Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: 3Fco1T87izHw/cE+jddaZAdgyYUveGmrKT5EozmK7nQ=
Subject key identifier: CE:00:57:83:CD:65:0E:83:67:24:67:FD:01:38:91:2D:37:B1:80:DC
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019916F67C41A81A4B485A6D90B5A99B2034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0988
Signing time: Thu 04 Sep 2025 23:01:16 +0000
Manifest this update: Thu 04 Sep 2025 23:01:16 +0000
Manifest next update: Fri 05 Sep 2025 23:01:16 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: m6dSmeTHapyInq+wUqUNpTSMh3yjkMXYDBGWwwEmfLg=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:7c:41:a8:1a:4b:48:5a:6d:90:b5:a9:9b:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Sep 4 23:01:16 2025 GMT
Not After : Sep 5 23:01:16 2025 GMT
Subject: CN=ce005783cd650e83672467fd0138912d37b180dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:89:27:d6:46:43:b1:fe:66:f8:bb:70:e3:
57:b6:21:32:5c:c5:cf:d4:7c:0b:6d:dd:1d:3e:7e:
47:d4:3d:35:37:db:bd:78:f9:21:13:24:32:97:fa:
3e:79:06:63:ec:25:c0:e8:47:a9:61:37:82:dd:7f:
58:29:53:8e:85:14:c9:b2:c9:10:b9:89:dd:4f:42:
7d:ad:1f:52:70:41:9b:87:98:73:00:ae:b2:4d:23:
50:57:a5:ff:5b:73:07:ec:ca:19:5c:33:39:54:9b:
26:b2:ba:7b:54:3b:d8:57:4e:0b:18:99:a6:3a:e1:
74:12:fd:f8:b1:a9:6c:e3:b2:fd:7e:b6:35:31:18:
fc:3f:44:4b:6b:d8:05:a2:18:c3:b9:3b:6a:f1:84:
80:bd:2c:49:b8:f9:b8:fe:ac:e7:b5:11:c4:1a:8d:
49:fc:16:84:62:8a:ae:de:35:3e:06:8d:e2:e7:2c:
1a:46:c0:85:cc:db:95:02:90:73:eb:99:fb:18:66:
83:ec:78:cf:ba:6d:d2:a2:0a:bd:10:2c:14:a8:cb:
da:3a:49:f1:89:48:c4:b2:17:77:ba:e3:3f:12:1b:
35:04:7f:36:e7:36:13:71:b1:7f:26:db:f8:93:16:
2f:56:f8:66:76:06:8d:4c:c1:72:eb:b1:0f:9f:64:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:57:83:CD:65:0E:83:67:24:67:FD:01:38:91:2D:37:B1:80:DC
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:4a:ef:40:2a:ce:db:ce:9f:32:fc:0b:cb:4e:6c:4d:0e:
40:63:36:6b:99:30:ac:2c:88:c8:4c:85:c7:2f:b7:23:ec:46:
7c:b9:0f:a9:99:8b:d1:27:fd:3d:1e:2b:cb:33:38:0e:4b:e5:
9e:9f:4b:dc:ac:4b:20:d9:91:9c:00:1e:95:f0:e9:9f:70:7b:
ea:cd:a0:73:38:ac:b3:aa:e5:d3:5b:fa:e5:c6:13:8e:5c:ad:
a5:af:1a:50:9b:a3:be:3d:74:4d:b6:1e:56:d6:79:23:64:b9:
a8:71:1e:31:37:cf:ce:03:24:6e:3e:cc:38:cb:11:5d:28:ab:
ec:d3:e2:0c:3e:42:a2:5b:7b:10:06:65:c4:07:ef:05:03:d4:
6d:72:64:a6:5b:57:dc:33:e8:e8:61:83:5a:67:a4:09:bc:11:
8d:e0:6d:97:97:66:3e:cb:a5:b1:a7:85:19:d9:4f:4e:82:8b:
9b:d3:85:9b:f3:d7:52:d8:e9:60:a5:35:5c:fb:d2:09:7a:ff:
d8:e3:f5:16:b6:ab:73:79:33:60:b7:c9:35:ae:1f:cb:02:a6:
eb:db:16:31:3e:d3:90:b9:93:01:da:4f:f6:96:fa:bb:ec:33:
1a:e1:e8:b4:1a:00:8f:1b:f5:82:b9:1c:7d:49:c9:48:81:09:
54:28:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client