Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: +25HZ6AGg40Wqsj/g2vHFi/gFpzsPMi4tK4pzpZN4gI=
Subject key identifier: C0:73:BB:12:DD:9A:C6:F4:A3:50:1E:FA:CD:9F:8B:C4:48:4A:A6:3C
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 0197B6A1B5758508C1E69D493E32073A95B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 04D8
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: 7la/bh2zQSTY6wDqnFvrRiGNuEK1KML4DaDfNSpSRjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b5:75:85:08:c1:e6:9d:49:3e:32:07:3a:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=c073bb12dd9ac6f4a3501efacd9f8bc4484aa63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:63:b3:59:15:5f:53:ba:35:9e:a0:3b:7a:
3e:7d:dd:6e:bd:8b:f9:0b:e4:d2:42:c4:05:7b:49:
7c:36:9d:03:1f:cb:63:39:0b:7e:37:f7:38:42:48:
e3:3d:5a:00:b2:e9:a1:0e:a4:c3:b8:c8:3d:3f:37:
41:0f:dd:7a:7c:df:7a:27:3c:ec:45:17:27:23:63:
9d:e3:a1:b8:e7:b5:eb:87:c3:2f:36:18:b9:60:59:
52:13:78:ce:fe:fc:b0:ae:0f:63:35:ac:ef:01:c0:
84:6d:eb:90:5d:d1:55:c8:f7:00:11:12:85:ea:ee:
ca:53:db:d0:85:aa:2e:f0:39:03:14:ae:31:cc:aa:
57:01:58:d1:f3:bd:a7:d1:6e:a8:50:67:ef:64:ab:
16:90:8a:72:ad:be:03:10:8d:a9:b5:6e:c3:01:1f:
c3:51:2d:29:18:99:9d:f1:a7:98:12:26:57:5a:71:
52:89:a5:6b:6a:92:45:b7:59:cf:60:16:30:c4:5d:
fc:9b:ff:b0:e6:67:7b:5a:b4:20:d2:4b:37:f4:d0:
85:ef:58:de:05:e7:8b:a9:fc:ca:cb:ed:8c:ad:de:
f2:67:8b:0c:cd:43:cf:64:ce:01:75:6b:f3:28:42:
51:fe:c7:df:1e:66:1e:f3:a0:1d:42:de:f4:57:2d:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:BB:12:DD:9A:C6:F4:A3:50:1E:FA:CD:9F:8B:C4:48:4A:A6:3C
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:7f:6a:06:65:1a:ad:40:47:75:85:31:a7:82:f7:6b:8f:
4d:a0:9a:0a:28:f1:56:24:cb:ef:0d:c6:ea:a0:a3:17:3f:c8:
e7:76:05:f6:b1:69:42:28:6b:89:cf:1e:70:40:aa:ae:90:91:
28:f1:63:77:d4:7c:0e:8a:e7:5c:b7:7f:5c:a3:7a:8f:0c:7e:
ce:28:cd:9a:22:01:6e:d0:98:75:27:57:c1:ba:b8:80:2e:17:
5d:15:84:7f:07:b8:96:0e:85:dd:12:ff:88:89:0a:29:ef:6e:
66:41:aa:d3:41:42:fe:18:f8:f6:cd:6a:81:c8:df:e4:5a:f6:
37:45:cc:7a:00:ba:c1:f7:44:11:49:20:1e:0e:9f:cc:1f:00:
f8:97:09:cc:a2:5b:99:24:e3:8f:0f:4f:73:1a:84:68:bf:ab:
6d:84:aa:f1:72:bd:be:f7:fb:06:9e:43:92:43:b3:32:99:ec:
59:4e:b1:f6:9e:ab:4d:b0:c3:dd:70:59:8d:b4:d0:58:82:45:
a9:f7:76:bd:1a:87:51:31:43:cf:03:d1:0a:b1:d7:67:d5:8c:
80:ec:db:62:a6:6d:38:8d:5b:86:63:9a:4e:6d:e4:e6:56:05:
12:9b:64:61:3c:a2:8d:8c:a6:99:50:4c:99:7e:8e:05:fc:b6:
bb:86:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:53 2025 by rpki-client