Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: jwcOgfysmiAbFS7yMyHUN/Hd23hvHUIKvaf4DYN13xA=
Subject key identifier: AF:D7:1F:8F:3F:55:04:35:30:D6:BE:BD:40:09:60:BD:62:9A:09:8B
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019A541AEDA5C9DC0541317A8E41FC30639F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 1032
Signing time: Wed 05 Nov 2025 13:00:42 +0000
Manifest this update: Wed 05 Nov 2025 13:00:42 +0000
Manifest next update: Thu 06 Nov 2025 13:00:42 +0000
Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 2/JiwhTBPpfU8pNHbTlnH/MUiP/kiOqTEzewEiQLl4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:ed:a5:c9:dc:05:41:31:7a:8e:41:fc:30:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Nov 5 13:00:42 2025 GMT
Not After : Nov 6 13:00:42 2025 GMT
Subject: CN=afd71f8f3f55043530d6bebd400960bd629a098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:ee:d8:6a:1d:71:97:de:70:30:ff:ea:55:
a7:ab:5a:ff:b3:30:64:19:10:12:29:2c:61:88:d0:
b2:4d:94:28:02:e8:8b:73:90:8b:6f:af:9c:09:96:
2d:ed:cc:fd:05:c2:ca:6f:c2:4d:ab:8d:00:6d:5a:
54:ca:93:f4:73:fd:b0:af:d3:b2:ad:c2:6f:7c:7a:
a4:08:3e:8a:c0:92:0c:95:48:24:7d:be:fc:5a:b9:
16:5e:4b:af:40:92:3f:ea:7a:e6:f1:55:02:b4:68:
12:b0:89:b6:6e:23:29:34:e1:90:1a:1f:26:aa:3c:
26:e9:57:2f:1a:39:4f:a6:77:70:36:c5:58:2f:df:
34:ac:81:69:23:ae:e3:04:c8:29:7f:e0:54:85:a2:
67:97:a7:97:be:41:77:e2:43:71:45:54:f3:f2:58:
a7:54:db:0e:7c:32:d1:a6:a0:77:6e:e4:77:5d:4c:
3e:08:bf:ce:93:40:98:83:e0:9c:79:ac:2d:9c:33:
dd:6e:6f:87:c5:42:2a:dc:df:de:54:23:a2:3c:cd:
59:26:80:b7:0c:c4:2c:11:70:06:95:ec:a6:28:23:
d2:1a:ee:94:99:fe:20:08:fe:89:57:c1:21:6d:70:
3b:d1:57:63:f9:25:83:84:81:4e:b7:b1:37:4b:ff:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:1F:8F:3F:55:04:35:30:D6:BE:BD:40:09:60:BD:62:9A:09:8B
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4f:0a:91:1c:74:50:06:64:04:90:78:08:67:94:35:3e:54:
de:8e:a5:d0:ca:25:52:0a:5f:9a:a2:21:14:12:d5:64:41:ce:
64:93:b4:fe:3e:86:ad:78:fe:76:5d:e5:10:f3:1f:1e:8c:7a:
70:64:e1:45:e8:ac:9c:4b:c6:41:28:18:ac:95:95:34:d1:b5:
50:a9:42:d4:f4:ac:60:bb:a6:00:5b:c5:cb:94:23:5b:f6:67:
12:23:2c:c8:b2:54:34:59:b1:3a:0e:92:00:07:e9:e5:3b:51:
e8:a8:1c:02:2a:54:a4:1d:4d:07:5d:c1:5c:24:fb:19:6f:eb:
20:76:b1:79:6d:eb:5b:4f:62:3c:1c:bc:a8:f9:1c:07:60:7e:
32:10:fe:74:14:1c:0c:84:00:1e:de:40:02:6d:c8:cd:f6:ce:
94:b9:69:58:e6:83:40:1a:dd:76:6b:96:37:1b:11:d3:70:28:
55:23:17:64:6f:39:05:60:60:4d:65:2c:fe:67:bd:9c:75:84:
05:e9:47:59:0d:09:90:2f:eb:f1:ae:cb:a7:90:4d:70:ee:9f:
4f:18:c2:f8:84:2d:29:f7:26:f1:e0:34:be:24:84:6e:51:8f:
58:32:b4:2b:5e:86:7c:c6:20:f4:60:e0:e1:39:ab:a2:c6:15:
53:d0:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:20 2025 by rpki-client