Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier: JPumkgbmLgQdUYnyBAf2PWS6zI37Ev744H6jJX9OozU=
Subject key identifier: E5:1B:23:25:58:54:16:84:98:9B:52:28:A5:95:FF:94:01:40:CB:21
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 0196556EBECC2E206C53C812131341A24697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number: 105D
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: gG/nWRTBBxhkSowRzszSoeQmaAJqPhFRA942zm4E9Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:be:cc:2e:20:6c:53:c8:12:13:13:41:a2:46:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=e51b232558541684989b5228a595ff940140cb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:76:0b:f9:8c:97:13:0c:a9:dd:da:64:84:
51:f4:fc:4b:71:33:6b:d7:1a:49:f8:8a:8d:a1:e1:
9b:1c:3a:cf:3b:23:59:8c:d2:31:ef:98:0c:a9:85:
09:4f:f1:b8:d0:33:d0:b0:74:e9:6a:36:c2:d4:de:
64:5e:68:e5:a6:da:07:c4:75:fa:34:02:a4:6f:d1:
bf:5a:e9:c9:85:16:be:ef:ed:53:dc:8d:22:c7:be:
3e:28:11:df:8c:d5:aa:27:2d:28:01:75:77:50:dd:
fb:08:4a:02:2a:9d:f5:4c:63:e8:af:c0:75:9f:ce:
0c:be:ee:d6:d0:ac:b8:e0:f3:1b:29:55:54:19:cf:
f8:ce:bb:1f:83:fa:b6:a3:48:e3:15:22:c0:0f:b2:
f0:86:a2:a8:c6:59:58:39:71:b9:5f:b3:1b:40:e0:
87:19:8b:fc:50:7c:b2:f3:b9:79:12:3f:5b:64:34:
96:36:6c:92:f3:bf:18:71:32:58:98:aa:d6:4d:8f:
41:c4:ce:43:ff:62:ab:b6:3f:40:7c:0f:f1:2a:33:
31:8b:e7:6d:13:ba:bb:55:1d:1a:0e:78:9a:41:b0:
cd:86:4b:6e:97:64:93:42:20:50:6c:a9:5a:8c:2d:
92:21:68:3e:6f:63:a6:04:32:ef:36:e3:74:a4:30:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:23:25:58:54:16:84:98:9B:52:28:A5:95:FF:94:01:40:CB:21
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b3:39:19:df:a8:11:22:a6:ad:2f:ee:eb:1d:37:b6:f2:91:
7b:5d:aa:43:cb:94:92:2e:be:57:da:08:d3:52:61:7a:7c:c7:
59:ad:ce:01:b9:2f:5b:e6:43:4e:08:1d:93:94:1b:e5:3f:23:
21:c1:1d:10:3b:d1:b0:8f:a8:a0:b8:b2:fa:fc:c8:b3:3d:d2:
6c:fb:4d:69:f0:86:ee:4d:12:45:c4:fb:c7:db:18:1e:f0:f9:
5d:e2:28:28:9b:84:49:1e:bc:46:85:a2:f1:49:b5:fa:59:c5:
1a:35:1b:c0:dc:2d:a7:4f:eb:b7:71:cf:4b:b5:77:7f:40:87:
75:da:fc:2c:98:3e:0d:6a:6b:70:79:1a:40:e4:08:f9:bf:67:
b9:59:0a:6b:cb:66:d9:3d:5d:d3:43:2d:ba:18:f4:a9:fb:67:
df:86:0b:04:48:e3:9e:49:41:64:e3:2e:a5:59:e6:b4:53:fe:
44:67:a6:1a:0d:66:bc:1b:0c:d2:a1:95:19:13:eb:92:fb:92:
f2:40:44:ee:c6:71:7c:57:13:3a:2b:66:08:58:bb:01:bd:76:
ca:4a:32:6f:60:2a:b0:9c:ec:93:03:1d:ff:51:0d:fb:6b:0b:
a1:e3:6d:3c:91:95:77:49:02:74:f2:75:55:1b:8e:05:de:91:
d8:b8:2c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbr7MLiBsU8gSExNBokaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy
YWVlZTgwHhcNMjUwNDIwMjMwMDQzWhcNMjUwNDIxMjMwMDQzWjAzMTEwLwYDVQQD
EyhlNTFiMjMyNTU4NTQxNjg0OTg5YjUyMjhhNTk1ZmY5NDAxNDBjYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEZ2C/mMlxMMqd3aZIRR9PxLcTNr
1xpJ+IqNoeGbHDrPOyNZjNIx75gMqYUJT/G40DPQsHTpajbC1N5kXmjlptoHxHX6
NAKkb9G/WunJhRa+7+1T3I0ix74+KBHfjNWqJy0oAXV3UN37CEoCKp31TGPor8B1
n84Mvu7W0Ky44PMbKVVUGc/4zrsfg/q2o0jjFSLAD7LwhqKoxllYOXG5X7MbQOCH
GYv8UHyy87l5Ej9bZDSWNmyS878YcTJYmKrWTY9BxM5D/2Krtj9AfA/xKjMxi+dt
E7q7VR0aDniaQbDNhktul2STQiBQbKlajC2SIWg+b2OmBDLvNuN0pDB21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUbIyVYVBaEmJtSKKWV/5QBQMshMB8GA1UdIwQY
MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt
N2VhNjVjMTJlOGVjLzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj
LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrM5Gd+o
ESKmrS/u6x03tvKRe12qQ8uUki6+V9oI01JhenzHWa3OAbkvW+ZDTggdk5Qb5T8j
IcEdEDvRsI+ooLiy+vzIsz3SbPtNafCG7k0SRcT7x9sYHvD5XeIoKJuESR68RoWi
8Um1+lnFGjUbwNwtp0/rt3HPS7V3f0CHddr8LJg+DWprcHkaQOQI+b9nuVkKa8tm
2T1d00Mtuhj0qftn34YLBEjjnklBZOMupVnmtFP+RGemGg1mvBsM0qGVGRPrkvuS
8kBE7sZxfFcTOitmCFi7Ab12ykoyb2AqsJzskwMd/1EN+2sLoeNtPJGVd0kCdPJ1
VRuOBd6R2Lgssw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:45 2025 by rpki-client