Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: 6ETBlCWnKqTKxgKFSTsR5X7OlxmFR4GXRK18lcs6rPo=
Subject key identifier: 0C:FD:84:BB:07:9E:48:6C:A7:EF:8A:C5:C9:97:88:13:D0:97:15:5B
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 0198D65F5190133C9F6C97413C8685E4CD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: 5W3VACedEzhLpo0lSbC+pZANSSBJZPobF3uCzbUWeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:51:90:13:3c:9f:6c:97:41:3c:86:85:e4:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=0cfd84bb079e486ca7ef8ac5c9978813d097155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:be:f6:a6:b3:0e:31:95:2e:ac:dd:95:3d:
93:f5:2c:09:bb:7b:53:bb:5d:15:9c:c7:c6:94:67:
6c:3b:6d:c0:de:6f:79:72:1f:e9:c4:80:f1:2d:8d:
ac:ce:e5:c8:de:5a:c4:1c:a7:7f:e0:09:0b:16:c1:
d0:81:8e:05:7d:e0:fe:97:a9:a0:72:02:2a:12:18:
24:50:6a:d6:2c:3c:31:64:44:b1:a8:6f:1f:a0:63:
7f:44:75:4a:48:1c:68:f5:13:08:35:21:5c:93:1b:
15:bb:c2:4b:1c:9c:c4:f4:00:6c:1e:47:7c:90:66:
0c:f7:df:6c:a9:e4:ae:7b:8c:db:0a:84:53:fc:c9:
8e:92:ef:0a:60:c9:01:6a:73:64:3a:7e:85:c7:f8:
7f:9d:31:61:e6:8d:5c:65:ef:e0:99:33:4c:2f:18:
ab:a1:5b:6c:dc:3c:8e:1f:a5:ce:70:92:9c:b3:1e:
59:b7:26:0f:b3:3f:8a:57:78:db:c6:d1:94:1a:13:
2e:82:a2:7b:27:27:f9:98:85:3c:a0:82:50:a7:30:
b7:ab:a5:3e:d4:16:5e:a4:f8:7e:ba:e9:3d:7a:7e:
be:13:d1:6c:0f:62:50:d0:60:66:d1:27:56:74:db:
ad:82:a5:b2:77:dc:1f:d4:2d:51:60:bc:2b:6f:71:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:84:BB:07:9E:48:6C:A7:EF:8A:C5:C9:97:88:13:D0:97:15:5B
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cf:c1:3b:f7:42:1e:2c:89:04:45:45:22:01:09:66:86:4a:
f7:0a:5d:c0:3a:b8:c0:c4:2b:7c:3d:ef:51:9c:8c:9e:a0:98:
50:08:58:da:dc:9a:87:a5:63:60:64:72:a4:d7:1f:7f:d6:f6:
31:08:11:85:86:25:99:d2:dc:de:e9:e9:16:bd:83:3f:23:80:
a2:10:ec:90:8d:fd:63:dd:f0:64:7c:f5:53:08:a7:51:a3:fa:
a9:e1:bd:d4:98:45:af:2a:9c:d7:49:e9:80:91:0c:e4:ab:4c:
68:64:4a:be:11:99:ee:0c:52:e7:61:d5:e6:69:4c:f5:c6:d1:
1c:db:31:9f:4c:a9:97:38:cb:e1:81:84:d2:c9:76:d1:b8:7c:
45:2a:bd:53:11:c9:8c:85:9d:cf:56:f8:fd:c9:4d:ad:73:41:
c4:94:75:2c:b9:7d:b9:10:e7:11:9f:17:b1:58:ef:29:85:39:
9f:23:41:6d:53:72:e6:e8:dd:87:a6:d1:80:ae:0b:d1:e2:59:
55:4a:43:55:3f:eb:64:60:30:a9:78:2b:d8:03:ce:3c:23:4f:
c4:4a:e2:4e:99:4e:86:12:bc:12:7f:eb:ab:f1:ed:e9:5d:ce:
3d:e3:12:1f:a1:44:23:59:89:88:35:d8:c6:94:24:39:df:ab:
f6:88:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:26 2025 by rpki-client