Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: qsJb6ExjjW8lUPJ6MUh71Hsi/rcgzxZmnR5AENhbu2Y=
Subject key identifier: 4E:E0:81:91:20:7D:56:EF:2F:5C:17:58:DA:35:87:59:FD:38:F5:2A
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 0198D705D342A7A16173BBB422604037018A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0655
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: 0GE1bNZZ/MDQdD8HlJhz36Gkg/K5P6PobqaO0FLqHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d3:42:a7:a1:61:73:bb:b4:22:60:40:37:01:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=4ee08191207d56ef2f5c1758da358759fd38f52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:e1:8e:4e:37:f8:01:46:48:b0:bd:98:7f:
7c:fd:b4:2e:f5:b3:1f:7d:e3:f3:dd:d4:04:f8:52:
50:f4:b3:0b:32:fb:1d:65:5c:07:36:3d:fe:3a:00:
47:90:a1:45:52:f2:a2:37:40:36:7a:e6:31:bb:57:
60:58:f6:cf:61:ac:52:27:1a:98:0e:07:60:fd:a0:
56:7c:80:e4:90:87:f1:45:aa:99:43:ed:7f:c2:58:
0b:9e:8f:56:ce:d7:c8:71:19:fe:c3:3a:5a:2b:3b:
33:aa:18:b3:1a:77:a2:a6:6e:8d:93:6e:df:86:42:
a3:e7:61:45:27:0f:4d:d4:67:69:04:ad:a4:7d:9f:
0c:b2:b2:5c:ee:e3:6a:8b:0b:74:d8:c7:e9:6e:1c:
66:12:af:95:8e:da:3d:8a:98:4b:6d:06:b4:cb:a0:
7e:04:52:50:1d:4b:c7:0e:21:1b:85:d9:e2:27:c5:
a9:f5:c0:79:26:b5:73:7d:eb:c6:81:34:be:1a:65:
d8:8a:dc:09:56:ab:08:49:68:62:cd:71:4e:f2:03:
39:47:f2:76:e7:13:b9:28:e5:6d:b1:31:47:6f:7b:
dd:d4:47:c5:97:62:50:3e:43:af:0a:71:78:59:80:
ca:db:0c:bc:c3:c6:8b:b6:15:0b:2a:01:c6:ef:a6:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:81:91:20:7D:56:EF:2F:5C:17:58:DA:35:87:59:FD:38:F5:2A
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:49:32:f5:d0:0b:00:c4:e2:52:e7:ba:44:18:b4:27:3e:
46:87:98:7a:c4:b9:cb:87:21:88:05:3d:2c:88:b8:a1:6e:e9:
2d:36:84:3c:4d:b4:db:f8:e8:bf:2f:80:49:1f:ba:48:22:11:
47:de:73:2a:18:7e:de:01:6b:ba:0d:cb:9d:51:cb:94:60:37:
78:5e:ec:6c:87:3e:b8:57:bd:cd:95:fd:97:68:57:89:20:e9:
ce:2c:bc:4d:10:e1:50:d5:87:7f:c8:17:06:80:12:33:73:fe:
cc:dc:24:f6:05:1d:4a:da:f4:1c:8a:08:ac:8f:56:ee:57:40:
98:00:65:5e:52:9d:dd:e8:3d:6f:8b:d2:e2:45:9e:37:f3:9c:
5c:c0:8f:05:07:be:6e:f6:b3:d0:89:ff:ba:0f:63:a5:f7:47:
6d:b0:d7:b5:76:95:a1:46:e1:ba:31:51:7c:aa:88:91:76:0c:
c3:ed:c4:6e:6d:b9:c3:40:4c:2b:bf:51:6a:36:6d:22:b6:2d:
87:ef:2d:4c:83:e9:50:15:4b:ad:d0:e0:cc:a4:10:95:ba:5f:
06:5a:30:e8:e9:41:c8:66:a2:6d:9e:29:70:97:be:a1:27:3e:
2c:ae:fa:a8:93:60:34:9a:3b:f1:7c:c4:3f:33:ac:c5:33:bd:
c9:64:4d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBdNCp6Fhc7u0ImBANwGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy
ZWRmZjkwHhcNMjUwODIzMTMwMjE5WhcNMjUwODI0MTMwMjE5WjAzMTEwLwYDVQQD
Eyg0ZWUwODE5MTIwN2Q1NmVmMmY1YzE3NThkYTM1ODc1OWZkMzhmNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/nhjk43+AFGSLC9mH98/bQu9bMf
fePz3dQE+FJQ9LMLMvsdZVwHNj3+OgBHkKFFUvKiN0A2euYxu1dgWPbPYaxSJxqY
Dgdg/aBWfIDkkIfxRaqZQ+1/wlgLno9WztfIcRn+wzpaKzszqhizGneipm6Nk27f
hkKj52FFJw9N1GdpBK2kfZ8MsrJc7uNqiwt02MfpbhxmEq+Vjto9iphLbQa0y6B+
BFJQHUvHDiEbhdniJ8Wp9cB5JrVzfevGgTS+GmXYitwJVqsISWhizXFO8gM5R/J2
5xO5KOVtsTFHb3vd1EfFl2JQPkOvCnF4WYDK2wy8w8aLthULKgHG76bzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7ggZEgfVbvL1wXWNo1h1n9OPUqMB8GA1UdIwQY
MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It
YWRhNmU2NDMwN2M5LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5
LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+1JMvXQ
CwDE4lLnukQYtCc+RoeYesS5y4chiAU9LIi4oW7pLTaEPE202/jovy+ASR+6SCIR
R95zKhh+3gFrug3LnVHLlGA3eF7sbIc+uFe9zZX9l2hXiSDpziy8TRDhUNWHf8gX
BoASM3P+zNwk9gUdStr0HIoIrI9W7ldAmABlXlKd3eg9b4vS4kWeN/OcXMCPBQe+
bvaz0In/ug9jpfdHbbDXtXaVoUbhujFRfKqIkXYMw+3Ebm25w0BMK79RajZtIrYt
h+8tTIPpUBVLrdDgzKQQlbpfBlow6OlByGaibZ4pcJe+oSc+LK76qJNgNJo78XzE
PzOsxTO9yWRNuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:49 2025 by rpki-client