Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: xiDOvb/j66Vu3pYYA9V0nph1KG5MLKILDiQNFf/k40A=
Subject key identifier: 47:5D:60:83:4A:CD:AC:7E:CF:02:9B:C6:73:F7:F3:02:6A:0E:7C:A9
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 01992331322443A7C460D457014DC3BCD603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: h3qLTaF8k4x2KbCN3FIuFz3+Ok/U8+9dyZASJOES00E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:32:24:43:a7:c4:60:d4:57:01:4d:c3:bc:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=475d60834acdac7ecf029bc673f7f3026a0e7ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:40:cd:7d:b6:d5:00:96:96:e8:88:04:76:
ca:00:90:7c:d5:c2:ce:36:7b:e7:9a:9b:07:9f:29:
f3:78:82:ce:d4:4a:01:36:71:2b:f5:d8:a1:62:e1:
dd:77:91:b2:ec:4c:3c:42:e5:e6:61:40:b0:12:b0:
d2:fe:58:28:6b:7c:d6:32:f3:64:da:43:4f:40:0a:
a0:88:e9:f8:28:89:d8:32:ee:97:ed:68:db:00:0d:
6c:1d:01:7b:b7:96:2c:57:13:2f:71:99:e2:f9:3b:
16:25:c9:a5:af:62:14:8f:c1:c3:ec:fe:6d:bf:cd:
55:85:4c:0a:7a:f8:8c:b8:83:ba:e3:65:5c:da:a2:
fc:cc:58:bf:be:d0:fb:43:3c:9f:97:75:c5:21:d8:
c1:33:01:9c:4b:26:b2:62:4c:dc:1b:80:89:ef:bb:
24:01:68:8f:e8:60:87:26:6b:57:7b:0b:ce:b0:51:
2c:ab:12:bc:33:57:cb:e2:be:b4:dd:9e:98:ca:f2:
61:c5:d2:e1:dd:17:31:24:33:2a:93:37:05:93:2d:
72:cd:1f:6c:1d:c1:fd:d5:1f:4b:31:f2:40:8b:2f:
c9:6d:1b:de:84:3c:f8:47:d8:19:1f:66:dd:83:4d:
86:eb:86:5e:c4:4c:1e:b5:89:43:5d:0f:14:5d:65:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:60:83:4A:CD:AC:7E:CF:02:9B:C6:73:F7:F3:02:6A:0E:7C:A9
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9c:a7:ba:12:bc:8e:82:35:0d:81:19:a9:77:cc:5a:d5:14:
20:50:88:70:1b:16:eb:a0:93:ba:a8:70:89:79:78:5d:ef:3d:
c2:be:0d:c0:4e:15:d3:57:d6:47:7d:e3:fa:77:bb:51:20:6f:
65:ca:bb:76:5d:0c:c5:bd:ac:83:17:a7:72:df:bf:b5:92:5f:
e3:27:b5:ea:8e:05:a5:9a:4c:48:9d:63:3a:07:9f:04:cf:7d:
7b:65:47:ca:9c:b2:9b:fe:e5:31:cf:4b:a6:7e:a2:13:39:f5:
0f:a1:93:7a:ed:57:54:cd:de:9b:e1:ef:b0:47:9c:e0:05:3b:
0e:d9:10:d1:35:56:b8:c7:dc:e4:90:c6:7f:7e:3d:97:f5:23:
3c:9d:08:8e:c2:e3:1d:fc:b6:47:4f:5e:ee:2e:ba:7f:3c:10:
34:2b:00:de:10:88:be:07:dd:7a:44:05:92:3c:f5:0d:fa:86:
80:ee:6f:46:aa:53:0e:1c:e3:07:36:9b:a0:66:72:f0:eb:62:
bb:a1:da:70:e3:e6:7f:5c:37:a4:29:4d:4b:99:38:33:af:4c:
6c:7d:10:0f:c6:2a:e3:9d:0d:6f:fb:df:37:2b:57:5c:3e:b8:
7a:0c:c6:a1:60:c0:ec:cc:a0:55:ca:f0:13:e8:e9:f5:a5:c6:
5e:28:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:08 2025 by rpki-client