Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: 67sEKftaThpCjfuGHoK9UONWxbrp5/OTmtsowsMgHx0=
Subject key identifier: E3:94:69:5C:7D:5F:AD:BC:41:A0:2B:BA:DB:1C:C7:2B:F4:0F:9D:24
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 0198D4DFF312D21CBCC89385C8FBD8F1CAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0858
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 2E6COhVxhC4QljPgGm9RbYuIJiohwhtSi6Cmib3U+V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:12:d2:1c:bc:c8:93:85:c8:fb:d8:f1:ca:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=e394695c7d5fadbc41a02bbadb1cc72bf40f9d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:bc:8d:5b:56:6f:2d:a3:67:ad:31:a0:82:
2e:87:74:fd:35:b9:49:8d:60:95:17:40:0a:c0:79:
f5:d3:5f:71:ad:ac:88:7d:3d:01:0e:e2:4b:bc:ca:
f1:c4:4b:79:d8:ca:a9:4a:28:f5:ea:41:84:44:67:
c1:1d:2a:6f:55:13:05:5f:e8:57:34:7f:09:19:df:
4a:c3:ab:6e:2c:ac:ac:3b:55:b0:97:dd:f5:90:1a:
03:87:00:f0:cc:aa:a8:8c:3c:67:17:48:60:35:f4:
88:ea:d4:80:7a:55:45:ba:45:72:f3:8c:83:19:c5:
bf:82:bd:73:24:bb:c0:c9:a6:0f:1c:43:8d:8c:d1:
91:bb:50:78:d3:75:aa:1a:64:d5:a1:03:da:d8:0d:
db:08:b3:a5:9c:be:27:fb:cc:22:95:86:ce:70:82:
af:3d:bb:43:24:c2:cf:fe:2c:85:a9:40:cc:5c:8f:
5f:e8:33:94:b2:1e:54:f9:34:91:b1:10:de:78:7d:
c5:33:bb:00:1f:ba:1e:ae:6d:3c:a7:88:d1:37:1e:
4d:f1:f4:63:f1:d8:ad:a0:33:ae:aa:4c:d3:cd:0e:
c6:20:d5:ae:16:aa:62:f0:2f:e1:0a:c8:7f:0d:16:
3f:49:34:f6:4a:36:00:0b:5f:25:32:be:03:37:a0:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:69:5C:7D:5F:AD:BC:41:A0:2B:BA:DB:1C:C7:2B:F4:0F:9D:24
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1c:f1:e5:7f:79:fe:c3:38:84:5a:a8:32:d5:da:31:9c:79:
16:c0:97:18:e9:88:96:0b:9d:e6:06:77:9c:52:bd:4f:d5:6a:
81:f0:ef:96:f0:1c:83:c2:1a:f1:66:d1:bc:47:8b:f4:53:f5:
cd:4d:ca:7d:cc:be:b7:10:ed:31:46:a9:7c:b8:cf:08:6a:50:
14:62:47:0a:ef:46:44:0d:30:fa:55:50:63:37:b8:8f:48:0b:
5f:40:6c:06:55:67:ce:61:8f:72:7a:3e:0c:2d:19:7d:26:83:
91:c0:db:4f:aa:40:c0:23:1c:ca:34:e2:c9:75:e5:24:ea:fc:
68:bc:19:c8:52:56:b9:03:81:31:e9:d0:70:42:23:13:8f:40:
02:94:52:58:5c:08:bc:48:17:ed:2c:ab:3e:68:4a:ad:9b:2d:
02:50:68:8e:8b:1e:e1:bf:0c:d6:d5:a1:3d:bc:ad:9b:ee:c7:
24:ed:d1:0e:f8:82:3c:c8:f7:10:1e:21:6a:e2:da:7c:98:24:
30:1f:2a:ac:de:72:38:af:64:bd:8a:46:2a:b6:04:42:ce:d5:
a1:85:26:59:83:f3:15:18:21:10:cf:25:0a:4c:ae:64:5a:f8:
fe:77:20:d0:ff:8c:b0:e0:e5:60:ec:53:77:6c:ef:f1:77:95:
b0:48:40:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/MS0hy8yJOFyPvY8cqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh
MjBiMjMwHhcNMjUwODIzMDMwMTQyWhcNMjUwODI0MDMwMTQyWjAzMTEwLwYDVQQD
EyhlMzk0Njk1YzdkNWZhZGJjNDFhMDJiYmFkYjFjYzcyYmY0MGY5ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44i8jVtWby2jZ60xoIIuh3T9NblJ
jWCVF0AKwHn1019xrayIfT0BDuJLvMrxxEt52MqpSij16kGERGfBHSpvVRMFX+hX
NH8JGd9Kw6tuLKysO1Wwl931kBoDhwDwzKqojDxnF0hgNfSI6tSAelVFukVy84yD
GcW/gr1zJLvAyaYPHEONjNGRu1B403WqGmTVoQPa2A3bCLOlnL4n+8wilYbOcIKv
PbtDJMLP/iyFqUDMXI9f6DOUsh5U+TSRsRDeeH3FM7sAH7oerm08p4jRNx5N8fRj
8ditoDOuqkzTzQ7GINWuFqpi8C/hCsh/DRY/STT2SjYAC18lMr4DN6BxQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOUaVx9X628QaArutscxyv0D50kMB8GA1UdIwQY
MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt
NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi
LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxzx5X95
/sM4hFqoMtXaMZx5FsCXGOmIlgud5gZ3nFK9T9VqgfDvlvAcg8Ia8WbRvEeL9FP1
zU3Kfcy+txDtMUapfLjPCGpQFGJHCu9GRA0w+lVQYze4j0gLX0BsBlVnzmGPcno+
DC0ZfSaDkcDbT6pAwCMcyjTiyXXlJOr8aLwZyFJWuQOBMenQcEIjE49AApRSWFwI
vEgX7SyrPmhKrZstAlBojose4b8M1tWhPbytm+7HJO3RDviCPMj3EB4hauLafJgk
MB8qrN5yOK9kvYpGKrYEQs7VoYUmWYPzFRghEM8lCkyuZFr4/ncg0P+MsODlYOxT
d2zv8XeVsEhAFA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:59 2025 by rpki-client