Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: 5WqnniuS6uMG21P7ywxMMdsszsKwVeOUjHr8ubptPqE=
Subject key identifier: 6F:8D:D2:A5:BF:CC:A1:3D:9B:14:B5:91:8D:CB:85:CB:15:3B:45:D9
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 0198936CC18D72B926456D4063F2ED616247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 0391
Signing time: Sun 10 Aug 2025 10:00:34 +0000
Manifest this update: Sun 10 Aug 2025 10:00:34 +0000
Manifest next update: Mon 11 Aug 2025 10:00:34 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: njeaxwx4BFzpuNGNkde6Bi7DZ0N/4A2r9GmAMF5eFnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:c1:8d:72:b9:26:45:6d:40:63:f2:ed:61:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Aug 10 10:00:34 2025 GMT
Not After : Aug 11 10:00:34 2025 GMT
Subject: CN=6f8dd2a5bfcca13d9b14b5918dcb85cb153b45d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:2a:f7:71:ce:f0:1b:e8:96:c4:95:e9:bf:
01:73:c6:c1:03:fd:00:57:0f:f7:69:a0:3f:27:36:
56:4a:ac:77:d8:79:c7:f5:e0:d1:cd:34:56:52:b2:
c2:dd:33:0a:37:0d:4c:4d:1a:28:e5:41:f9:ab:cf:
6d:e3:0a:d6:ba:14:f1:0f:cc:d0:f0:0f:ce:bd:ce:
fb:a3:68:43:88:a0:19:de:ac:96:dd:28:0a:c1:b4:
b1:dc:ee:af:3a:fc:cb:4b:f6:98:52:ab:09:df:16:
9e:24:d0:dd:fb:0b:78:4d:9c:8a:cf:94:05:68:18:
3b:45:8c:13:54:ab:21:d1:1c:ce:4f:03:54:8f:9e:
83:86:32:e5:ab:2a:b1:d4:12:00:1c:e8:e7:1f:ec:
3a:94:71:a4:12:a2:a9:0a:37:4b:56:c3:c2:10:7b:
83:af:69:78:79:24:22:70:ff:28:f9:b9:ed:49:59:
73:ad:16:b6:6a:77:70:a5:8e:a8:48:a1:5a:34:4e:
d1:34:f5:eb:ec:4d:36:0f:f5:87:6f:1c:b6:b1:e3:
e4:c2:b6:03:2a:27:ef:8d:26:08:90:53:09:09:29:
1f:94:c2:b9:29:e9:51:0c:02:6e:20:24:b7:1e:ab:
79:7c:23:85:8d:9c:c8:38:a0:e7:ad:3a:f3:15:e0:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:D2:A5:BF:CC:A1:3D:9B:14:B5:91:8D:CB:85:CB:15:3B:45:D9
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:05:81:fa:5c:7e:a5:86:f9:ab:3c:58:d7:03:24:dd:24:60:
e6:74:25:f1:63:c3:52:05:1b:50:d5:ed:88:fb:e9:fc:ee:fb:
29:dd:6f:06:e0:a9:24:29:eb:46:01:fd:65:5a:7e:9f:2c:03:
57:8e:02:43:ed:d9:75:2b:ef:30:52:2f:02:5b:f4:3d:51:6e:
cc:a0:b5:d9:5f:a2:8f:5a:cf:a8:4c:1d:cc:07:4c:42:0b:d5:
63:7e:50:10:51:af:7f:68:3b:76:b1:79:61:21:9b:9b:19:96:
cd:f4:9a:f8:ce:b1:22:f3:ce:ad:c6:ba:e6:ed:65:af:00:65:
7c:07:95:13:70:8d:7c:19:02:47:64:36:63:ec:64:cc:a0:92:
02:06:94:22:df:68:e7:26:3e:a5:9c:f6:cb:ad:84:a1:2e:15:
9c:da:4d:5a:47:63:81:85:fc:ac:7d:b5:92:f3:fd:ba:4a:4f:
30:1a:8f:90:ae:76:06:cb:1a:97:f1:91:c7:c5:ea:19:b3:c8:
18:e0:72:a3:76:23:8f:0d:1a:b3:6f:64:1d:4d:e6:ae:59:01:
a6:ed:07:7a:a8:eb:2d:f9:a9:77:ae:5e:66:5e:4f:1f:42:62:
66:fc:bc:50:bc:86:6e:51:ff:8c:99:52:f7:0f:6a:d0:d7:d9:
1f:49:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:15 2025 by rpki-client