
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: Im/ehSfrugyh3t9Lm7nbikQsgCYtXA/yRUh5wXLScYU=
Subject key identifier: A6:5E:78:EA:54:C4:65:7F:D9:39:F2:F8:DD:EC:D2:D1:45:CA:73:91
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 01987C093E2B8B934CE404EBAC426A08021A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 082A
Signing time: Tue 05 Aug 2025 21:00:37 +0000
Manifest this update: Tue 05 Aug 2025 21:00:37 +0000
Manifest next update: Wed 06 Aug 2025 21:00:37 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: wdf2Dr6aNsLyjfcqNYkEyCGwv0rQyEUHc9CnVTAKXlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:3e:2b:8b:93:4c:e4:04:eb:ac:42:6a:08:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Aug 5 21:00:37 2025 GMT
Not After : Aug 6 21:00:37 2025 GMT
Subject: CN=a65e78ea54c4657fd939f2f8ddecd2d145ca7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:17:f2:84:ff:1b:24:b5:fe:bf:86:9d:23:
c3:da:3f:0a:4c:02:b1:d8:70:c3:4b:5b:e7:f2:93:
73:1e:0a:3b:8d:b5:18:ac:49:ca:70:a5:8e:be:a6:
ed:f1:fa:4d:05:5d:94:0e:a2:9a:c2:05:32:04:a1:
5c:a2:51:af:02:d9:71:e5:e0:30:b1:d7:c4:ba:eb:
fc:7f:96:b4:99:92:74:e2:e9:62:53:cb:4b:71:d6:
f1:65:9e:17:27:23:20:7f:05:e1:2a:8a:60:b1:d4:
30:d4:d2:a3:5f:09:5f:2d:2b:10:82:e7:4e:33:e9:
59:f9:68:34:11:5e:6d:76:0b:20:ad:12:1a:e7:7a:
0c:29:07:3b:4b:88:57:a1:8e:0a:9e:e6:77:c9:72:
46:ce:54:ef:87:dc:e6:3d:d8:d0:d7:83:26:c9:bd:
74:b9:dc:e3:36:42:90:44:f4:ec:49:75:58:03:b5:
64:62:3c:5c:ef:51:c7:93:06:30:2b:15:ff:5f:76:
3c:1b:d8:38:f6:bf:28:df:8d:cc:49:54:45:e2:2e:
72:17:23:35:6f:c0:50:d0:75:61:78:ea:c8:b7:76:
87:43:a3:18:3d:eb:34:08:09:7f:56:e3:93:e2:7d:
99:ce:58:52:a9:a9:65:18:94:c2:27:2f:98:ad:23:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5E:78:EA:54:C4:65:7F:D9:39:F2:F8:DD:EC:D2:D1:45:CA:73:91
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:3f:59:25:53:2b:20:3a:bb:79:56:96:35:07:b6:bb:d7:
ea:bc:72:fd:47:70:a3:27:e4:24:96:6a:25:cb:d6:53:b6:f6:
a4:0c:82:77:14:a6:79:77:4d:54:04:5c:c2:54:59:5e:e0:9a:
33:6f:39:df:02:e6:33:75:0d:83:9c:f3:aa:0e:ca:4f:a1:4b:
d2:03:e8:04:5f:0b:8e:c1:71:2c:40:04:53:de:56:dd:e7:fe:
c6:60:1e:13:fb:6b:20:bb:c6:77:0a:91:5f:3f:11:4a:9c:51:
f6:1b:4f:6a:f2:e5:c7:03:89:d3:8e:15:37:e6:45:39:24:4a:
91:c5:8a:ed:6e:8d:6b:5d:3c:a3:83:49:d8:6f:3a:7f:43:9a:
a7:51:9e:68:6a:1d:21:a9:9d:50:da:58:41:90:43:8c:28:bc:
2c:46:30:a8:3c:a7:89:42:19:5d:12:e5:01:d7:89:a1:83:59:
fe:09:00:69:35:2b:6e:10:86:e9:8d:73:1d:79:3a:2b:36:6b:
56:12:51:16:d2:24:9c:33:35:99:33:19:f7:05:f1:5f:27:87:
e2:4e:13:e5:a7:0f:4e:0b:dd:09:54:1a:92:76:6f:0a:a9:ab:
97:a0:13:ce:fb:36:67:34:dc:89:ce:1f:a7:ef:ee:c7:53:2d:
36:57:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:23 2025 by rpki-client