Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: Hl/MJsLjN+ip4SiBtsMcXKk2gEKqnJ/HBhUlmpya1hE=
Subject key identifier: 14:43:9F:6B:6B:AE:98:FF:8A:F1:19:A8:8B:88:3F:AF:89:66:ED:5C
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 019A025987E4893B5583148BCBFE0ACD083F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 06F0
Signing time: Mon 20 Oct 2025 16:00:13 +0000
Manifest this update: Mon 20 Oct 2025 16:00:13 +0000
Manifest next update: Tue 21 Oct 2025 16:00:13 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: 2t4s7ComTXFyBJxK5wzSS6QUuZyhBmUkK8VgqEzic9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:87:e4:89:3b:55:83:14:8b:cb:fe:0a:cd:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Oct 20 16:00:13 2025 GMT
Not After : Oct 21 16:00:13 2025 GMT
Subject: CN=14439f6b6bae98ff8af119a88b883faf8966ed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:66:38:22:ef:4a:48:6a:7c:7a:cd:e4:10:
92:2f:96:9e:20:08:98:0a:17:a5:ac:6e:0b:aa:57:
3e:52:4a:ab:4a:73:0a:ba:8a:d5:20:ca:7b:7a:64:
eb:b1:89:d0:e9:24:af:f4:66:8b:9a:41:cd:15:fa:
90:51:fd:9c:23:e0:3e:4b:0e:fa:e7:45:72:1c:af:
63:f5:f9:69:67:07:ff:65:02:b1:5f:eb:81:15:4a:
15:94:b9:dc:a5:12:a5:42:f9:cb:a0:f9:ff:ac:5b:
25:7d:ce:57:70:86:d6:fa:bd:11:dd:5c:a8:64:a4:
7d:47:a2:23:14:27:00:f3:82:69:33:53:54:e4:5c:
0e:49:15:9e:ed:a4:3e:40:de:7c:bb:52:db:4c:1b:
f4:96:31:85:79:d0:7b:9b:75:9b:93:32:82:fc:95:
90:ed:24:92:09:80:2d:fe:5e:fe:d4:ae:b5:6c:df:
8e:e3:2c:8e:77:b8:31:b0:81:d3:75:d3:1f:1b:11:
a1:28:7a:83:0b:d1:e9:6d:09:8e:f3:85:84:17:f1:
ba:80:e8:07:80:52:d1:91:6c:62:bb:cb:e8:be:4a:
90:6a:96:f7:5c:00:45:49:76:b3:b8:77:ed:23:7a:
3c:d5:d8:9a:a5:15:65:ba:d3:ad:3c:85:87:16:31:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:9F:6B:6B:AE:98:FF:8A:F1:19:A8:8B:88:3F:AF:89:66:ED:5C
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:02:0c:fc:d1:ce:42:20:14:96:43:b7:7c:47:88:b4:1e:
52:ac:32:48:f2:56:56:f8:be:19:e2:ac:cb:82:35:67:42:ed:
1b:83:52:d6:84:36:2a:2c:ec:fc:b7:b6:50:fd:02:b5:de:46:
fc:a1:9e:48:73:43:a5:e5:f3:13:6f:d7:fe:da:75:31:96:1d:
4b:09:87:c6:cd:ea:8b:75:4e:97:39:02:e4:6b:aa:a9:a8:d5:
a1:03:b4:28:20:69:f6:90:2c:b4:89:1e:ae:1c:a8:ad:a6:26:
82:73:76:88:04:6a:16:42:88:fb:c6:28:fd:95:7d:b1:1b:9d:
12:e3:8e:30:b4:64:12:a1:9c:88:22:27:e8:93:eb:7d:aa:1c:
c9:08:62:a2:a3:ce:f3:18:9f:24:21:a2:14:86:fe:09:7f:6f:
c2:3b:11:3b:e0:9b:dc:ac:2a:f2:a0:c5:a3:e9:49:e6:12:23:
78:b0:02:2b:13:fc:c7:34:5f:ea:eb:1a:f6:83:ac:b3:32:3c:
65:13:9e:ab:0c:de:9c:91:28:2d:dc:a0:83:81:3e:ce:65:fd:
06:af:ba:80:9f:a5:75:1c:fa:b3:38:4c:70:44:1c:a1:44:e8:
25:38:99:3b:7f:12:10:09:b7:1b:d8:23:e2:35:14:92:4c:1f:
05:ab:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:34:21 2025 by rpki-client