Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: tLr5yz9IGBc10cuA7oaxAo8aMePoJLTcxdjhFYI4Mgo=
Subject key identifier: F7:96:DC:2A:41:5A:0C:0C:E3:4D:25:BE:20:59:D8:7E:60:F8:10:CD
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0199FDDA1E2F3ED8E10DDAB13557C6D4DF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0E15
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (hash: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=)
2: k4w-6jVNy-8iNTxThqtVK8dHfNM.roa (hash: i49dbw3SszheCL/rtxIrLH6ESMYCJl9JAeSfGhPrYzs=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: wCdY1RwiPoP3z81G1aYk3nJ+Bn2c5YBBaT4GjsTQl7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1e:2f:3e:d8:e1:0d:da:b1:35:57:c6:d4:df:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=f796dc2a415a0c0ce34d25be2059d87e60f810cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:c9:81:1b:56:79:25:d3:82:68:35:36:90:
ee:b3:dd:82:09:5d:9b:cf:07:87:5e:ae:51:63:b9:
f6:97:8d:f8:f8:3d:47:98:a3:85:cd:6e:78:6a:fd:
d5:4d:5a:6e:45:1b:14:12:b7:b2:d8:13:12:cc:cb:
34:22:e8:21:50:a5:46:40:69:f2:70:de:a7:ea:73:
e1:37:20:74:05:df:07:57:f4:ef:44:03:35:61:bd:
96:3e:88:63:9e:4c:d4:cf:f3:cd:d8:eb:57:1a:89:
78:3d:a2:19:af:c8:b7:43:22:a2:0f:35:0d:b8:42:
9e:e3:18:bd:33:b2:82:bf:6b:18:33:97:ec:af:f5:
18:99:32:c5:f0:c7:91:68:4d:b1:5d:b7:1a:c4:47:
48:70:c9:0f:b7:c3:b3:d2:ff:48:13:c2:e5:4a:ae:
44:9c:f7:65:ef:04:f0:8b:0a:f2:13:fc:8a:f5:8d:
91:c5:5b:38:18:3a:fc:a9:f3:8a:7b:62:f2:ba:e3:
cc:b8:d6:dc:8a:84:71:a9:65:8b:64:f6:47:53:40:
9a:f2:d1:9c:35:8f:f1:b6:4a:73:62:a8:98:dc:48:
82:01:a5:4b:94:cc:2d:56:ee:22:8e:87:33:7b:5f:
40:1e:0d:9b:eb:70:4c:97:38:44:73:58:e1:af:7e:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:DC:2A:41:5A:0C:0C:E3:4D:25:BE:20:59:D8:7E:60:F8:10:CD
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:74:62:99:e3:17:62:7d:a4:b3:06:37:f8:25:f7:8a:30:2b:
1d:c4:97:2a:c4:4e:17:f7:ab:b8:15:e9:d4:08:4d:ff:af:06:
5d:53:40:74:8c:99:62:45:2f:b2:eb:54:d5:0b:73:42:6f:fd:
6f:15:2b:0d:b0:97:77:81:17:69:aa:79:b3:36:44:a0:71:36:
7f:f7:e8:43:19:a5:7f:67:96:3f:45:db:68:f0:8f:06:b4:37:
9f:75:05:6f:9e:b3:7f:2b:65:bd:36:25:fc:1e:de:c2:f7:1c:
28:57:19:09:98:ee:b1:a2:ff:dd:d8:7b:6a:ee:8d:98:ea:80:
14:40:a8:82:b2:84:c7:fb:5c:87:8e:7e:61:49:db:0d:74:71:
eb:54:18:98:b9:10:7c:eb:05:8a:f2:59:1b:a3:e8:65:db:2d:
16:c7:95:2a:86:85:9a:84:49:f6:25:5f:98:83:29:ec:ba:92:
4e:59:a8:13:52:78:a7:8b:f4:7b:34:ee:1b:19:81:d9:e9:a4:
00:f1:8e:36:7c:b8:c1:1f:20:b3:fb:7d:31:ec:47:3c:b9:37:
0a:d3:0f:27:d6:8c:b3:05:88:8b:db:36:00:34:51:06:2a:ab:
ae:f3:9e:76:33:ab:07:70:0b:89:de:5e:e2:4e:d4:5d:98:7c:
a9:4d:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:15 2025 by rpki-client