Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: 4tqpe3Lao9YOh4VkuEPdcVSt0aqQ0bkQuVj9j5POmcQ=
Subject key identifier: B5:82:86:F6:57:6E:FF:3C:E9:CD:66:40:8E:6D:1A:1B:E7:55:DB:68
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0197B6A0CE4C47758AD6B7529F402FE92405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: hucd71oUmZD6tMppmDbubFHmd7+A2m+z7rOSvLbrTOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ce:4c:47:75:8a:d6:b7:52:9f:40:2f:e9:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=b58286f6576eff3ce9cd66408e6d1a1be755db68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:ac:d2:bd:b2:12:1a:d0:7e:ed:16:04:5a:
e0:ae:d9:27:18:c2:4b:b8:f6:5a:9d:dd:be:82:ed:
8d:25:e3:f8:4a:4e:74:44:14:0c:f1:ea:93:80:47:
79:99:63:26:64:a4:2f:c7:b9:51:f3:b1:1d:85:41:
03:21:a2:33:88:e0:27:40:6d:51:cc:53:d7:d0:b3:
42:c9:57:4d:41:db:a2:eb:34:f5:ae:7a:56:cf:af:
90:b7:d6:ed:3d:1a:a8:e7:41:1b:2c:f1:66:43:48:
89:a8:bc:2f:15:e1:bc:18:8e:3b:28:c8:d4:29:b2:
e2:54:f1:23:7b:a3:54:8f:49:e2:11:bf:c4:e1:16:
27:0c:86:bd:c5:ab:cd:0a:1a:7d:c2:40:9b:bf:e8:
f2:1e:1b:86:23:49:3f:59:3c:46:11:b0:6b:ec:89:
bd:d1:4c:5b:86:6c:fc:a5:ac:ff:f2:ba:3a:79:c3:
e5:0a:25:6f:f5:04:0f:42:bd:64:36:2b:fc:2f:61:
4c:17:46:cd:50:24:5b:7d:0e:9a:ad:6f:a1:2a:ea:
ad:9f:85:3e:9b:fa:11:2d:98:38:7a:86:e6:6a:b5:
ed:4c:2b:3d:ea:9a:f1:ce:c9:56:94:18:77:03:df:
f6:d3:98:e6:cc:47:ae:6c:e8:b5:db:4e:2a:5a:11:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:82:86:F6:57:6E:FF:3C:E9:CD:66:40:8E:6D:1A:1B:E7:55:DB:68
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:97:b4:29:d9:9a:fd:dd:42:63:0b:10:93:ae:1c:f0:13:9d:
bc:39:2b:29:51:b3:cf:58:c7:02:f0:12:7d:b0:78:99:8c:49:
e7:0f:f5:ab:98:e7:45:a2:a4:98:4d:f6:de:87:11:42:52:4b:
dd:d2:a7:6d:33:f3:de:66:1f:e3:89:4e:f5:6a:88:d1:17:30:
14:9c:bd:1c:40:11:7b:f9:dd:88:a0:df:f7:8d:7f:86:2c:a4:
cf:97:4c:f7:df:7a:30:fb:3e:21:b0:98:18:be:da:4b:19:d1:
0b:7f:50:3d:14:7e:e9:de:8c:e4:75:a4:ee:08:da:5b:eb:36:
61:70:d3:a6:83:5c:22:c3:62:39:47:9d:a4:1c:12:a0:92:6f:
b5:80:43:1e:40:75:73:4b:bc:c4:99:bd:8f:93:6c:ea:9d:63:
e2:41:80:9b:e6:da:fb:5a:0f:a6:fc:4f:82:a5:8a:a5:bf:6d:
15:e5:c7:ba:db:f5:c4:a5:5f:a4:4e:8c:eb:d4:21:be:31:34:
03:da:87:40:5c:0a:2e:b1:49:15:0f:2c:1e:93:4c:61:26:30:
9d:2b:99:5b:de:91:d1:01:d9:34:4e:6d:94:31:30:02:73:61:
00:0e:f2:50:1d:7f:c1:d1:b6:b9:c5:0c:07:bd:4c:1a:48:a1:
12:4e:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:57 2025 by rpki-client