Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: rSScFeJYl62xnzLb1+rsAFZNHuwb1iyzvXCMdLIQV1s=
Subject key identifier: 44:81:C1:62:34:F4:8F:D7:CD:DC:91:67:39:07:F6:7F:1D:31:32:2D
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 019872CF4C80ECB7352E45AC0B18F602DD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: hCQny2Nhrv1GnGtFgVwZwhXwbO+pSBvIbBBM9GcgqW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4c:80:ec:b7:35:2e:45:ac:0b:18:f6:02:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=4481c16234f48fd7cddc91673907f67f1d31322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:e9:60:ba:7c:ea:dc:bc:80:91:2c:88:c9:
32:71:f7:21:99:d7:73:39:ca:10:8a:67:ac:79:1a:
d4:be:9a:de:25:1a:68:d2:98:34:ee:81:b6:76:00:
2c:d0:4e:66:cd:30:c8:6d:96:43:e0:d4:82:9d:bf:
78:14:f2:0a:15:26:a0:fc:dd:79:3a:63:7e:4d:f1:
1d:eb:5f:72:a3:de:a1:ab:7e:41:30:eb:41:bb:63:
5e:b9:87:e3:ad:68:23:97:02:6d:94:3a:1b:ab:4c:
67:68:76:94:45:ee:02:8e:67:b8:93:34:d3:60:c5:
39:2e:73:32:da:03:ed:ab:a4:62:9b:37:e4:ae:0f:
00:71:22:de:a2:7a:61:17:a1:24:95:59:b0:a0:67:
d5:68:5d:6e:cf:9a:48:3d:2a:1e:96:75:71:29:8f:
be:97:dd:d7:5c:c5:1c:70:8d:29:70:04:4d:00:05:
83:8f:41:d0:4c:2f:a6:a9:4e:d4:f9:d2:96:6c:64:
f6:a0:35:6d:43:80:de:38:1f:71:4c:05:ee:cf:b2:
2a:18:db:9a:08:46:95:6a:6f:d1:d8:fa:68:d9:a4:
a3:58:7b:5e:90:8d:b5:a5:19:ef:46:11:7e:b9:12:
a0:6b:37:fa:13:9b:39:1c:fb:aa:03:70:d8:eb:34:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:C1:62:34:F4:8F:D7:CD:DC:91:67:39:07:F6:7F:1D:31:32:2D
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:a2:04:ec:08:33:ab:5b:47:1b:48:d4:af:08:56:3e:a5:
a6:12:4d:28:b6:a8:d2:c4:42:cd:97:82:91:9a:f6:a1:fc:a2:
4a:cd:21:db:66:ca:49:98:9a:89:83:47:4c:17:7b:3a:e4:68:
52:9e:3c:a4:33:7f:bb:35:a9:94:9e:b2:25:3d:78:fd:61:89:
f4:e2:66:7e:7b:25:ab:e1:6f:12:6c:75:e4:7f:36:ee:12:e6:
78:04:e7:2f:22:d0:ae:e5:35:9b:55:54:ac:7c:7e:ad:c1:08:
ee:ab:da:54:15:2f:16:9c:5e:20:1e:b2:b9:4a:ca:3e:c8:a1:
86:e8:2e:5a:85:ca:22:65:89:e5:e7:45:4c:4b:a2:f4:65:a4:
9a:fe:38:20:a9:66:07:e1:61:de:98:20:d5:1f:65:bf:e9:cb:
97:d6:fe:e3:38:fd:82:19:47:e1:a4:81:e4:da:04:93:dd:6f:
73:fc:35:e3:e3:7a:48:75:90:4a:ca:c7:03:c6:88:73:8d:6f:
15:f3:2a:da:40:14:b0:2e:e9:05:25:96:73:5c:c9:8c:23:5d:
9c:05:44:0e:71:8e:3a:a5:85:c9:1e:cc:cc:d2:5a:76:bb:ed:
57:0b:e8:4b:5a:78:4a:25:07:55:67:15:3f:bc:8b:eb:a3:cf:
77:22:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:37 2025 by rpki-client