Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File: yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier: ypQVIiEOrhRkUz4U/xpWQV2ueETa+j+VVYI9IQiJY+8=
Subject key identifier: 74:22:C8:3D:9F:63:BC:81:21:ED:B7:B2:C0:54:67:1E:6E:37:45:8B
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 01984A40F52B2FC2CAFCDDA4CBC5441B5433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: K4bAkU/dLFBR9iE5akJF8nrwlSriJLZpZ+VI9yKYKcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f5:2b:2f:c2:ca:fc:dd:a4:cb:c5:44:1b:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=7422c83d9f63bc8121edb7b2c054671e6e37458b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:31:a8:c9:f1:f0:46:0c:d9:42:95:97:82:
02:39:f0:39:e4:8f:ad:9e:27:5c:f3:27:b0:5d:9f:
46:2f:00:39:44:0f:76:68:b2:e5:d8:cf:f9:44:c1:
b4:a7:7a:c4:75:bb:56:17:16:b9:e0:c8:ad:f9:8e:
b1:ad:cc:af:6b:a2:f5:30:b6:9b:4c:8a:3a:69:c1:
38:99:96:05:04:5e:17:43:c6:ce:92:15:65:70:37:
b3:49:87:7f:35:87:d1:f3:52:32:45:4e:81:bd:2a:
5e:e0:17:c8:95:9e:42:14:ab:65:c6:10:c8:90:bd:
1f:83:da:d4:aa:6c:fd:be:2c:35:ce:4a:b5:5f:7a:
75:56:58:d7:a0:1f:d9:6f:83:0d:80:6f:a8:4d:bd:
31:f2:19:95:4d:1e:ba:fe:a9:7e:e3:e4:63:dc:99:
25:52:8e:26:6f:72:47:73:f3:cc:00:5b:71:c6:c7:
8b:91:e3:eb:83:77:a1:3d:78:16:96:b7:de:bb:64:
87:30:ed:59:63:ce:0a:9b:6e:cf:a4:9b:e1:15:b3:
3c:0d:71:23:e6:1e:44:51:5f:18:f8:45:80:23:63:
a1:4c:1c:4b:81:87:25:0f:00:fe:5d:fc:af:da:fc:
ab:4e:5a:0d:8c:de:51:6d:a3:5b:75:e7:58:62:dc:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:C8:3D:9F:63:BC:81:21:ED:B7:B2:C0:54:67:1E:6E:37:45:8B
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:05:28:cc:7a:66:82:48:c5:82:11:09:dd:5c:3f:2a:ad:91:
53:af:18:3f:27:af:5e:97:5c:31:c5:12:56:8e:80:f0:8f:be:
c7:47:08:d5:17:a7:8c:30:5d:65:b0:4a:2e:1a:73:5d:7e:da:
d7:d7:f9:93:0d:2d:18:15:e5:d2:e0:f9:6d:ec:be:ba:c1:3d:
35:91:ae:7d:fd:87:ab:bb:1e:85:84:17:c8:9d:29:fc:55:09:
59:4b:f8:8e:f4:08:a5:87:83:b7:21:35:4f:5f:5d:5d:c6:de:
24:1d:2f:f1:4a:90:06:3d:2f:30:34:1c:7e:8e:be:45:a5:ef:
f6:af:58:13:a7:81:40:48:22:da:07:1c:0a:88:a4:b3:f2:59:
2e:62:89:ea:9d:1a:4f:c1:0b:d6:85:ff:b5:2c:ee:bd:ce:46:
33:6f:25:38:3b:0c:25:42:f4:3f:f1:e6:1d:74:0a:9b:4d:f6:
69:e6:03:1b:fb:29:7c:d6:25:e9:7b:19:6e:cf:40:00:3b:bd:
ad:63:13:fa:01:a7:a0:5a:85:6d:76:19:a1:bc:d4:22:cf:4f:
54:8b:70:55:1d:cc:4e:91:8b:4c:fc:2a:fd:ff:be:d2:e6:f2:
9b:49:d6:cf:6a:07:9c:d0:b8:97:c8:b5:3c:26:2e:dd:75:93:
94:55:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:08:22 2025 by rpki-client