Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: hTm1vL/NS20xRrq25G7M06yItBwAocs8mrxrc0J0g3A=
Subject key identifier: EC:5B:EB:EA:6C:B3:90:FC:8B:E7:5F:6F:30:51:D5:09:16:3D:B6:5A
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 0198D54DDEA7A7BA5AB392A3ED382D712002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: QN/VH6mIx7eC8KzJiB86SbFZ+k89YNGBQXJFcjdvKPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:de:a7:a7:ba:5a:b3:92:a3:ed:38:2d:71:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=ec5bebea6cb390fc8be75f6f3051d509163db65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:7c:2c:9b:c5:90:95:62:e1:e4:37:99:73:
13:7e:03:a5:e6:21:de:16:36:fc:27:fe:80:d1:ba:
c4:1b:ec:19:b9:5e:e6:f0:af:31:43:46:19:e3:93:
47:7e:1b:54:aa:f9:9e:91:72:3e:77:13:25:70:9b:
dd:b9:b4:a1:11:34:bb:62:f1:7d:23:76:b6:d1:ed:
b3:87:7c:b4:76:7c:c1:cb:1a:29:9e:5a:12:87:df:
1c:65:51:7f:a3:6d:05:fc:e2:ce:95:0a:bc:e4:0b:
53:74:02:f0:9b:d2:5b:55:28:98:98:59:32:2c:88:
14:22:59:94:68:f0:1a:44:c4:ec:01:31:29:78:03:
aa:b6:7f:c5:07:00:4f:b8:4c:fc:be:1f:23:e7:93:
1b:80:12:a9:9a:d6:99:44:3d:66:6a:0b:d1:23:25:
c2:2a:26:f4:2d:2b:5a:52:53:47:d3:60:2b:4c:0f:
c1:82:40:5d:52:39:93:8f:26:dd:9c:09:6d:e1:ce:
85:23:0a:b2:18:e6:62:b4:98:c9:55:1e:03:f4:e9:
01:fd:6d:c3:e8:4d:01:33:7d:44:b3:f2:66:f4:a4:
a5:44:30:bc:4d:ec:86:63:df:28:53:30:32:59:7f:
88:f2:25:1f:4a:af:83:24:50:7d:64:c6:19:18:f4:
f4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:EB:EA:6C:B3:90:FC:8B:E7:5F:6F:30:51:D5:09:16:3D:B6:5A
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:87:64:f4:f7:7d:ee:56:e9:f8:d5:70:f3:74:7f:59:c3:
6b:3c:9a:ef:b1:32:de:b5:ea:ee:8c:78:d7:ea:38:5d:69:7b:
1c:32:17:07:df:a5:2f:69:6b:60:f7:de:1d:52:a7:32:f1:e2:
1a:05:13:e4:1b:ab:4a:17:77:47:e2:15:e8:22:c7:d7:eb:04:
f8:b3:d0:f0:2d:60:60:e7:0b:30:73:27:bb:92:a2:cb:b4:10:
a5:0c:62:ea:9d:86:0a:d6:7b:e4:14:bf:50:c9:ed:c7:24:b1:
af:79:16:9c:0a:63:29:6f:cd:e4:8c:2c:c3:d2:ce:9c:03:d4:
94:54:06:ee:b5:14:4b:a0:94:f7:03:90:2b:3a:87:19:36:53:
e9:da:6f:b4:75:75:e7:9e:68:56:69:e4:98:76:60:39:14:91:
71:fc:24:98:5c:a3:a4:40:ae:21:6d:68:cc:73:96:c7:41:cc:
d1:06:84:a2:9a:4b:49:54:40:e7:03:fa:24:e4:49:0c:66:77:
80:d8:0c:b0:d9:92:48:45:b4:fe:10:31:b0:09:62:7b:9f:68:
5c:5f:0c:ab:9c:fd:e3:17:9f:a2:f7:60:de:60:2d:13:83:9a:
b5:7f:16:29:87:a2:a1:e5:90:9e:80:68:40:1a:83:19:38:7c:
95:f6:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client