Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: hwDSmipDuc6G+zBybmQHSXQB2CAmew6PZuNfGqedbnk=
Subject key identifier: AC:51:96:91:E4:DD:D6:55:87:15:85:80:D7:B2:E3:FA:44:C8:DF:D5
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019A4D741141DF569C88C7A96F46803BDF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 091B
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: n767DwQ9qlhb4nS0jgSnUtk7W5kXhLGrd8muCeT0Bo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:11:41:df:56:9c:88:c7:a9:6f:46:80:3b:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=ac519691e4ddd65587158580d7b2e3fa44c8dfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:37:d0:a9:26:1a:10:fc:1d:51:fd:84:9f:
3c:83:a0:39:26:85:44:f1:01:87:a0:b6:cc:bf:35:
73:d1:0f:0a:2a:68:71:e1:ab:22:24:ac:e1:42:18:
1a:09:b2:3e:67:f6:fb:1f:70:0a:8f:a5:ef:36:ad:
af:ad:a2:48:72:36:a6:9a:dc:e2:43:15:0e:8b:91:
4c:9f:40:fa:e4:a9:b5:f6:88:07:50:c2:64:89:08:
2e:c7:9f:2a:2e:58:3f:82:32:6b:77:8d:d7:42:09:
c8:f6:c8:c0:7b:3d:f0:75:da:e0:3d:f0:4f:45:76:
97:db:3a:12:71:04:6f:ab:40:ac:f1:3e:9a:b2:e7:
03:a9:a7:d1:aa:a5:ea:f5:31:f1:58:12:47:58:db:
5d:e1:d5:f2:bf:09:50:54:67:5d:c3:6f:4a:2c:6e:
d0:b2:8b:fa:26:d3:52:ea:9c:f3:55:10:da:bc:95:
7c:bd:29:cf:4c:8d:fa:05:aa:a6:e5:27:cc:c1:dc:
50:f5:a5:b0:9a:d4:17:30:a5:35:a9:40:76:c8:7d:
cf:ef:49:69:bc:7a:ed:00:0a:23:6a:76:11:5b:ae:
0b:3d:4a:e6:f6:27:4e:c5:1c:b3:49:30:b0:10:52:
1f:eb:58:91:1d:c7:c1:2c:78:01:8c:24:a3:9f:14:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:96:91:E4:DD:D6:55:87:15:85:80:D7:B2:E3:FA:44:C8:DF:D5
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:72:ad:71:6c:b2:82:49:3d:04:4e:54:de:b6:b8:d6:ef:17:
85:23:42:fb:43:40:8d:35:34:5c:06:44:85:55:d3:f2:7d:43:
e0:97:c3:1d:65:03:7f:ff:67:6e:b7:5a:31:a9:34:a4:5f:5a:
90:90:3f:fa:e2:b1:18:b0:e8:53:01:d5:65:03:e7:62:57:b8:
3b:a3:2e:1f:28:e6:44:83:7c:01:6f:67:2e:5e:d0:b7:44:cd:
7d:c5:46:2f:a1:12:93:c3:2c:dd:47:13:b7:38:c7:b6:8a:b2:
e4:e7:4d:3f:e1:fd:66:a0:5f:7e:78:8d:2b:ef:95:73:cd:96:
25:aa:bc:43:01:26:16:66:72:97:62:20:d2:cb:4e:8d:8d:9a:
81:a8:99:e3:d8:5b:fc:3f:9d:0b:36:4e:f2:14:b4:d4:7c:b1:
06:26:c2:9d:e3:0c:55:a7:10:58:18:cd:96:bb:8b:2d:36:05:
a4:cb:a1:80:e8:22:c0:ed:23:ce:10:ed:d4:3c:fc:3e:79:10:
95:2c:ae:80:73:6d:ae:42:ec:ed:f4:97:fd:87:bf:3f:8e:d1:
a0:2d:20:e7:ff:32:86:bc:2d:20:e2:2e:8f:4f:ba:66:38:f1:
95:50:3d:ac:1c:23:ad:7a:a6:d1:21:1f:5b:dc:27:33:4f:1a:
c3:28:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:10 2025 by rpki-client