Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: 8GeSD83gsENlB+ddrmyn08Yls6TbaY8VE6/M5RoCtis=
Subject key identifier: 76:CC:42:C3:07:AB:91:E0:F1:92:A3:50:E4:D0:0B:59:40:BD:59:69
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 01976EF5500D9A6D19D3096D9ABD9ACF0802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 0EB2
Signing time: Sat 14 Jun 2025 15:00:59 +0000
Manifest this update: Sat 14 Jun 2025 15:00:59 +0000
Manifest next update: Sun 15 Jun 2025 15:00:59 +0000
Files and hashes: 1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: c2BPDex51IA5y3BETrm+NfXAy13waWVNxjGxJeJp4nM=)
2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:50:0d:9a:6d:19:d3:09:6d:9a:bd:9a:cf:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Jun 14 15:00:59 2025 GMT
Not After : Jun 15 15:00:59 2025 GMT
Subject: CN=76cc42c307ab91e0f192a350e4d00b5940bd5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:3b:36:e0:9d:66:28:ae:9a:cc:fa:94:ff:
46:d9:4c:73:dc:e0:10:0e:3e:7e:30:1b:4b:1a:55:
d6:5c:57:a2:09:1b:e4:10:02:f8:1f:af:3c:1a:9c:
03:4a:7e:45:d0:c3:ed:6f:1a:66:a7:3f:0b:6f:51:
27:4e:68:d9:92:1b:1c:b5:ed:b8:4d:57:26:4e:87:
ef:b8:68:c2:a4:a3:96:fb:4b:cb:2c:11:5a:99:0a:
5e:79:6b:af:1b:44:da:f7:89:ba:15:26:fc:69:f4:
6d:b5:41:77:a7:58:25:4f:64:87:6f:d3:8b:38:74:
e1:5f:ea:ab:b8:d1:a9:e3:34:51:99:57:c3:5b:8e:
ce:cf:66:dc:c6:49:02:a1:9b:18:b6:46:77:aa:fd:
99:23:4a:8c:f8:a7:c6:a0:bf:1b:42:9e:4c:cf:9c:
bb:e5:2e:0b:03:9d:4f:7c:bd:3b:56:22:3b:b0:b1:
57:d2:e3:2c:3a:86:36:90:07:ba:ad:06:9a:bc:93:
00:6c:23:ce:99:92:78:2e:36:83:e9:f6:c8:35:8f:
33:e7:4e:f6:07:86:46:0a:00:73:46:86:c6:0c:87:
7e:05:9e:ce:e8:e7:ac:8c:09:67:9a:6b:45:12:85:
0b:0f:94:d3:43:88:ec:fb:00:95:6c:b2:4c:e5:09:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:42:C3:07:AB:91:E0:F1:92:A3:50:E4:D0:0B:59:40:BD:59:69
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:a6:8a:b8:03:e6:c3:1e:1c:20:f0:c9:43:94:8c:ef:09:
02:ab:24:17:42:0a:90:81:ea:fc:75:15:64:6e:52:d2:0c:64:
74:38:ab:dc:34:b5:af:97:b6:f6:34:ba:e3:0a:ef:01:dc:2d:
98:8c:d0:64:6a:54:ea:51:30:ea:39:be:56:e8:a2:f6:ae:b1:
94:2b:8c:2b:b6:d6:01:a8:47:4b:61:fb:6f:b8:86:30:a3:a7:
81:61:a8:d5:02:eb:a7:73:37:c2:27:3f:66:3e:59:04:79:60:
5d:f8:aa:63:c6:8c:08:d3:39:f3:8f:e6:59:57:ac:63:80:d8:
d5:52:26:e9:90:fc:2f:45:33:a4:57:3f:85:55:03:14:48:2e:
10:de:e8:26:14:4f:08:54:4e:43:14:49:ec:d1:32:9e:22:68:
4d:89:b1:3f:7f:27:19:5b:96:13:38:dd:cf:66:36:e3:34:55:
43:cb:87:b5:19:d4:06:20:0b:73:cc:37:70:3e:28:79:bc:76:
ef:cb:1d:f8:09:b2:44:02:45:62:2d:9b:6d:39:17:15:67:9f:
3d:85:7c:4a:80:4a:79:55:3e:ae:a9:d0:a7:2b:11:d0:2c:cc:
28:a2:f4:df:80:c2:7d:f8:9b:7b:15:a9:b1:43:3f:3e:90:9f:
b7:dc:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:47 2025 by rpki-client