Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: jO0Xu76iRxASVs6EyjP5isur9Ex1fsN42Fp2eH/PF1E=
Subject key identifier: CC:6A:B8:7A:EE:61:40:E6:3D:8A:28:17:71:C0:03:DF:32:E1:21:7F
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 0199CC7EE862589449D650ABA196F252CB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 16C8
Signing time: Fri 10 Oct 2025 05:01:32 +0000
Manifest this update: Fri 10 Oct 2025 05:01:32 +0000
Manifest next update: Sat 11 Oct 2025 05:01:32 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: MVvvzFqEQKQzjybDJcQ5BjRNFZzt3DpQs1CRetJY85Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:7e:e8:62:58:94:49:d6:50:ab:a1:96:f2:52:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Oct 10 05:01:32 2025 GMT
Not After : Oct 11 05:01:32 2025 GMT
Subject: CN=cc6ab87aee6140e63d8a281771c003df32e1217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:02:fe:ac:c5:58:52:90:e5:49:08:19:2b:
4c:1d:65:98:5e:b9:e7:72:47:a2:f4:d3:47:d3:51:
17:74:39:83:ed:dc:27:b6:50:e4:f6:ac:34:15:ff:
da:01:41:2c:ce:19:f5:27:ff:ce:62:e3:ba:9d:11:
9c:ce:ee:33:84:d8:cd:33:85:fa:6a:f8:25:f6:50:
90:72:99:67:60:3f:11:54:2a:1d:2f:81:97:11:19:
ee:71:cb:2c:b5:63:75:30:2e:66:35:47:71:1c:26:
8f:8b:a4:6b:5b:db:50:15:c3:10:5e:32:c0:79:46:
d6:89:01:d7:1f:c3:21:fe:be:80:64:66:40:f8:19:
a4:3b:0c:d1:98:eb:16:12:f6:b4:3d:ad:38:bf:e0:
58:04:46:4e:af:50:be:f5:72:0c:f3:a6:9f:18:11:
b3:01:1b:82:59:7d:ba:67:52:0c:44:aa:aa:30:fc:
4f:27:14:91:00:25:8b:33:5f:86:98:3f:08:72:4f:
2f:55:4b:16:4c:8c:61:a6:50:88:49:f4:07:fc:b9:
5b:1f:56:b6:5f:8f:df:d8:3f:a5:64:52:d1:65:e7:
a1:c1:6c:d5:9b:ba:00:be:b0:c2:4d:31:7d:61:be:
05:97:29:8c:ed:94:20:f8:89:09:d1:11:c3:35:62:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:B8:7A:EE:61:40:E6:3D:8A:28:17:71:C0:03:DF:32:E1:21:7F
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:95:74:91:4d:2b:12:3b:5f:6c:39:94:2b:9f:f7:34:ea:
e5:d9:b5:ae:13:92:1c:d9:aa:88:60:cc:3d:ea:d5:df:51:ec:
a1:e5:22:c8:64:77:33:92:17:38:da:20:59:3c:fb:a4:74:34:
80:7d:dd:5d:0d:75:91:3d:c3:cd:63:36:84:d0:a4:a2:0a:1b:
ca:3d:27:46:09:3d:28:78:d0:5c:e5:bf:8b:ce:e0:ce:cf:f8:
f4:41:f1:64:4b:a3:64:38:e4:db:d9:81:c3:2c:a1:0d:b8:3d:
76:aa:b5:c4:e0:25:e6:91:39:7f:00:39:de:b5:ae:da:e6:36:
91:61:8c:e5:25:a8:3e:91:cb:95:d9:84:e1:30:a6:be:76:32:
95:84:d7:a4:41:15:c5:d6:a1:be:ce:f7:a6:72:f4:3e:68:ec:
89:76:c4:64:e6:b0:ed:2a:77:77:b9:57:aa:14:71:dc:0c:7e:
12:dd:53:e8:5b:7b:18:ec:1d:84:56:c3:44:3c:4a:c9:72:c2:
bc:36:97:1a:b5:0d:f0:39:38:0e:9a:55:37:6d:96:51:14:ef:
47:3b:34:25:00:0d:ec:34:04:d7:1f:76:44:25:e4:b1:66:db:
e7:4f:d3:e5:ea:04:ff:f4:0e:5e:0d:61:fd:96:2c:36:f0:51:
40:97:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 13:34:19 2025 by rpki-client