
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: t2gMlUsE1w8G8AZKtPYewRar3VVhxCp+M2TX4/rymfs=
Subject key identifier: 64:A0:1E:26:72:3D:92:86:51:62:86:CA:7D:F0:06:CD:FC:66:B8:27
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 01987418ECB9CB158B587534FE56D6BEACE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 08F6
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: QkSMOlqTn3eMzXRp8wSpuvgTHtC89jDy1FOMF2+g2rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ec:b9:cb:15:8b:58:75:34:fe:56:d6:be:ac:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=64a01e26723d9286516286ca7df006cdfc66b827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:4a:71:63:04:5f:52:97:5a:e6:13:0c:dc:
91:ac:f1:01:f8:6c:31:2f:0e:68:5f:1e:47:23:37:
c6:29:25:d5:4e:bf:b8:a8:5f:dc:27:d5:a1:fe:37:
4b:62:b3:8f:52:f4:b4:cb:59:7e:8c:8e:84:52:b6:
7b:62:c6:87:f2:dc:22:8d:fc:9a:d4:29:c1:c5:ed:
43:fc:6c:7a:49:e7:d1:55:99:6d:32:d9:43:fc:5a:
9f:20:0f:d0:3b:65:c7:5f:fb:c4:34:a6:15:1d:3e:
46:cd:7c:f9:5b:56:43:da:d9:f9:80:ff:42:de:0f:
a8:36:ca:e7:f0:18:89:bb:55:a5:1b:c2:b2:a5:97:
89:a1:8a:d1:94:b8:e8:b2:39:48:af:27:08:34:f9:
4a:26:91:a8:13:0b:8a:c2:b9:c7:75:63:17:c5:a3:
66:34:59:ac:f5:3e:c8:e7:19:8a:59:2a:cf:dd:d3:
b3:8f:20:97:f2:20:f8:d3:92:e9:0c:49:2f:56:8a:
d0:60:63:5e:82:d8:00:6e:eb:bf:12:34:13:d1:f8:
4e:99:b4:82:ad:a5:db:80:fc:65:e8:78:7d:8d:f4:
f4:f1:a9:ee:50:6a:50:13:6a:5b:71:26:34:cc:5c:
0c:8d:d5:4d:f2:2f:f1:3a:84:50:a8:51:cb:66:2b:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:1E:26:72:3D:92:86:51:62:86:CA:7D:F0:06:CD:FC:66:B8:27
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5c:81:f4:d0:47:0a:1d:19:78:d3:ef:1c:70:22:86:1a:5d:
6e:48:82:b4:63:71:d2:c0:52:c5:32:74:04:46:c5:1a:cf:ad:
a1:19:f7:fb:0a:00:b8:43:8d:2a:76:90:80:76:56:a3:fe:c0:
44:06:ab:8c:cf:93:c7:8e:de:c0:c6:75:48:22:8c:e3:46:52:
83:16:19:20:2a:28:86:db:4a:64:bd:c3:a7:0d:41:e5:1d:2a:
24:15:32:3b:3d:be:26:ea:91:3b:59:fb:f1:f9:5f:47:2c:b2:
45:1a:5b:08:27:a3:b4:3b:af:34:53:62:2a:4e:8f:a4:41:28:
7d:29:b8:2a:20:0e:8e:4f:13:02:b1:ee:16:bd:f8:47:a2:82:
0c:ad:57:62:87:0d:53:e3:71:a9:76:f5:f9:18:6d:3b:d7:6d:
3f:14:ae:3f:06:be:0b:60:7c:f4:3b:4f:a2:61:87:9a:39:8a:
a4:d3:34:00:ae:bc:cd:c6:de:28:42:ed:80:82:7e:b0:47:b2:
b9:b2:01:8d:20:47:f1:81:77:76:08:b9:9e:40:d3:14:25:ad:
8d:8e:21:07:33:2a:ba:6e:e5:70:36:13:06:1d:3e:13:43:d8:
6c:54:93:f0:39:6e:9e:1f:20:28:02:29:e6:0e:91:95:8e:cf:
f7:ac:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:06 2025 by rpki-client