Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: WDjYvQYPXfflmwVLJrhKXq3G21vtYghGD3hNTNAt38E=
Subject key identifier: 4E:D2:EB:14:06:3C:6D:6C:20:22:15:43:0E:F9:7F:99:5C:32:4E:36
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 019A4DAAAB7446374B0E8E2860026E5329B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0717
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: 12fTzHlr9hlFALpF4uZpRmLpfP5FTe0rfVIJ/P8HoFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ab:74:46:37:4b:0e:8e:28:60:02:6e:53:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=4ed2eb14063c6d6c202215430ef97f995c324e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:1d:89:17:d3:79:29:55:2a:33:eb:19:a5:
8e:a3:f2:39:3c:49:99:85:7b:d4:13:be:29:cf:78:
01:c7:74:f5:83:ff:04:e4:82:f2:ce:e6:bb:13:26:
11:29:1f:9a:86:4a:e4:b9:2b:c7:4c:a3:e8:f7:b2:
ab:0c:90:f7:b6:a6:1f:2c:51:d0:5d:f5:4e:d4:1b:
e4:7d:7f:43:01:97:da:2b:41:ee:bf:33:d1:be:8f:
f7:c7:b8:27:bb:17:94:34:08:0f:32:7a:6b:79:bd:
6a:78:72:87:8d:2b:39:9b:12:07:78:29:a3:18:1f:
91:de:1e:eb:01:bf:5e:12:e3:2c:19:54:3a:3f:82:
24:a2:73:05:4d:54:e9:96:bc:b3:0f:6d:83:cd:ae:
fe:f6:52:df:fd:ec:4f:f9:e8:26:db:2f:e2:31:1d:
9d:ea:a0:18:54:04:f2:5b:67:26:9f:c8:e1:2d:66:
91:d7:07:32:20:43:8e:33:95:53:02:79:78:41:18:
9f:c7:d1:c1:11:9c:ed:b8:69:d4:94:7a:24:db:8e:
e7:70:d7:4d:a9:db:fe:fd:4b:ad:04:52:e6:55:fd:
4d:18:2a:b8:c4:69:34:41:59:a0:ab:7c:55:50:37:
ad:a2:36:8a:1b:42:67:3b:04:3c:91:59:4f:c8:fc:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:EB:14:06:3C:6D:6C:20:22:15:43:0E:F9:7F:99:5C:32:4E:36
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:85:91:68:01:85:f6:11:fd:0f:ab:c6:e9:7a:8e:48:c4:6b:
f6:75:14:62:e9:7b:df:7b:e9:2c:a9:70:a8:16:61:6d:cb:e3:
fd:5d:07:9d:26:be:55:88:11:09:e7:68:2a:be:5e:ce:cb:00:
6b:7c:fa:34:8c:f8:ff:1a:b8:e4:24:61:6f:60:27:cc:47:03:
a2:48:f9:0d:f3:16:4c:2b:b8:43:88:bb:48:2e:e4:6b:67:18:
e8:83:9b:0e:52:ba:86:cb:84:18:78:d9:27:ce:5a:bd:fd:5e:
de:7e:8d:77:9a:1d:e1:3e:08:85:8b:54:a5:b1:23:d9:50:25:
06:aa:02:b3:8d:f0:ba:92:72:16:83:f4:94:6c:a0:de:3b:2a:
c8:f9:a9:83:99:a3:b8:5c:f1:e3:7f:de:8f:a4:c4:13:8b:b1:
02:0b:c5:f0:23:a3:2f:f4:a5:57:62:dc:46:76:23:bb:84:72:
77:ce:44:94:ef:e5:41:12:56:f0:8c:34:bb:28:92:a7:5c:e2:
85:b2:47:0b:1f:e7:c1:11:fd:67:aa:83:06:23:c1:05:d9:dc:
67:dd:71:59:12:20:f3:1b:33:55:8a:3a:12:31:b3:1d:35:99:
ae:29:9d:2c:24:c8:55:1b:4f:13:a5:96:19:dc:c9:63:68:53:
b3:7d:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:19 2025 by rpki-client