Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json)
Hash identifier: g4pQ1C1g2qD9BqR7iemggFr8KT8VMGiB4z9lTzPLhOM=
Subject key identifier: 12:59:B8:6F:8F:D3:29:20:F8:49:5B:24:E5:2D:A0:04:1D:82:38:88
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0197B6A1A785322E4B25017CC67CFB1CA48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
Manifest number: 0CE7
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (hash: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=)
2: k4w-6jVNy-8iNTxThqtVK8dHfNM.roa (hash: i49dbw3SszheCL/rtxIrLH6ESMYCJl9JAeSfGhPrYzs=)
3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: Psi6kdxfyQVtUQK67XL3L4aAbzQbP/rQFMjxTBdI5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a7:85:32:2e:4b:25:01:7c:c6:7c:fb:1c:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=1259b86f8fd32920f8495b24e52da0041d823888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:df:3f:53:a3:ce:89:af:e3:2e:47:a6:81:28:
f5:d1:6a:bc:a3:18:37:3a:d3:60:ab:df:02:e6:89:
7d:09:5a:79:f0:53:a0:4a:2e:d1:12:83:35:eb:6f:
31:46:45:ed:c1:3b:81:2f:0a:b3:05:9f:75:b2:f9:
3f:f8:93:57:53:76:18:38:e8:f4:76:b4:0c:97:46:
aa:be:d4:75:5d:44:18:6c:3d:53:f9:fe:b3:5f:fa:
e8:42:80:16:5a:2d:91:75:2e:98:97:2c:f6:b5:8a:
ff:8e:11:c2:00:d7:db:9c:cc:f8:f7:ff:0d:20:d9:
57:79:4e:eb:a0:30:7c:1c:a5:0c:14:63:58:e1:d1:
fd:46:3b:73:87:93:fd:54:91:b2:dc:c9:34:e5:07:
e1:1c:11:e8:cd:1f:db:7a:88:55:0a:57:1d:12:6b:
8e:b8:b1:13:e9:38:15:0e:bc:b5:d3:d1:c3:eb:ca:
b1:31:97:21:b5:d6:4a:a6:e5:bf:fb:91:4d:52:9e:
fc:d7:11:96:c9:4a:87:4f:08:60:c9:44:20:39:67:
78:7d:be:7e:99:72:75:bf:73:af:c8:2f:d7:36:98:
b2:f9:ee:86:22:74:f1:45:fb:f6:e9:76:62:da:fc:
cc:b6:7f:b2:71:23:b3:f1:66:49:85:f3:c6:1e:b4:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:B8:6F:8F:D3:29:20:F8:49:5B:24:E5:2D:A0:04:1D:82:38:88
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:4b:47:23:96:5f:25:6b:ef:99:15:bd:d6:39:6a:3b:8b:
92:ef:ff:32:08:72:7e:17:5e:8e:f2:32:19:56:8a:2c:ec:93:
2f:49:ee:16:02:0c:a6:7e:28:28:29:4d:c3:fb:f5:0f:32:5a:
8e:0e:a8:39:b5:8c:68:2c:5b:43:42:b5:be:26:0f:8c:a7:39:
f3:25:2e:67:16:f1:8d:76:78:05:7f:1d:21:23:0c:ae:90:18:
d3:1e:d1:a7:dd:fc:f0:24:85:f1:50:da:e3:5e:9e:53:c9:e9:
b9:60:6f:92:12:f3:6e:e7:4f:8f:3c:7e:bb:b1:2c:35:c0:31:
c7:db:2a:be:b5:2f:b6:12:90:31:20:22:b1:52:36:ba:4d:c5:
e9:da:de:f4:8e:44:53:ec:b2:d5:40:6d:50:24:ec:b8:52:84:
fd:70:73:ce:7f:b3:20:4d:2d:a6:7b:29:c7:f5:95:da:57:27:
56:b4:eb:34:16:0e:44:56:39:40:74:a6:66:89:1b:89:2f:ea:
68:2a:21:d0:c0:6d:fa:3a:fe:94:f6:04:b8:31:1e:20:54:c5:
42:4b:5d:a0:4f:ab:21:4d:e7:58:13:04:ca:4a:b1:d5:0b:a0:
ec:8f:78:cf:22:a2:4f:0a:54:63:33:87:5d:9e:6d:28:cd:73:
3e:73:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:26 2025 by rpki-client