Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: wu3dr/RlNpej88XiVwqt43KSrZ8In/AcHEFgS3pYZ64=
Subject key identifier: 45:6A:66:64:B5:2A:F3:20:46:AC:5A:05:FF:C3:A6:D8:3D:74:2F:C3
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 0198D4735B819353E015167BD09C1C3591E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0F6B
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 6jzd5NSfTJIDhyuyQZSqAPXgsVXJw8ZUFDw1HSPD1oA=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5b:81:93:53:e0:15:16:7b:d0:9c:1c:35:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=456a6664b52af32046ac5a05ffc3a6d83d742fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:11:45:97:78:e9:c1:33:8c:1c:a8:50:e8:
34:2b:39:99:1a:e2:81:04:f2:69:9d:0b:40:63:db:
2b:90:b8:e8:3b:7d:c3:ea:7b:84:ed:10:16:f5:51:
a7:a8:dd:c5:d4:7b:14:3f:ef:0b:ee:17:56:db:03:
8b:db:7c:4e:35:9b:7a:05:22:39:f8:ed:e2:5a:89:
44:05:cc:83:18:00:07:a1:46:e0:07:e8:d4:2b:b8:
fc:d4:b9:48:51:10:e9:75:d7:f9:a6:39:d3:27:32:
37:61:fb:4c:b4:2d:c7:5f:95:9a:dc:25:d4:2f:da:
8c:9f:82:b6:dd:d2:d3:07:6d:ce:89:48:3b:29:dd:
0b:45:27:59:ec:a2:d4:de:15:45:bd:fd:f7:17:a0:
c3:f7:08:c9:ac:22:86:7f:da:2a:c0:c5:1e:86:d9:
a8:8b:97:bd:08:e5:9a:10:d4:da:8f:99:ff:eb:73:
32:b9:e6:53:82:72:57:5c:90:1d:7e:6d:22:fe:10:
3c:14:0d:1f:58:ec:df:72:42:34:8d:11:d4:89:4c:
56:dc:d1:33:e4:d6:ad:9d:bd:b8:4d:ed:63:08:f3:
97:a9:fd:4e:6d:5e:b9:3d:79:00:96:64:31:c5:15:
6e:d3:bd:0c:33:e4:92:ab:08:70:e2:ba:09:21:a5:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:66:64:B5:2A:F3:20:46:AC:5A:05:FF:C3:A6:D8:3D:74:2F:C3
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:64:34:ae:88:44:c9:72:c3:60:6a:dc:89:1e:28:7c:c4:77:
03:35:09:d8:e7:63:67:35:f3:54:1f:5d:2e:d2:be:8d:48:3e:
27:99:1c:31:e1:58:09:fc:0b:5b:82:e2:e4:41:d2:d1:a3:b4:
a7:21:7f:1d:32:27:b9:9a:ff:08:06:3f:88:50:a9:03:d0:db:
cd:9a:11:92:4f:a4:01:cb:87:14:c7:04:17:f2:14:77:24:47:
b7:fe:15:4d:cd:6a:97:1a:64:35:ce:93:b6:8a:ac:f2:03:28:
96:30:d2:fe:22:93:f4:68:d7:05:8a:67:22:46:9c:b7:a2:6a:
b2:b8:1c:34:82:ee:ca:c1:74:66:c7:1e:a6:cd:96:61:42:3d:
12:a8:5f:a0:e7:7c:ff:b4:4b:39:24:8e:81:54:bb:c7:c2:c4:
71:e1:6d:43:09:b9:c7:59:c5:2b:8d:79:f5:d8:40:65:4f:e5:
47:c3:37:fe:be:e8:ab:5e:06:55:7b:52:19:5c:75:22:74:0c:
e9:c6:50:ab:4d:ee:04:f9:d1:99:6d:5e:1b:b7:c4:a3:ce:fc:
c0:be:05:3a:7c:eb:aa:ec:15:62:dc:71:ca:9b:a3:2c:36:1f:
02:84:af:86:91:d6:cc:58:e3:52:94:4b:18:3b:10:1a:34:f3:
77:5b:b4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc1uBk1PgFRZ70JwcNZHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0
NGZkNDkwHhcNMjUwODIzMDEwMzA2WhcNMjUwODI0MDEwMzA2WjAzMTEwLwYDVQQD
Eyg0NTZhNjY2NGI1MmFmMzIwNDZhYzVhMDVmZmMzYTZkODNkNzQyZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4RRZd46cEzjByoUOg0KzmZGuKB
BPJpnQtAY9srkLjoO33D6nuE7RAW9VGnqN3F1HsUP+8L7hdW2wOL23xONZt6BSI5
+O3iWolEBcyDGAAHoUbgB+jUK7j81LlIURDpddf5pjnTJzI3YftMtC3HX5Wa3CXU
L9qMn4K23dLTB23OiUg7Kd0LRSdZ7KLU3hVFvf33F6DD9wjJrCKGf9oqwMUehtmo
i5e9COWaENTaj5n/63MyueZTgnJXXJAdfm0i/hA8FA0fWOzfckI0jRHUiUxW3NEz
5Natnb24Te1jCPOXqf1ObV65PXkAlmQxxRVu070MM+SSqwhw4roJIaVjDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVqZmS1KvMgRqxaBf/Dptg9dC/DMB8GA1UdIwQY
MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt
Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi
LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWQ0rohE
yXLDYGrciR4ofMR3AzUJ2OdjZzXzVB9dLtK+jUg+J5kcMeFYCfwLW4Li5EHS0aO0
pyF/HTInuZr/CAY/iFCpA9DbzZoRkk+kAcuHFMcEF/IUdyRHt/4VTc1qlxpkNc6T
toqs8gMoljDS/iKT9GjXBYpnIkact6JqsrgcNILuysF0Zsceps2WYUI9EqhfoOd8
/7RLOSSOgVS7x8LEceFtQwm5x1nFK4159dhAZU/lR8M3/r7oq14GVXtSGVx1InQM
6cZQq03uBPnRmW1eG7fEo878wL4FOnzrquwVYtxxypujLDYfAoSvhpHWzFjjUpRL
GDsQGjTzd1u03Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:32 2025 by rpki-client