Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier: JL+b8yjkUgvX/k4/m9B3AGiwxJoMHKhttWQEnFaaa38=
Subject key identifier: 44:A0:86:A5:E3:FB:A3:52:C0:1E:81:8F:79:6E:DE:17:02:66:02:CE
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 0197B6D74C89C6EF73B6008A996A99EFC8FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number: 1114
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: 6E9ftunStCZALodF4CrPlmXTjl0o0QJNZJSFVpSbuCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4c:89:c6:ef:73:b6:00:8a:99:6a:99:ef:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=44a086a5e3fba352c01e818f796ede17026602ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:91:12:45:12:93:d2:db:9b:a3:0e:af:06:
88:56:b9:3d:d8:8a:0b:6e:e5:f5:a5:0a:42:f8:fe:
6a:f4:dc:5b:6a:88:76:a3:41:03:a8:b4:48:39:d0:
ea:71:d9:38:f6:31:57:18:f8:36:f3:f5:1d:ff:8c:
60:88:d5:fd:6a:62:c8:49:22:57:17:be:cc:c0:ea:
61:27:77:8c:a9:59:28:39:38:40:cc:4c:1f:02:c1:
c0:8b:91:aa:26:23:4e:b0:cb:9a:8e:bd:1e:ae:1a:
f3:ea:a8:b3:37:40:6b:a2:c3:99:a0:50:bf:3b:85:
c5:38:34:9c:bf:b3:96:74:93:5a:e4:84:d0:55:2b:
88:dc:bb:e2:a8:3e:52:69:97:30:a0:6f:98:c8:86:
fe:e7:14:74:e6:d5:5a:54:d7:50:9f:06:7b:20:6f:
c1:aa:5e:18:95:78:86:7f:ec:5f:27:4a:40:8c:e6:
8a:5a:27:2a:e4:49:09:09:14:b3:4c:de:01:53:9d:
77:fd:99:73:54:96:a1:d7:3f:97:2a:cd:47:43:cc:
72:cc:06:b7:bf:6c:91:e7:8f:eb:6f:3e:3d:25:6d:
a8:fa:1d:8d:33:d0:91:17:15:df:ae:7a:96:6b:ba:
a7:12:07:66:df:9f:f0:c0:ae:97:8f:8c:74:a0:ec:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A0:86:A5:E3:FB:A3:52:C0:1E:81:8F:79:6E:DE:17:02:66:02:CE
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:ca:ca:73:30:d0:5f:6c:49:7f:ad:1b:cb:1e:76:9b:d1:
af:f7:7c:91:a3:80:e3:eb:f0:9e:56:57:77:ae:e3:e0:56:83:
83:4c:3f:75:8a:94:07:7c:d3:7b:b6:0d:ac:45:99:a8:bd:8a:
f7:74:19:f0:36:f3:2d:1f:83:33:86:f9:c8:c4:b3:05:45:b3:
88:06:d9:5f:42:34:a4:b7:22:33:61:ad:a7:e1:2a:fe:4a:80:
3a:03:c4:fa:ba:8a:e3:77:d2:24:1c:9f:34:ff:03:ee:ff:26:
ed:0b:91:59:86:e3:38:c8:ed:4b:fb:62:54:31:61:e5:84:26:
62:20:64:2f:dd:cb:0c:62:6a:0f:7b:71:b8:4e:0e:76:10:39:
b5:6b:81:ff:3d:67:50:a9:2d:f6:6a:12:32:5e:99:4b:12:b3:
66:d8:e3:e6:27:68:5f:e5:b0:6d:be:70:7a:ee:24:3c:82:c2:
5d:24:c0:b8:a0:f0:4f:d9:7c:6a:9a:cd:ab:36:57:8a:e5:73:
56:b6:2e:da:29:49:61:a3:0e:57:d7:47:1a:9c:4e:17:c9:b2:
83:a1:b4:62:ec:ec:e6:43:4e:62:b3:d0:4c:69:3c:2c:53:e3:
fb:3f:dc:b0:81:34:80:92:b4:c0:59:1b:55:5d:e0:3e:81:8b:
aa:da:f9:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210yJxu9ztgCKmWqZ78j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy
YWVlZTgwHhcNMjUwNjI4MTQwMDUyWhcNMjUwNjI5MTQwMDUyWjAzMTEwLwYDVQQD
Eyg0NGEwODZhNWUzZmJhMzUyYzAxZTgxOGY3OTZlZGUxNzAyNjYwMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySyREkUSk9Lbm6MOrwaIVrk92IoL
buX1pQpC+P5q9Nxbaoh2o0EDqLRIOdDqcdk49jFXGPg28/Ud/4xgiNX9amLISSJX
F77MwOphJ3eMqVkoOThAzEwfAsHAi5GqJiNOsMuajr0erhrz6qizN0BrosOZoFC/
O4XFODScv7OWdJNa5ITQVSuI3LviqD5SaZcwoG+YyIb+5xR05tVaVNdQnwZ7IG/B
ql4YlXiGf+xfJ0pAjOaKWicq5EkJCRSzTN4BU513/ZlzVJah1z+XKs1HQ8xyzAa3
v2yR54/rbz49JW2o+h2NM9CRFxXfrnqWa7qnEgdm35/wwK6Xj4x0oOw2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESghqXj+6NSwB6Bj3lu3hcCZgLOMB8GA1UdIwQY
MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt
N2VhNjVjMTJlOGVjLzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj
LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv/KynMw
0F9sSX+tG8sedpvRr/d8kaOA4+vwnlZXd67j4FaDg0w/dYqUB3zTe7YNrEWZqL2K
93QZ8DbzLR+DM4b5yMSzBUWziAbZX0I0pLciM2Gtp+Eq/kqAOgPE+rqK43fSJByf
NP8D7v8m7QuRWYbjOMjtS/tiVDFh5YQmYiBkL93LDGJqD3txuE4OdhA5tWuB/z1n
UKkt9moSMl6ZSxKzZtjj5idoX+Wwbb5weu4kPILCXSTAuKDwT9l8aprNqzZXiuVz
VrYu2ilJYaMOV9dHGpxOF8myg6G0Yuzs5kNOYrPQTGk8LFPj+z/csIE0gJK0wFkb
VV3gPoGLqtr5gA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:27 2025 by rpki-client