Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
File: YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft (raw, json)
Hash identifier: WCH8JZNsgAqpz/0NLCp+pxGjTCEVjpfa5SoJlIGH6iY=
Subject key identifier: 9A:65:01:93:40:CE:A8:18:A1:38:36:DF:A0:A0:62:97:DF:93:5A:89
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Certificate issuer: /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial: 019916BF66A90343AEB23C17D06FC150FCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
Manifest number: AA
Signing time: Thu 04 Sep 2025 22:01:06 +0000
Manifest this update: Thu 04 Sep 2025 22:01:06 +0000
Manifest next update: Fri 05 Sep 2025 22:01:06 +0000
Files and hashes: 1: 8eOcRvtFv6WKmWJsvFtCeh3bQOI.roa (hash: Fc0MHvgeimy08EQvI9R5qWeNLdRQwq1sSVsHXK/MAtQ=)
2: YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl (hash: Tlzh6xjJcrV8qeQynZpABnVM6aagHwD2cOXTq1n49eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:66:a9:03:43:ae:b2:3c:17:d0:6f:c1:50:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Validity
Not Before: Sep 4 22:01:06 2025 GMT
Not After : Sep 5 22:01:06 2025 GMT
Subject: CN=9a65019340cea818a13836dfa0a06297df935a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:92:5d:d6:b4:11:8e:d4:3f:c4:71:fe:95:
50:19:4a:08:8b:b6:ae:5e:61:ad:a4:6a:97:26:6a:
8b:4e:64:bb:33:bd:09:e7:fa:d4:a4:bc:de:86:57:
dd:77:a3:5e:0e:49:4e:46:f2:26:48:f5:39:3c:1a:
af:f2:69:7b:c3:a4:45:2a:a4:1f:17:13:09:f3:e0:
70:b6:3f:9f:8f:07:27:d9:9b:c6:b5:c4:95:39:9d:
1f:9f:fd:a4:8e:79:5e:ee:b7:ed:b5:3f:a4:bb:b2:
e1:da:c6:95:f6:3d:d5:f7:8a:1e:4e:e7:7c:ea:13:
b2:06:fa:c3:73:71:a0:59:26:cb:cd:12:05:80:32:
08:98:23:0a:9a:d5:f2:9e:83:b5:aa:a6:16:aa:5e:
ea:e0:5f:b4:7a:cc:c8:fe:b8:7d:b7:b9:d8:5e:60:
0b:03:4f:49:7b:93:13:5b:8b:ce:4e:c5:fa:59:c6:
f1:c2:10:8f:56:fa:07:d3:70:ab:ac:80:e5:97:eb:
ce:44:88:30:da:f9:14:8f:68:f9:fc:83:10:a1:01:
52:78:3e:9a:6d:e9:18:e6:8f:51:82:65:28:a4:06:
2c:6c:9f:d7:68:b1:bb:6e:dd:f1:b2:7c:63:50:ad:
2d:2c:47:1c:83:67:ca:8f:14:59:5c:f4:1f:8d:12:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:01:93:40:CE:A8:18:A1:38:36:DF:A0:A0:62:97:DF:93:5A:89
X509v3 Authority Key Identifier:
keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:db:7f:3a:3f:24:ef:9f:6f:dd:d7:61:bb:3e:d9:bd:7b:f0:
2a:58:9c:47:8a:d3:3f:cb:3a:a7:1f:8c:82:b2:c5:ff:23:0e:
0b:4d:ac:6c:a7:87:6f:9e:89:7f:cf:6b:76:ae:15:ed:82:ce:
2b:c1:4d:e8:06:d5:c7:6e:bf:f0:b1:d1:de:cf:db:14:13:f2:
12:d7:62:fd:18:d4:2d:d2:54:c9:71:7f:f2:d4:46:0f:dc:b2:
32:60:e9:a9:0a:ed:c1:43:4b:61:17:dc:77:17:c8:63:08:75:
c0:83:9d:d5:7b:5d:6f:ff:65:35:95:3e:4a:59:a0:70:e5:9b:
b0:fa:b4:7e:73:05:79:17:1b:43:05:68:07:f9:e6:7d:a8:e3:
86:d5:75:7a:2d:3e:c4:4e:4d:bc:23:03:1e:83:40:bf:df:75:
15:98:4b:35:91:07:02:25:81:6c:a0:16:f2:8d:c0:65:31:aa:
ac:63:9d:ce:60:c1:93:f4:87:4d:70:14:fa:d4:23:c7:b4:47:
2e:8b:f0:f4:dd:0d:f3:6c:1e:47:bc:8d:67:cb:6a:ed:d7:6b:
ba:d1:b9:9f:11:24:20:5a:aa:62:12:84:2c:41:e2:8c:7c:4f:
e2:1d:9a:81:0d:7e:6e:ff:a6:4a:a0:39:65:63:48:21:ab:e8:
e1:41:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:09 2025 by rpki-client