Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: DFcbYKIHKFoq1upCnLXXSdcMH4YFo4kaacvZyhEBNCg=
Subject key identifier: 32:5A:D0:34:B2:D1:0D:53:CB:17:EE:FB:A1:C1:93:ED:18:92:E3:59
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 0199FBEB0F80F8816E5FD9CA788DE04A5191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0605
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: VZ2UypY9UvDDB0txy5EUBXF0lHkbMwTnjmnpQJLZb2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:80:f8:81:6e:5f:d9:ca:78:8d:e0:4a:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=325ad034b2d10d53cb17eefba1c193ed1892e359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:c4:de:10:08:9d:ab:e9:04:71:58:cd:02:
77:71:86:ba:27:de:92:c2:6f:a4:93:e1:b1:18:77:
08:bf:9c:82:2d:97:ff:37:cd:13:24:37:d4:19:d8:
1a:0e:02:2e:33:68:ae:3e:ed:d3:1e:ae:88:e9:4b:
cc:ab:3b:ff:53:ae:87:91:cc:9d:a7:fd:1d:e3:7a:
5a:44:48:0c:35:a0:34:38:e8:db:69:76:81:69:f2:
ff:b7:70:65:31:3f:3c:5c:65:c2:b5:4a:84:e4:6d:
f3:d2:94:4e:65:96:f7:0b:a4:0b:24:d0:b6:7f:c9:
c7:90:53:8e:87:97:a8:58:6b:bb:7e:66:d6:97:63:
f3:3f:a2:6e:f3:53:15:7a:b9:b8:b0:95:b1:88:a2:
85:0f:a7:7d:d4:83:a0:09:29:e2:12:fc:73:4a:da:
d3:21:5d:93:ef:06:47:41:c7:db:cc:0e:9e:78:b9:
62:78:96:96:c5:3c:f6:38:27:6f:04:87:37:19:5c:
f9:5c:d1:a0:e2:b8:77:4f:52:54:93:6e:7e:f5:2e:
40:1e:92:ac:71:c6:84:61:03:5e:45:05:17:dd:ed:
14:ea:37:bb:88:4c:10:47:35:02:ae:a8:10:dd:9f:
22:df:34:77:18:6d:d0:d8:ed:f9:59:dc:29:3e:17:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:D0:34:B2:D1:0D:53:CB:17:EE:FB:A1:C1:93:ED:18:92:E3:59
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:24:72:bc:1f:be:e5:82:7a:e5:06:e3:b2:3d:06:c3:18:66:
41:ba:8b:0c:ff:9b:3b:e5:9d:49:46:d1:3d:4b:8d:ac:07:a9:
4e:83:6c:c9:18:53:77:6c:74:73:42:81:bd:a2:3e:14:6f:f9:
25:ea:ba:be:9c:16:ef:6e:85:ac:4b:29:15:87:be:fd:03:1f:
a1:d6:59:b0:c2:fd:1d:3c:2f:94:b8:e4:2b:d0:72:64:4e:aa:
12:06:e4:b6:ab:96:18:b9:5d:d7:87:05:62:6a:66:cd:5c:bb:
db:d3:b1:7c:75:ac:d9:7d:9e:ec:2f:53:e6:b9:b2:1f:7d:ab:
dd:f4:ef:51:9f:45:e7:b4:59:fb:0c:66:b8:05:e4:85:9e:13:
d0:d7:67:bd:10:b8:4d:bc:18:0d:e3:46:01:59:23:ab:3a:54:
3b:07:e1:9c:48:94:70:14:2f:27:47:5a:33:8a:ab:76:30:0c:
20:81:18:35:9d:30:c6:2f:76:22:8a:d9:63:2b:77:b0:b8:13:
f1:95:97:5b:d1:ab:53:42:6c:1d:95:ef:22:84:bc:46:73:f0:
ee:d0:ea:f2:09:d9:b8:e8:01:79:74:ee:3f:6f:b0:17:3c:8c:
c8:17:99:22:a1:59:d7:b7:64:1c:cf:c2:4a:14:9d:3e:5f:3b:
32:c3:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:53 2025 by rpki-client