Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: vSsLcX8mzsGNpTBUJ1pDbebraCYHUG+E07AskcEZJeg=
Subject key identifier: E0:80:DE:CA:12:C2:C7:1C:F7:8A:ED:5E:4B:2F:82:E0:4F:F3:9F:08
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 019A4DE1CD777A9CD30D29FD9F62989231B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: kLxBFUFbjSSbKAmentwI0XeLoCIeeWiGyUn8e1Dae60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cd:77:7a:9c:d3:0d:29:fd:9f:62:98:92:31:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=e080deca12c2c71cf78aed5e4b2f82e04ff39f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:e3:93:b8:7e:58:39:07:6b:f0:87:ae:f6:
74:d8:67:0c:70:3a:50:60:a3:8a:8a:2f:9d:a4:16:
59:44:fb:ff:60:46:5b:82:0e:64:1c:d7:d2:ad:cc:
cb:11:04:82:47:18:06:7b:ea:c4:42:b5:13:58:64:
ea:d3:ee:1e:d5:73:c9:ed:9d:39:62:96:74:e5:25:
32:3a:c0:18:98:67:2b:06:8b:24:4e:05:e2:0b:ad:
b5:2e:01:06:ac:90:64:1a:66:29:25:ef:a8:8c:d5:
b8:f6:6b:0f:e9:5f:3a:c1:aa:b1:fb:c4:a9:3d:42:
ed:c1:c7:aa:4b:d1:cd:6c:01:9e:59:8e:cc:33:ed:
7d:b7:fd:c5:5e:24:7d:88:7f:9c:4d:55:d1:d8:6a:
5f:5f:68:9c:77:4e:30:58:00:e3:6f:c2:dc:77:05:
2a:00:de:a6:d9:3a:e5:f3:64:db:7e:e5:a5:79:dc:
b4:38:93:f0:ae:2f:24:36:eb:61:1c:00:5a:25:fe:
fb:13:4c:82:73:a5:c0:50:12:3e:dd:00:c4:7f:18:
6d:b1:31:d3:42:a6:87:b4:2f:ee:84:6a:c2:20:fa:
cd:31:46:69:a1:86:3d:e7:f2:4d:80:09:34:66:26:
82:ce:08:8d:dd:00:03:45:b5:ef:b2:db:02:51:a6:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:DE:CA:12:C2:C7:1C:F7:8A:ED:5E:4B:2F:82:E0:4F:F3:9F:08
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:83:29:ad:30:3a:f2:a1:15:bf:d7:6a:ed:88:11:96:c6:
98:1a:f3:1d:9b:82:43:16:55:8f:6f:77:bc:3f:9f:ba:e4:d9:
ac:87:6a:d6:21:cb:46:bd:29:da:36:14:14:4e:ee:dd:f7:ef:
57:2d:4c:91:6d:22:3a:0c:84:c6:b1:5c:2d:25:4c:8e:39:56:
99:4f:f0:3c:e6:8d:a2:b0:d3:be:f4:81:7e:b9:52:03:38:bd:
79:18:7a:d1:d1:8f:16:9e:b7:ef:1e:0d:05:a7:1d:56:14:c1:
c8:76:c0:64:b8:a6:17:47:7d:5c:48:c7:b6:c0:0e:ee:fb:b6:
84:e7:a3:49:fb:cc:e1:39:1f:06:b8:25:0d:66:1c:7b:63:09:
52:cf:4d:54:aa:7b:74:de:f9:3c:b9:6f:84:2b:e5:d6:49:2b:
dc:d6:cf:c1:d0:b9:b7:fb:e5:56:3b:60:17:fb:88:dd:9e:aa:
81:e6:f0:ab:24:5e:ee:5b:da:94:6f:98:dc:08:0c:97:33:6f:
11:ef:09:15:47:d4:1b:4b:15:7f:a4:d9:87:3b:11:5d:30:01:
63:13:bd:0d:a1:c6:0b:26:0d:42:c0:35:dc:08:b4:3b:ae:60:
91:21:ec:31:2a:72:21:1a:95:2f:b5:0b:bd:28:26:76:22:e8:
76:cf:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:23 2025 by rpki-client