Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier: Cw0kfhu9JF2JZpVNvlRODTJfOLgO36GJViUSDxhMcn4=
Subject key identifier: C4:83:C1:85:0A:35:75:5D:1F:1C:6D:63:18:4F:3D:18:D4:BA:A8:9C
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 019923D5BAFE43993F2EA38EB990D2EF9025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number: 11D1
Signing time: Sun 07 Sep 2025 11:00:33 +0000
Manifest this update: Sun 07 Sep 2025 11:00:33 +0000
Manifest next update: Mon 08 Sep 2025 11:00:33 +0000
Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: TjKlvBPe/vRYHGFlqd3IPB1bwu9QCGeVJAqsT3hVXFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ba:fe:43:99:3f:2e:a3:8e:b9:90:d2:ef:90:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Sep 7 11:00:33 2025 GMT
Not After : Sep 8 11:00:33 2025 GMT
Subject: CN=c483c1850a35755d1f1c6d63184f3d18d4baa89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:25:aa:30:0d:1d:2b:c3:09:e7:b0:01:dc:
d1:29:e8:bc:d2:10:2c:1e:a3:c4:26:60:6d:51:e8:
96:a9:4d:c2:3e:0f:fe:d6:99:82:b4:aa:ad:46:b5:
28:ff:56:01:0f:a5:d8:a5:04:d5:d3:f3:19:13:68:
b9:a7:a6:e4:33:f2:90:0b:f1:21:f3:73:42:be:84:
f3:74:05:3a:46:99:00:4a:54:3f:69:58:f1:13:47:
d6:94:a9:ff:aa:ae:1c:e7:4f:eb:b0:4c:8a:05:9a:
cb:c5:ac:43:05:06:ed:1d:61:71:97:58:df:ad:66:
a1:ac:56:91:d9:e8:d8:c0:85:70:50:78:3e:c1:49:
ba:4b:f9:c7:87:3b:75:20:31:ae:36:c9:48:2e:1a:
c4:f7:e1:f9:69:09:10:63:65:cc:10:9d:94:b3:7a:
84:da:6e:83:35:dc:ca:76:d3:46:d6:cf:c4:3f:a1:
cc:33:20:ce:b5:1f:58:9f:f8:70:31:84:6d:ec:57:
5d:c9:59:31:71:92:44:f9:9f:fa:b9:72:df:51:0b:
7f:36:78:0b:57:ea:30:e8:c4:f7:4a:20:0f:74:61:
99:a5:ce:f6:5d:5b:4c:23:6a:8c:10:2d:fc:40:97:
3a:9d:0c:92:ab:84:b2:a2:a6:82:f9:57:ef:c7:ff:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:C1:85:0A:35:75:5D:1F:1C:6D:63:18:4F:3D:18:D4:BA:A8:9C
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:a8:8f:0c:71:2b:3d:00:00:f9:62:d6:86:6d:e3:98:6d:
8c:ab:b4:e5:d0:a3:e1:ef:0f:df:41:c6:43:7c:eb:d3:58:c8:
31:89:4b:f6:88:94:ea:47:a6:f6:9d:56:20:f1:ae:c8:e7:c4:
e3:d8:a0:5b:95:2d:a4:85:8c:bf:3e:ae:41:bf:11:6c:7d:c3:
c0:be:c4:5a:c8:b6:3e:88:13:f4:d5:04:dc:65:c5:92:b6:d9:
b3:c6:cf:ad:b4:7b:c2:de:b5:61:39:40:44:bf:2a:7b:ed:ac:
e9:a4:ae:c6:28:9f:09:63:7f:8d:8c:81:61:a7:18:f3:72:50:
75:00:4e:fa:e8:c0:c9:ce:ee:30:4d:6d:6c:ee:51:1b:f7:0e:
19:b8:52:34:07:43:c8:f7:f5:5f:8c:40:5f:5c:d6:4c:3a:9a:
80:ef:bf:b7:fd:2f:93:a4:84:3f:b5:dc:9c:f9:a2:92:77:2b:
74:01:94:3c:92:65:0d:14:a5:cc:53:2c:f8:49:7d:00:8e:d4:
54:65:84:f0:de:09:09:81:c2:73:08:c6:69:7e:da:51:c9:9d:
63:b9:ca:1b:ee:15:57:f8:6f:1c:52:73:7a:7f:87:a3:8a:b7:
1e:86:94:57:b9:5d:b4:af:aa:4f:b2:b4:4a:bc:d9:e1:71:e6:
ac:57:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:26 2025 by rpki-client