
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: JZaKItXUQjraz7BJL3JMKKtrhJ8wu/uGUjMtUJWjn9E=
Subject key identifier: AF:88:8A:DD:66:DB:EC:40:DC:C1:56:89:98:BF:59:EF:F7:A1:45:3F
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 01987E6672CFBA7CEEEDCD621CFD4B94E9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0939
Signing time: Wed 06 Aug 2025 08:01:39 +0000
Manifest this update: Wed 06 Aug 2025 08:01:39 +0000
Manifest next update: Thu 07 Aug 2025 08:01:39 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: m0NAIerUDETaBheHOBH8vZfhXhZsCg/jw/vlEm9oPtE=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:72:cf:ba:7c:ee:ed:cd:62:1c:fd:4b:94:e9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Aug 6 08:01:39 2025 GMT
Not After : Aug 7 08:01:39 2025 GMT
Subject: CN=af888add66dbec40dcc1568998bf59eff7a1453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:4a:a4:25:ba:04:51:1e:ef:43:ca:32:1d:
01:a2:b6:94:f1:90:0f:e6:f6:22:59:41:b6:4d:b2:
96:43:d2:07:59:c0:bd:62:f3:47:16:55:57:ee:10:
fb:af:85:71:7f:b7:e3:a9:7b:a3:76:f0:68:2e:56:
fe:9d:60:8c:a3:7c:ec:0e:19:0c:d2:f3:d7:15:12:
52:95:65:7d:2b:83:8e:11:3a:a4:fa:47:dc:3e:b1:
58:8c:a7:9b:2a:d5:08:52:2b:6d:85:f2:a6:89:be:
26:ab:f4:09:93:92:99:6b:a9:70:fa:6b:5f:c9:b4:
a8:b5:28:9c:75:b7:ab:7b:18:0f:ba:7c:91:4f:fc:
41:a9:de:12:d8:08:d2:e9:bd:f7:68:ed:32:bc:47:
87:e0:0c:4e:b7:59:14:76:67:66:62:31:64:f7:26:
94:e3:d0:36:a7:23:f6:03:f0:e3:57:d0:07:e1:80:
b0:2b:eb:86:07:20:37:8e:3f:c1:65:8e:9e:c9:2a:
f2:fc:5a:d3:af:20:35:34:56:c2:c4:4c:5f:a1:26:
a4:44:ad:73:1b:20:be:e1:7a:1f:f4:e4:65:3b:8a:
cd:89:40:ea:38:51:61:6f:0f:5a:84:38:99:8e:4e:
99:33:e3:6c:15:96:cb:37:cd:cd:3a:bd:c2:04:38:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:8A:DD:66:DB:EC:40:DC:C1:56:89:98:BF:59:EF:F7:A1:45:3F
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:57:ba:cd:76:b7:17:fe:9d:fb:a2:dc:8d:23:97:1e:f8:
10:ec:dd:38:94:2d:c3:32:aa:8d:59:de:fa:a0:16:69:69:5a:
14:cd:2e:a1:05:34:67:ab:ce:72:35:7a:1c:9e:79:c8:d7:19:
65:4c:9e:fc:d4:b4:4b:2e:84:af:96:97:fb:47:99:78:81:56:
6f:94:e3:c8:c9:bc:c5:dc:a1:31:93:6e:bc:8e:4a:b0:ea:56:
8a:7a:25:5a:b3:32:5a:fd:c4:a7:ec:d8:6b:35:b3:b4:ea:77:
84:37:48:ce:d3:03:b4:73:11:a5:98:0e:9d:ac:22:93:f0:fb:
0a:83:83:5a:d9:de:4f:ba:c0:e8:37:e8:57:e4:22:12:db:6d:
91:33:60:d9:a8:3f:a7:15:f7:d9:5f:db:51:de:bc:32:9e:32:
86:24:fe:67:bb:45:e4:d3:61:fd:e4:4a:d9:73:df:df:e4:ea:
34:a8:75:25:6c:df:c9:ac:32:d5:46:5c:42:07:99:0d:32:72:
c9:58:37:43:a2:f8:01:26:1c:7d:c1:85:8c:6d:07:cc:99:16:
18:93:d7:77:0d:23:a8:61:d7:1a:29:30:25:e4:38:ae:06:d4:
db:20:81:4c:2c:ea:02:82:8b:77:6d:1c:7d:fa:ca:cc:85:0e:
96:56:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:23 2025 by rpki-client