Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: KYtzf6Ck3LH13Np1h/a6iZmfybZKbE222FLvFG3N/ZU=
Subject key identifier: 03:48:6E:38:48:07:34:8D:B2:C5:27:C9:48:A1:39:AD:EE:D2:D4:90
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 01987562C40F874E62D5B4E969B14729AE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 0478
Signing time: Mon 04 Aug 2025 14:01:03 +0000
Manifest this update: Mon 04 Aug 2025 14:01:03 +0000
Manifest next update: Tue 05 Aug 2025 14:01:03 +0000
Files and hashes: 1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: L45xFfiSzqDDTpElZRpR7uRudcbI5EdjPLSulRWmxgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:c4:0f:87:4e:62:d5:b4:e9:69:b1:47:29:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Aug 4 14:01:03 2025 GMT
Not After : Aug 5 14:01:03 2025 GMT
Subject: CN=03486e384807348db2c527c948a139adeed2d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:bf:32:8e:c5:1c:a4:46:51:aa:43:8a:be:
59:3b:d2:c6:0a:d0:60:51:be:aa:3a:e3:33:fd:0b:
cb:e1:29:ba:99:13:a2:18:16:4e:2d:21:4f:e8:ea:
22:17:09:50:d5:ba:a4:91:88:db:19:80:19:00:94:
c4:f7:83:a2:b8:4f:63:f7:5c:25:a5:d8:0b:50:d1:
f8:cb:2f:6d:d0:cc:74:01:a5:62:6f:b6:a7:22:95:
b9:55:54:9d:85:b0:d5:b0:58:ab:77:8e:3a:af:4e:
13:3c:d4:29:a9:06:91:cb:77:77:99:21:7c:97:5b:
e7:ae:a0:e9:5d:aa:9b:f7:4f:79:d1:2d:55:02:05:
c1:ae:69:74:95:16:be:91:8a:df:d3:94:2a:57:8c:
ce:2f:ed:bd:39:86:8b:05:89:09:4f:48:c6:7d:b6:
cf:64:47:10:af:40:e0:f4:46:8f:a7:47:e2:de:03:
fc:56:cb:db:fa:b4:97:cf:0d:81:51:a8:3b:b5:fd:
13:d3:42:c2:6d:49:ba:31:42:4d:30:be:23:e3:f2:
82:2f:c7:9b:b9:82:b7:3c:7f:43:b4:77:9a:5d:e4:
b7:81:9a:b4:4a:68:a2:b3:01:0a:97:41:09:06:df:
28:60:5e:82:6f:47:12:6d:ca:20:44:f3:68:94:53:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:6E:38:48:07:34:8D:B2:C5:27:C9:48:A1:39:AD:EE:D2:D4:90
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:f0:a2:68:c4:88:a6:eb:17:97:da:12:de:36:2b:60:1b:
4d:f8:50:0b:ca:d0:13:5b:44:e1:ca:50:b5:a8:6e:b5:b2:9b:
5f:ab:ad:51:72:e4:00:1c:c9:d9:bf:fa:0b:70:73:e3:6e:ec:
1f:98:10:f0:7b:9d:39:9d:2a:21:ce:f2:86:6c:b7:5a:7c:02:
39:71:7d:a9:d4:27:fc:53:48:10:24:dd:d1:31:6a:5f:1e:3a:
7d:1d:44:b3:af:39:92:b6:0b:25:04:86:eb:b7:56:8f:42:cd:
fc:09:7a:3f:ae:ad:b6:6e:49:97:bd:dd:a7:57:2c:0f:e6:90:
9b:52:0f:40:87:13:84:fb:54:ee:ad:17:a5:1b:5f:76:83:91:
23:29:e8:79:f9:f8:5a:67:7e:b6:44:cf:ce:24:ce:18:8a:3f:
22:6d:de:f4:22:aa:1f:60:54:58:b5:b2:ae:f7:c4:33:cc:47:
5d:0d:4f:6e:0e:89:69:0b:63:f0:21:ef:a4:56:1a:03:b0:b3:
50:d7:55:3a:28:c2:fc:a4:e5:b7:60:1d:a7:1e:d0:96:63:44:
17:ff:27:1f:77:f7:aa:53:4f:54:4f:c2:b3:76:b4:43:2f:95:
0d:d1:4c:d6:94:14:05:05:ef:58:6d:2b:23:bf:c6:25:ad:e0:
32:df:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:44 2025 by rpki-client