Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: uFnXoDcxwRzCN8+KbCc6z66W+OSyi1cZtCuW79HRkxA=
Subject key identifier: 2F:95:15:D8:E8:94:1A:22:A3:F5:AF:E8:96:AA:8A:2C:CF:4B:36:09
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 0197B88FEFF567DBB2B3B5C342FE50EFEE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0ED8
Signing time: Sat 28 Jun 2025 22:02:10 +0000
Manifest this update: Sat 28 Jun 2025 22:02:10 +0000
Manifest next update: Sun 29 Jun 2025 22:02:10 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: u5r/rDtZhl3rBwBIj8tjL4FU+rmGb+9H3uPkZWNT1B8=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ef:f5:67:db:b2:b3:b5:c3:42:fe:50:ef:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Jun 28 22:02:10 2025 GMT
Not After : Jun 29 22:02:10 2025 GMT
Subject: CN=2f9515d8e8941a22a3f5afe896aa8a2ccf4b3609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:c9:df:58:36:d7:90:c9:c3:03:61:d3:8e:
b0:da:97:c9:22:d5:ee:4b:28:dd:4b:c8:a9:49:c9:
38:56:7e:81:04:f8:74:22:c9:2e:a0:3d:cc:bf:fa:
11:2a:2c:ed:65:c4:3d:0f:62:0f:47:96:d6:92:87:
5d:75:1b:ce:bb:ee:dc:e0:b8:0b:22:12:e9:92:f0:
09:24:f0:e8:41:28:b3:67:13:f5:00:59:2a:7f:ed:
d9:82:44:0c:26:3a:11:45:e5:7f:61:59:22:cc:94:
17:3a:ed:f9:ab:22:42:bd:74:67:87:ea:42:69:ed:
54:fb:50:db:7d:30:5f:42:65:35:4c:b7:8d:d5:58:
bb:c5:be:dc:5d:11:36:4c:ec:41:af:6e:4b:99:59:
95:e8:c0:e9:b0:de:3f:2d:7b:85:57:35:b8:56:4a:
a1:14:e7:e7:c5:b9:c3:e1:a0:c0:af:8d:34:7a:b1:
44:60:bf:c4:4c:7a:8a:e7:63:91:e7:17:d2:73:08:
25:c9:66:6b:a0:d3:b0:bf:63:dd:01:7a:ad:2b:b9:
c1:90:8c:77:99:1f:e0:3e:46:0b:b9:1e:50:b1:ea:
c6:9d:cd:80:90:87:4b:d6:ed:fe:0d:40:00:52:4a:
46:50:8a:e2:e3:52:98:65:2f:11:0e:5b:e8:45:a7:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:15:D8:E8:94:1A:22:A3:F5:AF:E8:96:AA:8A:2C:CF:4B:36:09
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4c:0a:d9:5c:97:bf:e7:6e:18:6a:8e:d6:33:ad:ee:32:32:
ac:2b:ba:7e:d6:07:43:1f:8e:58:b0:4b:44:05:4a:b1:25:79:
ad:42:8d:ad:ff:37:68:ca:cf:a3:2b:53:f0:9d:bf:b8:cf:0e:
d4:6d:36:69:59:2c:c0:8f:da:00:80:cb:94:7e:b1:b7:0c:2b:
a8:fa:ea:a8:0c:bb:78:7e:cd:ad:40:73:df:35:2f:c6:b9:dc:
7e:9c:1b:23:65:5b:fc:e3:11:34:5c:c4:99:af:ad:5b:ba:c2:
f3:42:2c:ec:07:6a:57:5c:f6:bf:8e:d4:dc:c9:68:f4:d4:44:
da:b7:3e:14:d2:2f:71:73:74:ad:4f:58:b3:14:20:36:00:78:
93:f3:16:9a:43:fe:c3:49:5c:24:79:51:b2:a5:c0:c0:85:45:
db:95:68:97:94:08:c6:7b:74:7d:0f:62:55:75:49:86:bf:98:
5d:2e:b3:40:28:cb:67:7b:f3:66:e5:77:17:58:69:9f:3f:a6:
b6:f9:53:79:89:69:40:b5:a9:b6:ca:45:27:6d:a5:78:d3:db:
f0:cf:fe:85:cb:25:83:3c:e4:66:e6:87:b4:58:ec:ca:b2:b9:
ae:cd:e7:f4:9d:b9:08:e1:a2:87:3e:5d:de:8f:ce:f4:ba:85:
b3:35:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:17 2025 by rpki-client