Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: T/5EKa32mGcASHrMYT0XprFuhNJsbBlYd8KBHwJFR9w=
Subject key identifier: C4:20:7E:BA:C0:F9:92:6F:00:66:2F:BE:03:A1:37:F4:08:8A:6E:91
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0199FDD9BC4F295D5F1126D12DC24FF39241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: oN464ODmjxkKAcjkrMTSDG675mYPYZWE6aqUaOl60j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bc:4f:29:5d:5f:11:26:d1:2d:c2:4f:f3:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=c4207ebac0f9926f00662fbe03a137f4088a6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:41:a8:45:43:47:b8:2d:0b:ac:8d:43:ec:
5f:ec:8f:80:92:a7:8b:08:d5:7f:77:15:09:0c:11:
cf:a0:f9:7c:ae:69:e5:ab:3b:56:73:e5:0d:19:2c:
fb:2b:d3:de:29:56:67:51:81:c9:ed:5e:20:46:94:
ef:b7:c0:71:ec:ae:6e:8d:fa:91:d0:69:3b:1e:06:
c3:14:92:a2:bd:0e:a9:41:47:09:a6:58:1c:83:5b:
d2:54:35:f9:66:64:1a:e2:ed:de:a9:a9:cc:4c:f2:
45:85:34:37:b4:15:80:b8:35:f3:05:6d:96:55:aa:
ac:34:90:43:3f:7e:1e:c7:f2:36:60:85:5b:e0:bd:
2a:e8:dc:cf:54:f9:e8:6d:90:24:40:ed:02:fd:89:
5c:7c:fa:b3:6a:0e:48:18:9d:ce:12:31:a8:b0:6c:
5b:e1:7b:c7:ac:9e:35:c5:c0:a4:cb:a6:c4:38:61:
12:95:89:9b:5c:bf:b8:38:8e:84:c1:39:2b:03:b9:
87:21:45:50:f0:d6:86:d5:c3:d1:49:c4:8d:b0:22:
d7:bf:40:d7:8d:b1:5e:da:d1:11:47:f1:bf:e3:88:
6e:fa:41:13:9f:30:ba:4e:2f:2a:d7:b0:43:b8:7d:
f4:5f:79:a7:85:fb:fa:bd:93:5d:90:c5:51:c0:69:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:7E:BA:C0:F9:92:6F:00:66:2F:BE:03:A1:37:F4:08:8A:6E:91
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:1b:d2:b2:5d:60:7d:42:05:bd:29:24:f9:24:4f:88:c6:12:
eb:3f:57:00:03:f1:38:ee:20:7d:67:ce:7d:e4:e0:d0:78:4a:
4c:ca:ee:c5:f3:0a:01:6e:c6:ff:fb:20:6f:35:cf:70:24:9f:
96:9e:ec:8e:00:69:d0:01:44:4b:d5:7e:39:07:16:12:91:2b:
33:f5:6d:20:26:d2:45:5a:e5:e4:31:46:6d:0e:76:54:ba:52:
50:10:d6:11:7e:5b:b9:93:10:0f:08:ca:01:80:b0:87:7c:a2:
01:db:b1:2d:1f:9c:26:8a:66:34:4f:e9:a8:73:36:56:d4:a3:
91:be:f1:60:82:db:f8:76:56:7c:48:f8:dd:ea:f7:24:21:69:
27:39:26:32:69:b7:1c:9e:e8:5c:77:09:12:1b:d9:5f:ab:44:
67:44:8f:86:b8:30:81:4a:a2:ec:35:4a:a8:5f:03:97:de:bb:
e8:89:f2:3f:8a:8a:13:6b:a4:7d:19:b6:2e:a6:ea:fa:26:b7:
44:3e:ab:26:4a:85:8e:c3:80:0f:5f:52:27:41:ab:1c:d4:7b:
33:72:c3:d9:b6:ac:71:e4:84:b5:02:07:ae:8b:a0:3b:6a:35:
01:cd:22:32:31:25:c4:26:d6:6c:41:29:88:ee:ef:b9:a5:10:
c0:d1:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:13 2025 by rpki-client