Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: W3ZaAjnzsMumxs5pfT699Jx2XJEFrXNfEitXkTcIu5o=
Subject key identifier: 73:A7:CD:C5:D2:04:14:EA:75:C1:95:07:8E:52:1D:E8:BF:06:2D:09
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 0198D5F1D777B03046C59C1E74DA66CDC7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 04AA
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: +mxqgq2rDST1eyCZzdB99Xn5q3lp7SLf1xZlnq20Vck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d7:77:b0:30:46:c5:9c:1e:74:da:66:cd:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=73a7cdc5d20414ea75c195078e521de8bf062d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:d6:3e:37:b6:a4:5e:6b:d8:2f:1d:c7:12:
97:89:49:99:3a:59:8e:c4:86:4d:02:78:16:12:2b:
bd:f5:99:03:2f:34:5a:ee:52:11:0d:6c:21:ef:e6:
5f:e4:ae:a1:36:44:1c:97:ed:ad:b5:99:d1:2a:d8:
82:e5:f0:40:92:ca:af:cd:eb:b2:5e:6a:10:11:15:
99:1f:00:4b:e0:8c:f6:44:87:96:07:7a:ed:51:de:
31:aa:94:d6:bc:86:39:d8:09:f9:0b:53:20:0c:df:
0c:ac:0f:90:e0:18:8e:5f:52:a8:93:a6:9d:63:9e:
12:87:b5:f6:e0:e3:e3:3a:d5:cd:9a:69:5d:de:29:
1b:6e:7f:0f:85:1c:3e:e6:45:89:e9:16:69:2b:cd:
a2:27:0a:bc:9b:2b:e2:08:1d:27:a1:fa:16:30:54:
d5:52:56:3f:5a:b3:5c:f7:8b:70:f8:bf:a9:d9:30:
42:d2:1c:c3:51:e9:15:52:b1:53:9a:60:75:b7:4e:
54:63:39:f4:d5:20:6b:b3:f3:1e:00:8a:a6:c3:64:
c3:01:50:d2:9c:2d:40:26:74:a6:91:b7:24:6d:18:
e9:0f:78:50:a9:b2:e8:90:1e:7c:3b:3c:2b:e4:19:
16:b8:50:61:09:a3:cb:fa:17:15:58:93:48:2a:6e:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:CD:C5:D2:04:14:EA:75:C1:95:07:8E:52:1D:E8:BF:06:2D:09
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:ac:df:ca:84:3e:33:7f:e0:e3:4c:b9:7e:57:91:e0:57:
ba:5b:81:a1:53:92:fd:2a:43:a2:de:96:87:53:25:43:4a:00:
74:48:43:48:a2:6b:50:61:da:39:1f:70:a4:d5:f7:34:9c:0e:
e0:6b:1e:c2:dc:38:a5:7b:5f:cb:1b:bc:db:40:18:60:6c:99:
48:c1:3c:c7:f6:42:62:07:99:45:9b:b4:f7:b9:f3:8c:d0:80:
d1:46:c4:ec:b8:2b:59:0d:ca:4a:fb:e4:60:79:cd:0e:65:aa:
95:b8:6a:05:3a:2a:e5:db:01:bd:a9:a0:be:5a:b2:31:61:22:
e4:5d:5f:f2:2a:e9:59:6e:a9:c5:33:8f:bb:5b:5d:1b:6c:c8:
18:7a:bf:23:1e:76:6f:53:99:3f:9c:7b:89:d4:bd:61:8e:a7:
1b:1b:a0:74:76:a5:7e:55:f5:b6:17:81:33:fd:0e:fe:5f:08:
ff:15:96:a0:63:62:c2:54:ea:5a:3a:ee:86:d5:90:5f:36:e2:
c9:f0:be:e5:2c:02:5f:9c:cd:77:02:0b:55:01:51:cd:e4:ad:
51:52:e0:69:99:2c:8e:95:97:da:87:ee:a3:0c:4a:7c:de:06:
30:30:ca:d2:92:0d:3e:de:26:e6:ac:a8:e5:54:42:8c:49:3c:
3d:4c:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:11 2025 by rpki-client