Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
File: ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft (raw, json)
Hash identifier: z/jnltT8N/iu2EbAd3bwVgsPAAiBvcnQybXvAHU21KI=
Subject key identifier: E9:7A:08:D0:0F:9D:B9:97:4D:D5:52:E6:9A:F2:D5:89:53:E1:73:DE
Authority key identifier: CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
Certificate issuer: /CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Certificate serial: 01987450A2E22004194BEE994C07A2BA8B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
Manifest number: 01CF
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: knggMszGXslbbJ2_Oh2Jaifz1gc.roa (hash: 1NY+pqUYlKwDvhTu3JTqY8SDs7jlakZ17fJjnTdwI9Y=)
2: ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl (hash: grVBiKCbE4GiQ+zjsfIt7eTbm8OLbh+vViFwXH+Zbh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a2:e2:20:04:19:4b:ee:99:4c:07:a2:ba:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca41fdb7e016d960efe29c0b4894b873aa4d21e2
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=e97a08d00f9db9974dd552e69af2d58953e173de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:cd:b6:72:53:46:88:9b:5a:93:5b:55:00:
13:d7:97:86:03:03:86:34:e5:49:3a:c5:f8:ab:6d:
92:f4:5e:07:de:c4:ce:9c:e3:d3:29:c0:5e:b6:0f:
e1:7d:2c:14:80:e3:b5:1d:13:17:e6:2b:82:ff:5c:
1c:d9:05:c7:cc:d2:74:a0:52:66:e8:50:6f:ad:31:
7b:3e:e1:26:ef:e7:43:5f:c2:0f:ca:1f:0e:4a:45:
dd:f1:81:e4:3e:e5:7a:97:da:69:c3:4b:7c:8c:68:
ce:c1:c2:c8:9a:bc:65:34:f3:b7:c3:be:d4:1a:de:
14:77:ee:ca:4a:81:ff:8a:88:bb:dd:a6:70:f3:d1:
c2:50:14:57:0c:a3:3f:3b:de:cb:c9:a5:4d:c4:38:
cb:8d:3e:fb:e1:03:77:63:8c:b4:21:e6:6a:2e:40:
82:f1:5c:9e:21:7a:92:31:6b:df:db:42:a8:f8:fd:
61:cf:40:4a:32:2d:ee:1d:16:25:70:ae:f5:5b:a4:
63:f9:4d:d8:77:c4:39:b5:e9:d8:49:93:b0:05:a8:
dc:8d:46:42:d2:7c:eb:eb:66:a5:a2:ad:7c:d5:df:
bd:89:40:31:4b:44:39:0f:f6:fc:d2:75:61:64:64:
24:ab:8b:33:86:55:c6:cc:36:b8:f0:32:33:94:a4:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:08:D0:0F:9D:B9:97:4D:D5:52:E6:9A:F2:D5:89:53:E1:73:DE
X509v3 Authority Key Identifier:
keyid:CA:41:FD:B7:E0:16:D9:60:EF:E2:9C:0B:48:94:B8:73:AA:4D:21:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykH9t-AW2WDv4pwLSJS4c6pNIeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/ykH9t-AW2WDv4pwLSJS4c6pNIeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:b7:5e:4d:30:ec:dd:6b:e0:80:69:fa:f9:a4:1f:88:33:
73:eb:20:be:2d:e8:73:13:c4:fe:d1:61:83:ec:91:ff:f3:b0:
9a:b3:b5:9c:4d:8d:9f:09:3b:84:e1:72:3b:2f:b8:9e:ec:93:
6b:6f:19:65:5c:2d:88:0b:53:65:bd:a9:64:3e:f4:d2:c8:66:
e9:b9:5a:80:6b:31:77:ce:f4:f2:16:3f:e9:bc:31:84:f7:6f:
cb:ac:b0:5b:57:9d:33:16:cb:aa:1c:c7:ed:a0:6f:1e:07:59:
49:7c:82:fc:e4:da:a4:bc:3d:61:fb:81:ea:90:39:d9:d2:e5:
96:8c:40:ca:e7:5b:85:53:df:60:ea:fb:30:71:ce:c5:33:5b:
27:b9:5d:91:2c:dd:38:17:21:53:32:9c:77:15:41:fc:27:51:
ea:e0:a9:61:58:4e:76:0a:a7:ff:07:94:5f:a4:5e:ad:5f:7a:
28:78:2b:3e:88:8f:53:8f:d1:ee:6c:a4:d8:66:20:e2:be:3b:
d2:4a:4a:7d:c5:d9:7a:14:df:8d:dd:ea:8a:10:ef:cf:e6:50:
93:66:4c:63:7d:ff:41:7f:92:08:4b:11:cf:00:34:a9:54:4a:
a0:82:af:45:da:1f:5a:0c:ae:42:87:25:16:56:6a:dc:2e:e8:
30:0c:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:04 2025 by rpki-client