Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: holKOQ3/sR+DuL9/9X7FdlQhxE2uNx7snVK7/mipuAo=
Subject key identifier: 2B:3A:97:30:E5:50:61:79:E7:C4:7D:76:6C:71:BD:78:54:1C:1B:6A
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019A729399F35E326BB1239E60BCCD04E8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0A3C
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: Tz9IK+fZDmwN+kFpmDEjb267PQY1pkY1ouuTT2llLSE=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:99:f3:5e:32:6b:b1:23:9e:60:bc:cd:04:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=2b3a9730e5506179e7c47d766c71bd78541c1b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:0a:42:2a:30:3e:55:17:3c:73:ce:38:01:
d3:ca:b4:3c:c8:6e:0b:09:ee:84:90:6e:79:db:70:
56:e9:2e:17:f2:12:ec:95:e1:a0:b6:51:ed:ca:ec:
a6:51:f7:17:d5:a9:86:21:fb:61:38:f7:09:be:54:
11:72:2c:5c:af:d3:df:7b:84:a7:02:9c:8c:ec:85:
8f:19:ba:cf:7a:11:ce:d2:f0:19:7c:c0:60:52:c7:
2b:bf:4c:1c:49:5d:c9:b1:c8:65:ed:d2:5c:a8:06:
21:15:da:16:be:77:b4:c2:36:14:98:be:6e:a0:46:
93:2f:a6:fa:20:c1:3b:ee:90:a8:45:a8:41:85:79:
ff:7a:0d:8e:42:db:a9:3c:0e:7f:e6:e8:8e:9e:db:
9e:66:79:4f:ca:55:c9:18:7f:00:b7:63:6f:91:0e:
91:e5:b5:97:cc:80:92:d5:58:54:c7:16:7f:fb:08:
77:3b:c2:c7:93:70:e8:31:26:84:23:13:01:0b:a4:
c8:54:a2:70:77:ec:95:2d:89:8d:39:0e:16:0e:03:
ed:1c:10:bf:c6:75:c6:6f:9d:40:bb:46:fd:ce:4d:
16:c0:ca:c0:ed:da:be:67:58:df:e0:4e:62:8a:a4:
33:35:c0:ad:53:11:2b:22:fd:0c:0f:d9:29:4d:7c:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:97:30:E5:50:61:79:E7:C4:7D:76:6C:71:BD:78:54:1C:1B:6A
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5d:ec:ff:84:6d:dc:5e:db:67:03:45:1d:4c:2f:e8:ff:69:
ac:ea:64:e4:1d:ea:8c:2a:f2:f3:f9:c5:52:85:45:42:b7:36:
d5:e1:57:40:c7:82:98:dd:df:92:cc:03:75:a8:01:b0:c2:af:
82:99:ac:89:b5:86:2c:62:60:b1:6e:bb:f1:a4:b5:76:c9:00:
60:a7:b3:c7:de:39:86:c2:2d:b2:3f:b9:d9:fc:c1:7e:07:9d:
8e:c8:00:47:88:1b:e0:56:62:7d:99:05:08:f4:2c:f4:e0:64:
fd:ba:05:9d:4b:59:33:44:3f:82:14:e4:63:11:cc:71:50:a5:
9f:53:7b:2f:ca:30:cb:25:7b:25:e6:2c:50:1f:d7:40:b9:be:
0f:90:7d:71:1c:eb:ab:86:e0:90:95:98:4b:c1:47:30:d3:9e:
33:05:9d:ae:42:3a:1d:89:69:90:c7:00:66:d6:ef:ac:31:2e:
c0:c2:21:47:f2:54:d4:73:b5:4a:7b:98:72:46:fb:d9:f0:3e:
b5:7f:8d:4c:5c:b5:50:6c:4a:20:8b:8c:5b:bc:1f:6a:48:d6:
51:7d:82:41:13:e7:0f:d5:d9:9b:41:64:4e:d1:dd:dd:b9:a6:
ed:ef:f0:39:20:45:ea:b0:3f:8f:ff:58:cb:ce:e3:dd:d0:f3:
a1:f6:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:47 2025 by rpki-client