Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: hg3V5C8S8jfzcTpbqHlHTj2RgCRyeesmWE3AznbsrVU=
Subject key identifier: 8F:B7:82:2B:05:49:EF:A2:4E:EE:5C:5C:F0:6D:6E:FE:C8:7E:4D:89
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 019A02599F6F4145C0704DC2F07880CB3A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 131A
Signing time: Mon 20 Oct 2025 16:00:19 +0000
Manifest this update: Mon 20 Oct 2025 16:00:19 +0000
Manifest next update: Tue 21 Oct 2025 16:00:19 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: IqBKaL4CQqY3O+1J8gXyRUt6qzconh1nWHQc0JFbHaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:9f:6f:41:45:c0:70:4d:c2:f0:78:80:cb:3a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Oct 20 16:00:19 2025 GMT
Not After : Oct 21 16:00:19 2025 GMT
Subject: CN=8fb7822b0549efa24eee5c5cf06d6efec87e4d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:6e:55:46:3d:00:27:e9:e8:3b:60:9a:c3:
38:a5:e9:6d:c7:f6:1e:3c:12:07:e7:98:24:61:f0:
c3:dd:57:13:7e:b0:f0:45:1b:6c:6e:0a:d3:cb:00:
e3:31:84:2a:c0:70:0b:48:3d:82:0a:a1:0d:e6:66:
a5:c3:4e:b6:6b:9b:29:ce:78:76:a6:b2:01:74:af:
52:ca:98:88:b2:bf:9b:5b:21:fe:33:e3:74:83:0b:
05:30:64:3b:94:e7:84:98:48:dc:60:65:7c:b2:b4:
e7:31:9d:91:7d:a1:05:bd:16:ff:3f:af:31:66:43:
76:52:4a:48:7d:d8:25:c8:7b:55:b9:6d:43:10:3a:
b9:3d:7f:be:7d:e2:21:68:e3:e7:fb:96:02:b4:d6:
33:5c:e5:42:2c:0b:32:7e:e5:84:b6:a0:ed:22:35:
b0:fb:cd:9c:c3:ba:a8:48:f4:68:d4:f9:7a:ed:13:
04:47:17:07:01:ed:65:b1:c8:df:c8:0d:8a:9c:2b:
88:59:33:d2:f7:bb:75:08:bb:52:5d:7f:db:dd:31:
2c:6c:4a:2e:a7:60:2c:59:41:d4:29:b9:04:95:00:
cc:e0:17:30:cb:b8:44:8d:53:c5:27:2b:c4:b0:ee:
99:fe:ed:ee:19:82:4f:f7:8f:4d:06:33:13:24:04:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B7:82:2B:05:49:EF:A2:4E:EE:5C:5C:F0:6D:6E:FE:C8:7E:4D:89
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:15:f4:50:4b:a8:58:79:76:4e:f4:71:97:60:34:a5:bb:1a:
2a:fd:f9:50:06:5f:fd:91:e4:92:9d:07:6c:d0:44:6d:ef:64:
13:6d:0f:dc:89:1e:0a:7b:44:3c:63:ac:cd:4b:d4:d0:72:48:
c1:e4:81:47:7d:f7:8d:bb:1a:1e:0b:4a:e4:e6:8b:dd:21:5e:
c5:bb:78:59:fc:5d:d4:3d:6f:44:8f:ee:a3:69:a6:61:21:d2:
06:d4:0a:27:f7:26:25:22:14:7b:bb:e4:d7:5a:16:5b:82:27:
81:62:a9:d3:7f:a5:c6:2d:99:be:35:9a:3b:96:ef:5d:e8:28:
16:15:a8:c4:24:f9:fb:78:e3:ba:03:8e:f7:75:9c:ac:10:1f:
d6:64:22:a3:09:2c:15:3c:12:03:49:df:a2:b8:bf:33:b8:29:
20:d4:f6:a4:79:17:41:5e:5c:96:05:8b:27:30:46:8e:56:2c:
20:d7:07:c5:5c:7b:eb:1c:d3:a3:0d:dc:6b:41:6b:fe:c9:47:
cb:ae:cc:b0:88:e6:26:cd:e0:46:58:b5:00:10:fd:88:a7:1f:
23:6f:f6:b1:a4:86:ba:ce:ac:65:5c:61:10:60:69:c4:32:dc:
5a:51:0b:0f:f4:4c:52:82:c9:c2:22:b5:6d:83:51:b3:a7:df:
e7:6d:b8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWZ9vQUXAcE3C8HiAyzqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTkwYjE3MmY4OGJlMjFiYjk5ZDU3M2ZkNzViMjdmNWJm
NzQ1YzIwHhcNMjUxMDIwMTYwMDE5WhcNMjUxMDIxMTYwMDE5WjAzMTEwLwYDVQQD
Eyg4ZmI3ODIyYjA1NDllZmEyNGVlZTVjNWNmMDZkNmVmZWM4N2U0ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFhuVUY9ACfp6DtgmsM4peltx/Ye
PBIH55gkYfDD3VcTfrDwRRtsbgrTywDjMYQqwHALSD2CCqEN5malw062a5spznh2
prIBdK9SypiIsr+bWyH+M+N0gwsFMGQ7lOeEmEjcYGV8srTnMZ2RfaEFvRb/P68x
ZkN2UkpIfdglyHtVuW1DEDq5PX++feIhaOPn+5YCtNYzXOVCLAsyfuWEtqDtIjWw
+82cw7qoSPRo1Pl67RMERxcHAe1lscjfyA2KnCuIWTPS97t1CLtSXX/b3TEsbEou
p2AsWUHUKbkElQDM4Bcwy7hEjVPFJyvEsO6Z/u3uGYJP949NBjMTJAQyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+3gisFSe+iTu5cXPBtbv7Ifk2JMB8GA1UdIwQY
MBaAFMjpCxcviL4hu5nVc/11sn9b90XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUt
NTZjNWQ3NmRkY2Q4LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUtNTZjNWQ3NmRkY2Q4
LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxX0UEuo
WHl2TvRxl2A0pbsaKv35UAZf/ZHkkp0HbNBEbe9kE20P3IkeCntEPGOszUvU0HJI
weSBR333jbsaHgtK5OaL3SFexbt4Wfxd1D1vRI/uo2mmYSHSBtQKJ/cmJSIUe7vk
11oWW4IngWKp03+lxi2ZvjWaO5bvXegoFhWoxCT5+3jjugOO93WcrBAf1mQiowks
FTwSA0nfori/M7gpINT2pHkXQV5clgWLJzBGjlYsINcHxVx76xzTow3ca0Fr/slH
y67MsIjmJs3gRli1ABD9iKcfI2/2saSGus6sZVxhEGBpxDLcWlELD/RMUoLJwiK1
bYNRs6ff5224Tw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:19 2025 by rpki-client