Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: x6FLKXTVA/M1ngFXh39McgDvBMJ38hFu4E8y3izKp88=
Subject key identifier: 99:2D:9B:4C:0C:71:A0:66:D5:7A:6D:8B:50:5C:D1:71:43:3B:8C:82
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 01984965293E4943D11DF2650F7387A57ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:00:23 +0000
Manifest this update: Sun 27 Jul 2025 01:00:23 +0000
Manifest next update: Mon 28 Jul 2025 01:00:23 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: Uz8lycWa6W1BAeMFsBtF/RVfjsq+IQQH+77AAJNuL1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:29:3e:49:43:d1:1d:f2:65:0f:73:87:a5:7e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jul 27 01:00:23 2025 GMT
Not After : Jul 28 01:00:23 2025 GMT
Subject: CN=992d9b4c0c71a066d57a6d8b505cd171433b8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:76:45:84:c3:7a:c1:88:66:4e:1d:a9:fb:
0c:25:d1:eb:f7:b5:76:97:e4:9c:07:08:ff:ab:0e:
e4:37:97:9b:1a:5e:a2:07:35:07:15:97:99:ba:33:
a9:f2:2b:b5:89:f4:16:01:b9:60:a4:95:78:ef:8e:
98:7f:6f:71:2e:6f:a1:af:29:fb:06:67:b2:7f:dd:
f2:7c:50:70:8e:58:5c:a3:bd:f5:81:11:0a:07:60:
bd:e7:1e:08:cd:86:36:97:0b:bd:72:15:fa:6c:43:
e3:b5:5c:a0:c5:27:df:2a:42:2b:04:a4:01:93:7c:
43:41:eb:db:2b:a3:7f:d4:b1:bd:06:84:dc:24:f9:
7c:78:43:69:c8:c0:d6:ad:af:e9:9e:98:83:72:74:
bb:45:fe:6b:64:0b:57:d0:30:f3:56:b8:c4:b7:8d:
e9:e8:0e:d8:52:d4:c3:83:04:7d:5c:24:34:db:9b:
30:c0:9c:1a:1d:a3:ab:0c:86:4a:52:2d:da:68:53:
a3:d4:d0:71:12:d9:6c:47:14:63:5b:f2:3e:d9:35:
4b:37:16:9a:0f:89:48:71:dc:40:6d:2a:89:cb:0a:
a9:b4:48:51:4c:cc:e3:25:25:49:eb:d7:90:07:ee:
bf:c2:5d:53:eb:a7:f6:86:59:ad:bb:6f:fa:27:48:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:9B:4C:0C:71:A0:66:D5:7A:6D:8B:50:5C:D1:71:43:3B:8C:82
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:82:8d:55:b4:c0:4f:bb:c5:fc:5a:17:7f:4b:f1:41:2c:57:
41:fc:de:54:b5:1f:c5:70:aa:a5:85:ac:07:48:ef:12:82:fb:
eb:99:d8:4f:b9:07:ba:b3:76:2b:8e:3e:2e:9b:e4:14:98:40:
3c:a8:fb:05:1b:4f:41:c2:84:c8:b8:cc:a5:58:13:08:28:e5:
79:6e:5f:6a:10:1a:79:1a:0c:61:83:65:8d:57:65:4b:67:37:
f9:a7:bc:ee:3a:03:f6:34:04:5c:15:d7:8f:34:52:95:43:07:
4d:d5:a5:40:3b:2d:91:a8:62:32:0e:4f:9f:25:b6:7a:21:ac:
0e:7b:8b:36:9e:16:db:02:4f:9e:18:63:a6:a8:43:f3:3e:a4:
c1:df:38:bf:85:4c:d8:34:94:2d:09:e3:9e:6f:44:a1:ea:b5:
92:bb:6f:50:2e:3e:6e:a4:f3:4e:96:fc:40:1e:74:fd:8d:25:
29:81:73:df:42:5f:6b:c2:db:38:a1:c0:20:58:48:68:a4:54:
c4:9d:57:a5:37:27:50:49:1f:59:e2:ee:9d:14:dd:ac:79:b6:
d3:61:e9:9e:31:3d:97:fe:c7:4a:e2:14:4a:ba:2a:3b:ac:29:
91:8f:bb:e1:3c:ce:83:ac:d3:0e:ef:c8:cc:96:82:7e:bc:d1:
3c:70:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:13:20 2025 by rpki-client