:d7:aa:c4:27:cf:11:dd:fb:4a:75:
19:d6:19:04:60:b3:39:f2:69:ad:19:d7:8b:d5:89:
c5:5f:20:0a:b9:d8:2a:ff:68:3d:01:31:4e:95:33:
b0:b2:0e:bc:f0:6e:13:8a:a1:09:6a:a8:72:91:da:
fa:17:91:b5:27:53:eb:84:1a:c7:41:5a:6c:ae:03:
cb:5c:a2:bc:16:72:dd:b7:7d:a0:f6:b3:c4:99:4e:
5a:65:c4:a9:ef:4d:7c:99:b7:10:3d:40:17:3e:ce:
16:bf:34:b2:ce:0b:7b:ba:38:2f:cb:67:91:13:38:
8b:70:8b:c9:c3:3d:1e:e3:be:f9:58:ae:b4:41:0e:
22:81:15:a5:0d:10:68:01:cc:1c:b0:97:34:e7:ef:
6e:7f:29:a5:c5:6a:51:2a:39:26:c4:55:4e:1e:d5:
84:3e:33:e5:09:93:83:78:74:e4:41:fe:04:22:58:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:F1:8F:A9:9A:3D:02:B4:4D:C1:9D:A0:19:64:39:9C:B6:10:8C
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2c:44:76:24:8d:b3:85:8a:0f:d0:3c:23:12:26:7b:e7:af:
79:8a:8f:e8:52:1a:27:5f:90:5e:5d:44:42:fd:17:6b:da:11:
21:77:7b:92:79:c5:88:5d:51:90:15:61:43:db:8e:f5:5f:3b:
b9:ef:01:df:ec:28:3e:22:65:c2:04:b9:45:e0:48:dc:52:47:
4f:69:07:a8:fe:35:1c:1d:be:29:91:88:be:bc:8a:a7:f0:7b:
6a:2c:85:ec:a4:43:7c:4b:2b:24:e9:01:c9:63:c9:97:fc:03:
7e:f0:13:62:49:23:c4:34:1a:57:d8:83:1c:09:dd:74:be:ec:
32:41:50:88:04:30:a8:a1:78:08:33:a5:54:97:14:02:db:dd:
39:0e:d6:4f:c3:f6:fe:5c:a3:03:af:17:ac:62:75:52:5c:bd:
84:5d:ef:9e:6d:c9:c9:ab:47:26:28:02:4f:3d:ea:c2:d2:d9:
af:af:40:39:5e:a4:e8:d0:4c:4f:ef:46:d5:f9:3c:1b:fc:4f:
32:cc:c9:2f:bb:7f:ff:24:16:d4:7c:0b:08:62:83:b6:37:ac:
82:33:c0:97:d3:01:c2:7c:88:85:7f:cb:1e:cc:56:51:89:2e:
a8:26:af:4c:bd:28:59:08:ed:a9:ec:ff:4d:12:81:16:d8:4d:
55:77:fd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:42 2025 by rpki-client