Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: hVRc6YzuvxX764ayDoW7bKDlZXkuq7r+uZiwREqrn/U=
Subject key identifier: 8C:B5:52:B7:27:81:39:F8:FA:CB:79:3E:15:AE:E0:1F:7B:CE:EA:A0
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019922FA42D1DF305B28ADA48615886B9CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0F94
Signing time: Sun 07 Sep 2025 07:00:50 +0000
Manifest this update: Sun 07 Sep 2025 07:00:50 +0000
Manifest next update: Mon 08 Sep 2025 07:00:50 +0000
Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: jQa8Vyawao4dDwe/vLzooUcyc+A5aA6Bn6UC6AQsAnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:42:d1:df:30:5b:28:ad:a4:86:15:88:6b:9c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Sep 7 07:00:50 2025 GMT
Not After : Sep 8 07:00:50 2025 GMT
Subject: CN=8cb552b7278139f8facb793e15aee01f7bceeaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:4b:0b:8a:d8:9a:42:56:b1:46:b5:a0:cb:
39:17:9c:08:65:b1:3e:ce:bf:00:bd:ec:2d:55:31:
9f:11:e8:ba:d9:9c:59:b1:9b:e0:7a:9a:44:84:e8:
d3:0d:f4:fc:4a:a3:5e:f0:23:c3:d9:50:1c:da:8f:
78:e1:28:a4:5c:e9:47:fd:12:b7:46:8f:11:68:2e:
08:0c:59:fe:56:e1:6b:f4:2d:41:ac:57:e5:ff:b6:
2d:2e:cd:54:65:cd:15:ce:fe:6a:a7:fd:fb:48:31:
28:43:27:d5:54:f5:ff:e1:69:bc:da:b2:bb:09:d6:
20:38:b4:c9:ad:96:fd:77:fe:74:b2:e1:8d:17:98:
a8:cc:9b:65:fb:a3:88:9e:6a:c8:28:3b:76:46:92:
00:99:81:37:5f:db:c8:43:f0:a8:a2:47:a8:32:06:
af:a5:91:03:06:8f:0a:7a:62:66:b5:7d:a1:c4:8c:
30:22:cc:7a:ff:c5:33:ec:c8:26:c8:b2:f9:35:52:
9d:47:ef:3c:bd:69:3e:2b:5c:fe:08:1d:ef:0d:1b:
12:cb:bd:9c:ff:d4:dc:09:f1:4e:df:62:52:a5:12:
a0:9d:50:ac:8f:2d:a1:7c:e7:3d:1b:55:28:91:67:
91:cc:ea:62:c9:3d:a6:d9:3d:00:c2:41:b8:e1:f6:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:52:B7:27:81:39:F8:FA:CB:79:3E:15:AE:E0:1F:7B:CE:EA:A0
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3c:b7:36:a3:2b:6f:29:5a:69:a5:bf:fb:42:3a:ae:93:21:
7d:d6:ef:0d:18:2c:27:f6:10:6d:13:72:51:b7:60:76:2b:f1:
5b:89:70:0d:dd:43:ab:fd:49:12:ef:30:aa:af:e4:a9:3e:5d:
2e:5a:70:6f:69:76:ea:c3:e7:35:05:6f:f4:3b:b5:6d:77:a7:
12:d8:83:ac:54:20:f2:e3:d6:3a:74:c6:f6:8b:91:8b:4e:a0:
e4:c6:9c:d2:44:8b:62:0f:b1:5d:5a:84:35:d1:52:10:77:01:
81:63:a0:a0:95:9b:b5:30:6a:e0:5b:e0:95:ee:c2:4e:83:5d:
90:02:fc:17:85:f4:e6:15:dc:f6:4e:a2:66:32:fa:a1:47:ed:
b6:f1:5c:ad:1f:c3:ad:b8:4f:e8:f8:54:f8:a1:a2:c5:ce:af:
5e:fb:6a:01:70:fb:12:87:61:7c:e7:36:c7:75:63:fe:8f:c9:
7c:b5:30:6e:63:2d:fa:dc:0b:74:83:1a:1d:7c:b0:77:56:c9:
e9:26:24:33:5e:c6:73:26:0f:7a:da:97:45:07:67:ee:c2:e1:
3d:98:67:f9:3f:d3:90:f9:66:a5:39:78:ba:67:6e:8f:14:96:
c2:97:2a:2d:ed:15:52:81:f2:cf:d9:d5:8c:25:f2:4d:7b:1e:
a6:cc:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:22 2025 by rpki-client