
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File: yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier: 7CSim9doLeCUKtvFS6kai0oC6GakB2p8oqQg7F9DngU=
Subject key identifier: D0:16:72:74:26:32:F6:40:2A:91:D8:0C:50:20:AC:CC:EA:B3:1B:AA
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer: /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial: 0198D8F28F3E7A03BA34BCF23BA0A545D940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number: 1280
Signing time: Sat 23 Aug 2025 22:00:31 +0000
Manifest this update: Sat 23 Aug 2025 22:00:31 +0000
Manifest next update: Sun 24 Aug 2025 22:00:31 +0000
Files and hashes: 1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: p0pDSK696pMMC/oB5BVvdB5ky+VnxqQ2XA8lOsGoI50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:8f:3e:7a:03:ba:34:bc:f2:3b:a0:a5:45:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Validity
Not Before: Aug 23 22:00:31 2025 GMT
Not After : Aug 24 22:00:31 2025 GMT
Subject: CN=d01672742632f6402a91d80c5020accceab31baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:65:5b:2a:c7:bb:af:a7:29:9e:2c:ed:88:
f8:ce:eb:f0:9a:6c:4c:6b:1c:59:14:2f:0a:db:10:
d8:6c:56:07:ba:2c:c0:bd:e3:cd:04:e2:c4:02:63:
d5:42:b5:9f:40:d3:01:78:e3:b9:82:07:c7:05:9e:
23:19:54:84:21:0e:2a:fc:4e:9e:38:c7:4a:c3:f6:
50:15:9b:42:85:ba:0f:16:be:af:67:75:15:e3:04:
75:a3:66:1b:ef:10:a7:93:51:5d:36:d2:30:6a:a2:
93:7b:57:4b:84:90:6c:42:90:cb:72:bd:ff:70:9f:
dc:04:57:6d:55:80:4e:f7:cf:6d:55:80:3b:85:9f:
24:f9:49:c4:fe:fa:f5:69:45:ef:a5:da:aa:cb:86:
8b:42:70:6d:51:f2:c4:e2:97:80:92:c6:9b:c0:8d:
a5:3b:ce:fc:20:7f:c6:c3:54:0e:32:be:8e:ef:ea:
de:65:6a:01:22:69:8c:21:99:c8:b1:c0:9b:49:ad:
57:bb:d7:20:fb:4c:e9:ec:bd:b9:08:d5:f3:04:e4:
be:8d:14:cd:be:c0:de:87:bc:4d:f7:11:7a:8d:b6:
b5:34:8f:59:ce:78:02:bd:f6:3a:fd:c4:f3:f0:25:
5b:3a:11:44:29:4e:ed:f4:5f:99:78:70:51:a6:2b:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:72:74:26:32:F6:40:2A:91:D8:0C:50:20:AC:CC:EA:B3:1B:AA
X509v3 Authority Key Identifier:
keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c4:1d:fa:dc:88:13:cc:25:92:97:b3:c6:47:ef:7b:63:1e:
25:58:7e:8b:a8:87:1c:09:6d:90:a9:62:be:a9:e6:ad:11:01:
91:8d:5c:d9:71:cd:a7:9d:58:9b:5a:c7:60:5f:81:4e:56:a5:
4c:10:0c:a5:3b:c7:af:2e:9e:2c:77:55:55:4d:e5:47:bc:83:
00:b6:59:ec:da:16:5a:a9:2f:96:86:ca:89:9d:d9:82:86:48:
6d:eb:da:a4:f0:81:7d:ed:ff:7b:38:58:bd:0c:13:e8:17:83:
16:ae:10:56:67:a7:88:1b:ca:d3:1c:1a:2a:9b:28:5e:4d:5e:
e3:0a:4f:ff:eb:df:ab:37:06:b8:b7:db:18:e9:c4:56:d0:15:
d8:4a:0b:37:2a:ad:7d:f3:31:a0:3a:5d:3b:0c:38:66:c5:43:
c7:f0:13:45:27:ee:ed:1a:16:c7:7e:79:ae:fc:0a:e9:a8:c8:
29:e2:ea:53:3d:fc:1d:44:41:64:7b:2b:92:e5:8f:1e:15:d1:
32:05:26:a9:a3:bb:06:3a:b1:18:2c:e2:b7:c9:5c:f1:e6:0c:
21:26:23:57:f2:a6:ff:7f:4b:d0:05:fb:24:c8:c1:8c:9f:2f:
7d:2c:9b:59:0c:81:ff:d1:03:1e:fc:d2:f0:8c:4f:41:b3:29:
af:fa:4a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjY8o8+egO6NLzyO6ClRdlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTkwYjE3MmY4OGJlMjFiYjk5ZDU3M2ZkNzViMjdmNWJm
NzQ1YzIwHhcNMjUwODIzMjIwMDMxWhcNMjUwODI0MjIwMDMxWjAzMTEwLwYDVQQD
EyhkMDE2NzI3NDI2MzJmNjQwMmE5MWQ4MGM1MDIwYWNjY2VhYjMxYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXZlWyrHu6+nKZ4s7Yj4zuvwmmxM
axxZFC8K2xDYbFYHuizAvePNBOLEAmPVQrWfQNMBeOO5ggfHBZ4jGVSEIQ4q/E6e
OMdKw/ZQFZtChboPFr6vZ3UV4wR1o2Yb7xCnk1FdNtIwaqKTe1dLhJBsQpDLcr3/
cJ/cBFdtVYBO989tVYA7hZ8k+UnE/vr1aUXvpdqqy4aLQnBtUfLE4peAksabwI2l
O878IH/Gw1QOMr6O7+reZWoBImmMIZnIscCbSa1Xu9cg+0zp7L25CNXzBOS+jRTN
vsDeh7xN9xF6jba1NI9ZzngCvfY6/cTz8CVbOhFEKU7t9F+ZeHBRpivefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAWcnQmMvZAKpHYDFAgrMzqsxuqMB8GA1UdIwQY
MBaAFMjpCxcviL4hu5nVc/11sn9b90XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUt
NTZjNWQ3NmRkY2Q4LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUtNTZjNWQ3NmRkY2Q4
LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosQd+tyI
E8wlkpezxkfve2MeJVh+i6iHHAltkKlivqnmrREBkY1c2XHNp51Ym1rHYF+BTlal
TBAMpTvHry6eLHdVVU3lR7yDALZZ7NoWWqkvlobKiZ3ZgoZIbevapPCBfe3/ezhY
vQwT6BeDFq4QVmeniBvK0xwaKpsoXk1e4wpP/+vfqzcGuLfbGOnEVtAV2EoLNyqt
ffMxoDpdOww4ZsVDx/ATRSfu7RoWx355rvwK6ajIKeLqUz38HURBZHsrkuWPHhXR
MgUmqaO7BjqxGCzit8lc8eYMISYjV/Km/39L0AX7JMjBjJ8vfSybWQyB/9EDHvzS
8IxPQbMpr/pKsg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:37:57 2025 by rpki-client