Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: UmMbcfSRcfZko1EJLoeu+qBYDjLRQS9ih9XC6Wskl4M=
Subject key identifier: 30:17:A4:A9:91:E4:09:34:59:78:2B:CE:6B:47:37:41:49:87:5B:9D
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019835A80E5823DF8142427F3659892CA56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 0457
Signing time: Wed 23 Jul 2025 05:01:02 +0000
Manifest this update: Wed 23 Jul 2025 05:01:02 +0000
Manifest next update: Thu 24 Jul 2025 05:01:02 +0000
Files and hashes: 1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: i3EKCTjTdqQkBNKb8jDeBRgAla0O0zOWIInctmJPb74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a8:0e:58:23:df:81:42:42:7f:36:59:89:2c:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Jul 23 05:01:02 2025 GMT
Not After : Jul 24 05:01:02 2025 GMT
Subject: CN=3017a4a991e4093459782bce6b47374149875b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:08:2f:25:72:76:35:88:01:de:c8:1e:73:
b4:74:c9:e3:0d:19:a7:4d:14:ea:37:a4:f0:6b:56:
f5:ba:20:5c:87:03:74:41:9a:93:a0:d9:97:f6:f5:
60:17:1a:90:8f:0f:e3:84:25:29:03:6d:4a:af:b3:
c7:c9:de:13:fa:be:1f:c6:51:a4:64:e6:a1:83:d2:
a9:73:be:29:1b:f9:26:22:e7:bd:1c:ae:66:49:4b:
ee:58:d2:f2:9a:0c:aa:31:63:51:4a:2e:42:7e:d5:
76:59:bb:7b:01:d8:1f:1b:61:ce:b8:d1:49:57:6f:
2b:60:43:88:5f:4a:62:5a:3a:d8:2a:3c:2b:9b:df:
01:52:03:8a:80:bd:90:ae:3e:1f:c5:ba:37:fd:47:
9f:76:db:c6:35:60:ee:ac:54:33:7a:8b:9b:d0:de:
b9:c5:6a:02:e7:6a:31:44:bc:75:49:34:75:d0:8d:
2c:cf:4e:ea:60:4e:75:23:02:7e:5e:09:d1:d1:5f:
45:43:1c:02:e7:cf:da:e2:58:d0:47:c5:ec:96:a0:
cf:9e:9f:6a:d5:19:31:fb:3d:ab:3d:e9:a6:84:8d:
82:92:0b:11:99:bd:0c:d9:5c:d8:2d:dd:4a:0f:df:
f6:23:70:13:28:49:62:46:27:53:31:f5:f9:1b:7b:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:A4:A9:91:E4:09:34:59:78:2B:CE:6B:47:37:41:49:87:5B:9D
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:10:ad:6d:c1:d2:e9:f0:16:a0:00:a7:ec:6a:03:c6:15:b7:
c4:2d:90:40:26:0e:5e:4a:12:55:8c:92:da:06:8e:c7:44:3f:
55:ba:e0:4f:ef:d5:ad:51:53:1c:0b:f0:e8:4d:2e:57:89:a2:
55:0b:17:6b:49:53:d9:ba:f6:32:d2:88:18:c2:f8:36:4f:4d:
55:8b:9a:64:73:7a:13:52:8f:e9:f6:36:05:a3:e6:f6:2f:af:
5a:e9:53:ff:88:a5:f0:e2:ea:ae:02:fe:00:22:cb:b2:f7:08:
9c:79:bc:8f:51:cd:22:2a:31:ea:db:fb:7b:64:e9:0d:72:fa:
de:ae:60:97:89:80:cf:e4:71:bc:9d:a4:ee:0a:6e:c1:f3:17:
5f:15:91:70:70:bb:48:e4:be:b4:3d:e3:b3:fc:7c:82:75:1c:
95:5f:8e:2f:16:30:41:aa:53:dc:0a:e4:ec:7d:7a:96:0a:14:
9f:8a:d8:4b:88:7f:a7:8b:69:4e:1f:90:26:18:84:e2:1f:12:
83:07:d7:71:77:92:a1:37:12:a6:1f:dc:5a:6e:c7:27:e0:86:
ce:78:6b:38:88:36:f0:24:8b:3a:97:28:f6:3e:19:ee:03:87:
b5:0f:4f:90:de:a8:19:c8:aa:ea:d9:2e:05:07:82:55:cc:64:
04:fc:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:45:57 2025 by rpki-client