Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier: Tov2w32qaRnBNTv6ljLhnB8Ody7EEJE/CLaxgFhzwAA=
Subject key identifier: BB:3F:F0:59:3B:FA:27:01:64:3A:BA:EE:FB:EB:EA:E2:22:AE:D1:DF
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 019916F6A0AFC8010A9082B801AABD384B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number: 05A5
Signing time: Thu 04 Sep 2025 23:01:25 +0000
Manifest this update: Thu 04 Sep 2025 23:01:25 +0000
Manifest next update: Fri 05 Sep 2025 23:01:25 +0000
Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: HpDM0OQm2KTQTnEmrbBYRyAxyvZxwPjg4QyBSyCRKRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:a0:af:c8:01:0a:90:82:b8:01:aa:bd:38:4b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Sep 4 23:01:25 2025 GMT
Not After : Sep 5 23:01:25 2025 GMT
Subject: CN=bb3ff0593bfa2701643abaeefbebeae222aed1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:1d:3c:78:a8:12:2c:06:3f:f3:46:fa:ad:
b1:27:17:14:6a:6a:98:f5:d0:d3:16:02:d0:b7:f2:
4e:71:01:b1:3a:34:a1:0e:c0:d8:c7:13:13:a2:48:
ca:de:99:c8:30:f8:45:7b:24:86:0c:92:c2:c8:5c:
49:34:40:c0:1f:71:e0:06:87:df:54:fb:fd:89:88:
1b:2d:bd:47:d0:41:b1:2e:19:03:88:33:f3:02:b0:
8a:9c:99:b4:14:fa:64:85:3f:c8:3e:f5:ca:bc:8c:
3c:8e:2e:3e:b7:3e:9e:a2:24:a0:fa:79:d9:e8:15:
eb:23:c6:87:8f:6f:61:0c:db:03:d1:d2:41:f6:d6:
c8:6c:0a:22:6a:e5:9f:05:42:85:7f:ec:f0:46:b1:
99:f2:cf:40:93:26:70:fc:9e:6d:f1:23:7c:74:21:
38:1b:68:6e:a1:e5:01:d7:87:30:34:33:b8:04:82:
70:a1:7b:e8:5a:f4:d5:b5:67:73:2c:ac:74:3a:a1:
3d:b9:dc:90:2f:3b:1e:c5:c2:4a:45:81:90:98:18:
72:ba:21:0f:4b:a0:38:37:a7:7e:af:3e:30:7a:04:
ae:f2:04:9e:61:3c:10:51:b2:52:9a:76:dc:03:d0:
a5:56:c2:21:d8:4c:4d:b1:9b:fc:73:30:92:e6:bf:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:F0:59:3B:FA:27:01:64:3A:BA:EE:FB:EB:EA:E2:22:AE:D1:DF
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:10:a6:8d:28:31:70:87:51:bf:e9:4e:09:2a:93:c9:7f:7c:
bf:aa:d4:de:0b:ad:ed:20:2c:5a:7c:8d:18:ec:19:d1:bf:97:
a8:bb:c5:c8:ff:80:18:26:57:e3:5d:06:3f:d8:33:9b:a1:6d:
3f:19:0e:a5:cd:57:25:50:05:f7:02:ec:f6:f1:2f:2f:ea:44:
cb:51:57:70:fb:84:50:93:fe:f7:21:cb:36:36:43:f4:30:60:
83:86:d6:dc:ef:35:06:c7:31:81:44:56:7a:63:a5:17:f3:42:
6d:d1:c0:a0:2c:1b:51:47:d7:9b:57:24:b1:0c:d8:e3:91:8c:
43:ff:5b:a2:c1:3d:2d:88:6a:88:c1:db:f4:37:bf:5e:5a:4f:
4a:90:c0:6b:f2:49:27:74:d0:47:c6:18:f2:e2:71:46:cd:88:
55:b7:fd:27:d8:95:7e:a9:7d:31:e8:e9:70:4c:1c:43:c0:de:
35:43:1c:8d:19:dd:79:d6:50:09:c0:b6:77:d7:fd:fd:b2:73:
f4:9c:34:7d:ae:dd:50:93:00:03:0f:e7:df:c6:6b:43:a5:2b:
42:41:f2:2a:23:99:9f:97:4d:f5:8f:cf:d3:f6:c4:b6:c7:7c:
88:f1:b7:50:bf:7d:b4:ad:95:34:d9:84:10:f8:e3:fa:a7:8b:
7f:3a:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:24 2025 by rpki-client