Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: yy3XX98oNYxKVvlCWJtaGdHLc+pRgHu7ghJ/ACgPgkk=
Subject key identifier: 0E:B0:D3:D9:FB:53:46:B2:83:5C:BA:73:A2:CF:1C:70:0C:B3:D2:75
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 0199FE46E1BB2B33CDD0D5548DB81E5ADBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 08F2
Signing time: Sun 19 Oct 2025 21:01:22 +0000
Manifest this update: Sun 19 Oct 2025 21:01:22 +0000
Manifest next update: Mon 20 Oct 2025 21:01:22 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: PNtHLWbOMn/7lYjeHPO9CxdM68VsLFsp69Mu4KAeX7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e1:bb:2b:33:cd:d0:d5:54:8d:b8:1e:5a:db:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Oct 19 21:01:22 2025 GMT
Not After : Oct 20 21:01:22 2025 GMT
Subject: CN=0eb0d3d9fb5346b2835cba73a2cf1c700cb3d275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:90:42:fb:52:28:ad:a2:1a:55:6c:53:f4:
5c:d5:d8:77:1d:9d:c7:d6:56:61:25:b2:3f:65:7b:
8c:98:01:a4:71:22:91:bf:2e:0d:45:e0:87:73:66:
3b:5d:e6:a5:e7:42:a9:38:dc:d6:e4:3e:75:45:9b:
cb:b8:0f:3d:04:90:da:16:19:18:af:07:64:2c:e9:
eb:a7:e9:84:45:77:3f:49:fc:10:9d:f0:2d:53:86:
d0:c7:d0:b5:5e:e7:3c:7a:d8:37:82:18:6b:5c:b0:
d1:eb:50:bd:17:22:d0:82:ce:c5:f4:18:86:c3:12:
ab:ad:a8:2d:d9:4d:8e:21:5a:d8:37:50:21:92:c9:
dd:37:18:bc:de:0c:e6:b0:21:71:b1:ec:77:0b:30:
fa:02:73:07:e6:a9:ec:2a:2d:fa:bc:d2:c6:4a:bc:
f9:cc:c0:9b:39:6a:b3:b8:e8:ad:29:e8:f0:cc:86:
7e:83:be:26:42:c1:14:0f:68:8a:9e:d8:3f:4a:8e:
89:46:ae:1a:33:3b:8f:f4:fe:f8:58:c4:1c:45:5d:
29:a3:bd:f3:71:ec:28:dd:f9:25:4a:ab:ef:86:82:
14:78:bd:f2:f1:4b:67:92:cb:b3:6e:08:37:a3:38:
ac:39:11:40:78:53:8d:20:38:77:82:d8:22:f5:f8:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:D3:D9:FB:53:46:B2:83:5C:BA:73:A2:CF:1C:70:0C:B3:D2:75
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:99:52:9c:d6:99:f5:55:cc:60:3f:7c:fd:f9:96:1b:44:
ae:4d:b9:c6:12:73:2c:c8:53:a0:eb:ea:eb:a6:1b:70:9d:d3:
dc:07:47:f3:67:eb:ff:68:08:23:22:2e:41:ec:ba:6e:35:ef:
17:59:e5:fe:1a:82:0f:d7:da:d6:a0:42:19:cd:fe:2b:db:72:
47:56:b4:02:24:f6:d2:05:6f:ad:b1:bb:de:ac:08:74:ac:23:
80:fe:3d:b8:e0:e2:a9:e4:3e:d3:40:11:08:46:8d:69:f9:1e:
bb:4c:11:c1:a9:bc:2d:a4:49:57:04:5f:83:b0:62:73:c5:4a:
9c:ef:89:72:a6:25:b5:bb:2b:5d:9d:aa:04:7d:30:fb:b7:ca:
c4:ae:6f:4c:fb:83:f9:70:c5:cb:58:33:55:39:4f:3e:e9:8a:
f4:83:1b:f3:7a:02:01:b2:54:6f:0b:1d:e2:96:97:09:cc:e7:
96:73:dc:6f:f1:45:f8:16:d0:e9:4e:d5:35:f6:b7:15:68:39:
fc:c7:24:bc:9a:56:f8:49:7a:81:6f:69:35:f3:7a:3b:c5:3a:
4d:9b:da:a6:96:86:14:23:2c:d3:d2:45:6a:80:d6:6b:5f:f1:
d0:3a:ac:b3:fc:d2:12:a7:db:7a:b6:d7:c7:c4:88:4a:11:6c:
41:51:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:58 2025 by rpki-client