Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: Ubpl2WtIWTB7bAHe/cBRvtMMHKCx/fSwM+6FoK3zRyc=
Subject key identifier: 17:2D:2B:A4:20:E4:F1:0D:D1:C0:36:C4:36:E8:6C:5B:DF:C2:13:35
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019A00353FEA9CD02EF33DCA487BC7A45873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 08F3
Signing time: Mon 20 Oct 2025 06:01:20 +0000
Manifest this update: Mon 20 Oct 2025 06:01:20 +0000
Manifest next update: Tue 21 Oct 2025 06:01:20 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: Cp+3zzimnsXHKvpqVI0RmcepBc6rG+bX38gGejQIaAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:3f:ea:9c:d0:2e:f3:3d:ca:48:7b:c7:a4:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Oct 20 06:01:20 2025 GMT
Not After : Oct 21 06:01:20 2025 GMT
Subject: CN=172d2ba420e4f10dd1c036c436e86c5bdfc21335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:d9:d7:68:7a:ad:61:a7:da:bf:da:ae:44:
6f:31:4b:04:d8:25:87:25:c2:f8:26:e5:c2:3a:cf:
a7:2f:69:55:eb:eb:ca:ab:bf:50:7b:e0:16:8d:4f:
d4:df:22:87:c2:3c:24:76:e5:18:9b:3d:11:f5:0e:
b1:2d:ec:11:a7:ae:4a:d7:5b:f1:b7:85:c4:ce:a3:
e3:4c:ac:69:6a:32:c9:ee:42:0f:d5:4f:31:a7:4f:
db:b9:c4:20:28:1a:fa:0a:f2:38:b7:fc:4e:f7:d0:
14:86:28:61:45:62:b3:98:dc:56:8e:f3:62:ae:8c:
1f:d7:c2:6c:44:a3:ca:3b:c7:2e:65:80:5e:38:31:
3d:21:fa:71:da:bc:c8:36:f3:4f:cc:3e:f5:dc:4a:
11:7b:21:c5:9f:4a:0e:4b:83:27:0a:67:7a:f6:fd:
da:44:1f:bc:95:23:0f:1b:f4:fb:1e:31:7b:e9:ab:
67:7e:1e:4a:a9:fb:dd:bb:e4:bf:fd:a8:19:3c:65:
ac:9b:41:80:bf:aa:c9:bc:dd:eb:07:7e:dd:90:b2:
49:1c:f7:97:13:78:5c:11:94:c9:55:12:9c:3c:60:
b8:bb:9b:10:56:ed:3e:97:7c:33:63:c5:a2:c8:81:
7e:0b:07:eb:ee:fa:8e:2c:93:72:7c:2a:ad:ca:d1:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:2B:A4:20:E4:F1:0D:D1:C0:36:C4:36:E8:6C:5B:DF:C2:13:35
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6f:15:d7:df:a7:f4:80:86:12:31:78:e9:87:32:8d:ce:e6:
fd:39:b8:04:cf:60:bc:f5:3d:04:3b:df:e6:75:e5:82:17:16:
63:c6:f7:df:17:73:71:2f:c8:58:a3:53:ed:58:b3:70:1b:a6:
68:66:de:ee:79:3c:74:64:45:d7:fd:21:7c:0b:cf:ac:e7:c7:
68:17:63:d5:e7:06:41:e1:57:f9:2c:cf:2c:a2:e3:55:28:17:
84:d2:4f:e2:77:5c:fb:b5:d4:dc:70:bc:14:37:74:f4:44:ec:
d8:d3:2e:c8:3f:07:89:f4:f1:8a:78:8d:98:24:aa:0d:18:42:
74:c0:11:9f:8e:ba:32:ab:25:4f:3a:86:f0:45:2b:75:66:37:
80:5d:14:57:7a:17:07:d7:ad:68:e4:4d:f0:f7:52:6d:9a:3b:
85:de:b1:12:14:08:91:07:48:fc:62:c1:41:7b:09:45:8b:c1:
e0:5f:b4:88:9a:0a:56:dc:01:40:33:1e:bb:e9:5f:e6:85:56:
a8:a1:d7:a9:6d:76:98:65:99:4c:b2:9e:80:a5:6c:af:63:af:
10:3f:1e:55:5e:81:e9:58:b5:72:b7:89:e2:1c:20:5b:86:38:
31:8d:97:90:65:1b:64:dc:71:fe:6b:30:61:ff:15:a9:5f:25:
c3:fe:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:40 2025 by rpki-client