Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: kcqL8ZOmzRKWOpWQ94sXWi1GpgzuxCHefuyZ/5ArrUg=
Subject key identifier: 09:50:7A:4F:CB:D0:68:21:B9:AB:AA:04:15:5E:31:B3:74:11:91:53
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 0197B8FCCA2C40194D6FB869EFAB82454EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 07C5
Signing time: Sun 29 Jun 2025 00:01:03 +0000
Manifest this update: Sun 29 Jun 2025 00:01:03 +0000
Manifest next update: Mon 30 Jun 2025 00:01:03 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: TtVcfRQHbCzQ+pBowYuY/Hiff3FAy2w3u8DCcO+Auo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ca:2c:40:19:4d:6f:b8:69:ef:ab:82:45:4e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Jun 29 00:01:03 2025 GMT
Not After : Jun 30 00:01:03 2025 GMT
Subject: CN=09507a4fcbd06821b9abaa04155e31b374119153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:7e:33:9e:51:6f:4c:b3:ed:a2:29:81:2f:
a9:24:df:e0:5c:c2:f1:b2:4c:17:0b:ec:9c:8c:fa:
24:7d:c8:bc:4e:a1:7d:d2:52:0b:60:5b:8e:ff:e9:
67:16:a8:05:32:16:ae:7f:f3:30:e9:f3:9e:31:ac:
0d:7f:c1:fe:eb:c3:5b:1b:00:ed:c8:06:20:83:88:
9f:de:e8:6a:2b:cb:93:68:7b:3a:57:77:bc:81:8a:
ec:b3:88:0c:2b:a9:a8:38:f6:47:00:3e:39:5f:1f:
0e:50:48:33:ee:2b:3b:59:ee:49:03:f4:62:69:2e:
e5:2e:f0:4f:99:c2:01:4b:8e:1b:d1:88:8f:12:be:
31:14:6b:73:c3:00:bf:f1:7f:0e:a2:9d:57:24:6e:
30:09:32:6b:34:dd:e7:16:78:96:a4:2f:85:29:36:
7c:fa:f0:ac:a2:b0:af:46:1d:64:3d:cf:25:21:95:
ed:52:9d:8a:a0:e3:d3:13:0b:de:59:15:12:ac:e6:
45:89:ff:fb:ac:b8:a6:3f:ac:72:a0:4c:57:bd:10:
a3:3d:c9:74:c6:9a:a5:f7:2e:d8:67:0c:43:b0:ed:
a3:5e:a4:b5:d2:f4:d3:52:8f:0b:7e:a3:2f:43:5f:
e7:c0:2b:9c:22:7b:f7:5e:fd:95:30:01:ca:70:e8:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:7A:4F:CB:D0:68:21:B9:AB:AA:04:15:5E:31:B3:74:11:91:53
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:93:93:c6:9b:fb:df:0f:90:48:33:6f:20:11:c9:60:d7:
ab:98:cd:e7:0c:d6:3c:2d:e9:d1:cd:c5:aa:ed:11:8b:63:17:
1c:a0:13:a6:52:d0:2c:77:93:f8:e9:cc:1e:b4:48:63:9d:f0:
b0:7d:46:db:a0:24:a7:bc:59:ff:38:8c:cc:5b:87:05:85:15:
e6:37:37:b8:87:ed:8f:7d:41:e6:a4:d2:0b:9b:b8:82:ca:45:
7f:b9:e8:0f:47:2e:53:72:77:bf:19:ae:16:cc:05:8b:14:81:
62:bb:e4:8b:10:f4:07:9b:40:76:2f:1b:cc:74:cd:76:12:66:
06:87:69:84:39:1e:a8:e9:85:10:cc:5f:03:78:c4:7c:4e:0f:
d3:b3:99:31:26:a7:19:e3:24:1c:83:38:59:e2:90:c1:e2:66:
a9:ba:0d:fb:c7:0e:5c:8f:dc:60:20:c9:86:ee:62:c6:2a:d0:
85:93:de:08:3e:5f:4b:a5:2a:b3:48:a2:ab:99:0b:8b:e2:b1:
00:6a:b3:9a:f7:f5:8d:55:d3:6d:92:6f:ca:1a:61:1d:b9:27:
c3:b6:74:0e:e8:72:a2:f2:da:aa:4e:9c:0e:6d:b8:5d:fd:42:
fe:8a:ae:ab:b1:e4:02:81:73:a1:7c:80:ca:8b:bd:84:02:dd:
32:3b:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:33:29 2025 by rpki-client