Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: gCbzpIZHgGvlPxp2UnJDFc4ixgv2tSDpJcrfxLLNNPM=
Subject key identifier: 26:1D:50:D5:6E:5B:C1:96:41:0F:80:FF:48:D7:BC:AF:01:E3:51:4C
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019A7113180BADBE2BDBD94742E264CFE859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 1041
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: gfnNxAWOLa61R61hfsaXeZRmu13+E8bfMX0a48fyH80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:18:0b:ad:be:2b:db:d9:47:42:e2:64:cf:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=261d50d56e5bc196410f80ff48d7bcaf01e3514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:88:90:4b:e6:01:4b:f4:9e:90:e8:65:2f:
46:90:9f:ce:9d:35:8e:44:97:82:d8:4b:71:a9:fc:
be:e6:8e:cc:39:9a:50:5b:23:c6:7e:24:80:eb:ef:
58:bb:da:38:68:8e:eb:62:47:42:09:e5:44:51:4e:
ee:40:f3:76:ba:84:1f:5b:d0:38:44:94:18:f8:51:
bc:69:36:90:ba:e9:3a:e3:a1:c2:ab:f5:bc:cd:07:
fa:e3:b4:48:1d:5a:a0:75:a6:04:b5:60:31:77:38:
f6:56:20:b9:41:62:9e:3c:e5:fc:29:b8:f3:0f:d7:
e4:62:68:a6:be:e4:eb:7f:b6:1d:c2:a7:53:98:2d:
aa:13:2d:57:c4:44:bd:f4:06:26:1a:7c:82:ee:a1:
4b:89:9d:5f:6a:ff:11:ab:31:98:99:21:ee:26:30:
e8:1b:91:5d:e9:be:83:cd:79:53:bf:c8:0f:07:7e:
6f:89:5f:59:0b:c2:a5:e7:c2:00:77:ef:af:a9:4e:
fe:6c:e0:8e:46:29:5f:df:60:98:5d:12:c9:45:26:
80:e9:f9:84:a7:41:6c:20:7e:65:b8:c8:42:c0:47:
62:96:23:45:87:55:da:05:0a:7c:aa:3d:11:bd:0c:
b9:6e:34:49:14:e8:76:01:06:70:aa:a8:dd:d1:e0:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1D:50:D5:6E:5B:C1:96:41:0F:80:FF:48:D7:BC:AF:01:E3:51:4C
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:3c:7f:4c:9f:d8:f9:5b:b3:b9:89:57:59:62:d3:c4:26:
e3:80:4f:7f:7f:1d:11:2d:8e:50:9f:9e:7c:f0:7c:e8:5f:e1:
ae:aa:fb:59:94:13:04:b5:01:06:1e:60:8d:25:42:2f:77:a9:
4e:2c:86:c1:91:bc:38:5d:6c:70:8f:f4:3b:44:49:98:be:26:
00:a8:3a:f0:4d:b8:fe:cc:cf:58:4e:8b:8d:1c:4b:32:f4:86:
6d:46:16:ab:7f:7c:ff:30:16:c5:20:87:6f:9f:ae:66:d9:71:
78:02:bd:ac:95:0a:65:68:4a:8e:2f:3e:98:67:1e:fa:df:55:
28:dd:03:eb:1e:a8:69:93:76:d2:dd:6e:7d:5e:c1:37:c3:c4:
d3:be:24:70:2d:6b:fb:a6:69:67:02:0d:0b:5f:ce:00:7f:3a:
17:54:a0:c2:1c:9b:dd:c0:e5:96:11:a5:72:10:0c:b3:83:c5:
ee:83:f9:ba:66:6c:f4:9b:d5:5d:0d:82:71:46:94:3e:1e:f0:
8c:80:61:e3:23:2a:3d:d4:58:5d:95:34:a3:ba:96:86:d7:4d:
73:bb:87:a1:df:17:b0:9e:73:17:d0:bb:90:18:6c:64:f3:95:
23:49:58:2b:6c:8e:9e:28:3a:e7:96:b5:88:36:a3:e8:9c:3b:
ca:85:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client