Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: 57SYrE8t83HV/kUJWQG3ae9GU58+FjlNyHGbmteciWA=
Subject key identifier: EC:E4:05:C6:A2:79:4E:89:43:10:60:9E:3C:C2:6E:D4:1C:41:A0:5F
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 01974C321C0C4113F09F612EBF49C639DB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0EA0
Signing time: Sat 07 Jun 2025 21:00:41 +0000
Manifest this update: Sat 07 Jun 2025 21:00:41 +0000
Manifest next update: Sun 08 Jun 2025 21:00:41 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 7A6BrPzIRvJR5qP4ZG6EQibw40UT6fgFsyU9tcdXI+o=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:1c:0c:41:13:f0:9f:61:2e:bf:49:c6:39:db:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Jun 7 21:00:41 2025 GMT
Not After : Jun 8 21:00:41 2025 GMT
Subject: CN=ece405c6a2794e894310609e3cc26ed41c41a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:1f:25:59:60:81:ef:70:01:65:32:91:85:
2e:fe:f2:a1:74:4a:4e:05:8c:05:0f:c2:b5:e7:f4:
d3:f1:c4:a0:a1:e5:93:7c:b4:cd:c2:48:17:18:6e:
40:f0:8d:f8:76:2b:0e:7a:c5:66:63:2a:52:0d:74:
12:9d:f0:4c:43:dc:74:3c:bf:7d:41:eb:70:ab:48:
72:1a:2e:bb:c2:c4:4d:5a:1c:a5:8e:4e:69:80:2d:
a9:ae:76:8c:1d:e8:19:f2:49:39:57:aa:c3:ad:4b:
22:b1:ef:9c:c8:80:6f:4d:20:b0:fb:f8:f3:77:43:
77:50:74:73:36:36:2c:29:f2:9e:9e:cf:74:ac:3f:
d9:b3:40:82:80:1b:5c:a1:48:2a:ac:8f:29:3b:7e:
e1:8d:b1:0c:ee:7d:24:6e:3c:85:fd:f6:3b:f9:6d:
07:a8:ee:51:81:00:3b:4f:b4:22:4e:1a:3d:58:61:
32:64:e4:f4:4b:36:c7:b9:0e:12:48:c9:e1:fe:98:
21:bc:92:fe:eb:cc:90:6d:1a:62:ad:73:6d:c6:e9:
81:4a:d0:93:2e:dc:16:e1:08:65:04:b1:22:35:e0:
41:e0:bc:47:9f:b8:d5:00:87:d2:95:18:08:61:f0:
25:c7:2c:eb:95:c5:d9:ea:42:78:61:52:db:f6:18:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:05:C6:A2:79:4E:89:43:10:60:9E:3C:C2:6E:D4:1C:41:A0:5F
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:2a:dd:0b:f1:16:34:ff:ce:3e:73:2e:5f:26:0a:e9:00:
0a:da:df:fa:c8:50:06:ed:33:24:b0:c3:0a:f0:2c:c0:64:1b:
5c:e2:59:65:77:a3:80:1f:35:4e:e6:6b:41:e1:3a:f2:02:a1:
cf:1c:f2:e3:2f:e6:5b:2e:6b:1e:fc:e4:61:5a:9c:d9:fe:4c:
13:65:57:31:94:46:66:bb:eb:53:fc:8f:7c:fe:8b:c1:c8:d9:
c8:7e:e1:cf:47:74:e2:44:2e:2f:da:4b:54:bc:ba:3b:38:7b:
0d:9b:fb:b8:aa:49:29:87:ad:e2:3e:c1:0f:10:cc:75:41:4d:
bc:da:cd:e8:6a:ba:30:c0:ac:f8:96:23:65:ce:1c:ea:42:ca:
ac:3d:08:85:41:0d:8d:63:df:a1:11:76:44:36:fb:62:bf:62:
ad:d6:79:df:0e:71:8a:63:6f:cb:39:33:e9:58:60:0d:36:41:
52:61:a9:95:d0:cc:b4:bf:cf:90:1d:56:d9:13:6c:0a:e1:51:
e5:46:6d:15:a5:d0:62:9f:5c:b1:a0:60:eb:d2:f1:ca:90:81:
78:00:c8:0d:5b:fd:71:86:2e:18:24:b8:99:8c:60:de:03:92:
68:1b:55:d4:1a:31:27:e7:61:7d:41:4c:bd:a7:e9:15:b1:1e:
ba:f3:6e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMhwMQRPwn2Euv0nGOduBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0
NGZkNDkwHhcNMjUwNjA3MjEwMDQxWhcNMjUwNjA4MjEwMDQxWjAzMTEwLwYDVQQD
EyhlY2U0MDVjNmEyNzk0ZTg5NDMxMDYwOWUzY2MyNmVkNDFjNDFhMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SQfJVlgge9wAWUykYUu/vKhdEpO
BYwFD8K15/TT8cSgoeWTfLTNwkgXGG5A8I34disOesVmYypSDXQSnfBMQ9x0PL99
Qetwq0hyGi67wsRNWhyljk5pgC2prnaMHegZ8kk5V6rDrUsise+cyIBvTSCw+/jz
d0N3UHRzNjYsKfKens90rD/Zs0CCgBtcoUgqrI8pO37hjbEM7n0kbjyF/fY7+W0H
qO5RgQA7T7QiTho9WGEyZOT0SzbHuQ4SSMnh/pghvJL+68yQbRpirXNtxumBStCT
LtwW4QhlBLEiNeBB4LxHn7jVAIfSlRgIYfAlxyzrlcXZ6kJ4YVLb9hgGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzkBcaieU6JQxBgnjzCbtQcQaBfMB8GA1UdIwQY
MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt
Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi
LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjQq3Qvx
FjT/zj5zLl8mCukACtrf+shQBu0zJLDDCvAswGQbXOJZZXejgB81TuZrQeE68gKh
zxzy4y/mWy5rHvzkYVqc2f5ME2VXMZRGZrvrU/yPfP6LwcjZyH7hz0d04kQuL9pL
VLy6Ozh7DZv7uKpJKYet4j7BDxDMdUFNvNrN6Gq6MMCs+JYjZc4c6kLKrD0IhUEN
jWPfoRF2RDb7Yr9irdZ53w5ximNvyzkz6VhgDTZBUmGpldDMtL/PkB1W2RNsCuFR
5UZtFaXQYp9csaBg69LxypCBeADIDVv9cYYuGCS4mYxg3gOSaBtV1BoxJ+dhfUFM
vafpFbEeuvNusw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:17:38 2025 by rpki-client