Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: kFLJ0cOT4aq9eSxkD0l0crjdcl1I1HA/is77WchZg74=
Subject key identifier: AA:4B:19:7E:39:1B:07:63:02:37:91:0D:51:65:C0:E1:C7:99:DA:21
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019A52D10DFDEE011DE6C4CD49056B7416E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0E41
Signing time: Wed 05 Nov 2025 07:00:23 +0000
Manifest this update: Wed 05 Nov 2025 07:00:23 +0000
Manifest next update: Thu 06 Nov 2025 07:00:23 +0000
Files and hashes: 1: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (hash: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=)
2: k4w-6jVNy-8iNTxThqtVK8dHfNM.roa (hash: i49dbw3SszheCL/rtxIrLH6ESMYCJl9JAeSfGhPrYzs=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: fuX19C6beHPrhWttjA2Cc9HQJOVDbpC5DBmmUME/AD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:0d:fd:ee:01:1d:e6:c4:cd:49:05:6b:74:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Nov 5 07:00:23 2025 GMT
Not After : Nov 6 07:00:23 2025 GMT
Subject: CN=aa4b197e391b07630237910d5165c0e1c799da21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:e6:7d:32:9a:f8:41:b6:f7:71:ba:b9:4e:
4e:de:b4:1a:5d:55:39:f5:85:14:5e:50:d3:a0:0e:
9c:70:6f:69:91:79:2f:54:0e:2f:ee:c2:ac:cd:98:
8c:7f:1a:12:c8:5d:80:eb:25:98:a3:e0:65:01:86:
93:d0:4b:47:1b:eb:88:24:09:41:f6:59:43:3c:3c:
a4:21:9d:cd:de:0e:3b:b9:d7:7b:cd:c5:6f:74:3d:
81:f3:bd:d0:6c:68:bd:2c:7b:db:02:06:7d:cf:58:
c5:02:16:df:4f:bc:2c:10:12:6d:1f:cf:58:4d:5c:
d3:14:b1:a7:2e:17:7d:01:5d:5f:06:09:f9:1f:2c:
ac:bd:e2:e7:62:b2:9f:e0:a4:1a:35:1e:6b:18:1c:
d0:6f:e0:ed:1e:0f:84:0d:0b:39:e9:b1:18:1c:af:
ce:99:80:e6:2e:02:5f:5a:80:17:3f:e8:26:09:6e:
22:48:35:5a:2b:a8:ba:4f:ed:e5:00:83:53:94:9b:
d8:72:c3:0d:73:99:6f:c7:41:57:b1:fb:72:d5:23:
91:57:57:60:2c:da:f1:5b:82:ea:0d:e8:1c:72:d0:
67:03:a3:2a:88:dd:32:52:8b:12:3c:2e:10:72:6d:
f0:39:8f:32:ee:72:01:2d:ed:53:a0:2d:02:2d:d6:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:19:7E:39:1B:07:63:02:37:91:0D:51:65:C0:E1:C7:99:DA:21
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:23:e9:6a:f7:d6:28:31:26:75:12:7d:32:b0:92:f2:31:
4f:07:6f:89:06:22:d7:aa:bb:68:5a:70:46:50:ba:31:eb:ea:
b0:b6:9a:f6:6a:6e:19:69:51:77:cd:c6:45:af:55:53:46:d3:
5d:21:e1:68:f9:1a:0a:85:15:49:7a:43:7c:27:e3:23:9f:43:
b9:67:dc:50:08:e1:28:0c:63:32:b0:57:10:ea:bf:b3:83:c0:
14:f6:76:60:a4:52:c6:d3:8a:7d:af:26:cc:2b:f0:26:f4:a5:
9b:28:de:96:d9:e0:1a:fa:a5:53:d1:d2:12:03:6d:65:47:95:
67:a3:b6:b7:ac:23:de:af:e0:a7:a4:2c:19:83:32:81:2b:ae:
28:97:e7:89:7f:0b:f3:41:b9:19:a3:a1:7f:62:d8:ce:15:1a:
22:ec:30:c6:fd:8c:e6:23:eb:3f:13:38:73:c1:54:2b:eb:27:
45:d2:b5:d8:0f:b8:75:8b:ca:7d:c8:b4:47:e3:d0:6a:61:f1:
90:7c:07:fa:5b:ff:1a:b8:d2:07:33:15:72:dc:06:59:c1:65:
93:55:bd:bf:bc:ad:10:c4:21:4c:b8:34:5c:04:c4:f9:61:cc:
c2:dc:d8:f1:b5:12:b8:6c:0d:6b:5b:00:9e:96:d3:39:62:04:
60:de:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:43 2025 by rpki-client