Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: JncHPF4Bmaddwn21qXyFPug5dO8dglcufH9tLe4/aQ0=
Subject key identifier: 9D:92:32:03:BD:29:20:E6:F6:E7:42:9D:F2:E5:C4:08:E9:E2:62:BA
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 0198D54E58E5B4762ADA07C96B03A66C2055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0966
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: bSEpC0TS4fY7xd9LNBHqQsVRz2mLJBoMcFTmGFxp6m0=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:58:e5:b4:76:2a:da:07:c9:6b:03:a6:6c:20:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=9d923203bd2920e6f6e7429df2e5c408e9e262ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:08:47:8c:86:97:33:32:2f:5f:de:a7:d6:
c8:c3:c0:56:79:28:4f:a0:0d:59:65:7a:a2:34:39:
21:79:a5:27:26:68:48:eb:d2:65:30:89:51:90:a5:
f5:03:e3:0f:d3:56:c8:6a:ec:17:9c:de:56:ed:30:
42:52:1b:c4:92:bd:56:0a:ce:dc:15:e4:ea:04:44:
02:90:35:a3:ca:51:e4:7f:9d:70:5d:df:37:3a:bd:
a5:9c:cc:2b:12:52:f6:0e:1b:4a:32:7a:a6:0c:b0:
49:e4:a5:d7:75:e1:8a:b7:cd:da:fc:ab:ef:84:99:
f9:b8:da:8d:87:e4:ba:85:f5:26:39:f9:f0:56:4f:
64:f5:03:73:a6:00:f7:fb:fb:a5:09:43:62:08:7f:
e6:c0:cf:90:37:58:d2:2c:de:cc:a6:45:ab:b0:51:
12:3c:64:d8:94:9f:0b:48:53:96:40:e9:5c:d9:98:
b3:9f:18:f7:d5:ae:ac:a6:f3:34:9c:62:5e:60:e6:
eb:2f:f6:b0:49:7e:3e:af:38:89:0b:0b:d0:e1:66:
2b:5c:0f:ed:a6:d0:36:62:aa:a4:3d:2a:36:5f:82:
1e:1a:2d:a4:b9:57:37:61:4e:a7:29:04:ef:0f:e5:
de:f3:93:89:d3:a2:19:4b:09:03:64:e6:41:ff:bd:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:32:03:BD:29:20:E6:F6:E7:42:9D:F2:E5:C4:08:E9:E2:62:BA
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:46:a7:cf:0a:27:34:66:32:aa:70:37:58:79:c2:eb:12:eb:
6d:72:6e:1d:73:5f:1a:2d:2d:72:82:ad:59:8a:e8:d0:ee:b6:
e1:f2:35:a7:fb:81:44:9d:9d:5c:96:b6:4b:12:44:98:ad:98:
74:1d:49:4d:2c:08:fa:65:9b:dc:fb:33:46:42:e8:66:3f:d5:
d1:b7:b4:e5:ca:c2:c4:64:04:9d:3e:e1:a6:b0:6c:b2:35:4e:
9d:bd:97:6d:01:ef:22:f4:37:31:e8:f4:d5:a4:21:a2:61:45:
dd:92:33:aa:9e:28:14:05:1d:a9:12:95:ae:43:24:ea:36:a2:
ec:4c:80:bb:43:9f:46:48:a2:44:3e:68:93:b0:c5:fb:8e:64:
04:fa:02:01:46:51:1e:38:29:0b:09:8d:64:b6:de:ab:0b:7f:
b4:67:85:a5:bc:bc:a2:a1:f4:05:fa:2a:8c:a5:9a:a6:ae:a1:
d6:5c:e4:d0:80:72:16:53:22:18:ce:92:3a:ec:90:15:8f:19:
ef:53:f9:4e:29:7c:a7:bf:e7:da:ec:a9:b8:ff:1c:85:63:94:
13:36:64:e8:1f:5f:69:b7:be:43:20:36:2b:f5:45:45:4f:c4:
a0:f5:e5:96:e4:07:9a:ce:c1:79:21:3e:d8:d2:eb:9f:75:8d:
6e:08:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:12 2025 by rpki-client