Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: uXs2katp7nVPbV1P5pbophuz137pVJQdv8USYMHjBW8=
Subject key identifier: D8:3F:33:BA:40:A1:48:9B:62:5A:11:CF:F2:76:E0:AB:60:B2:4D:A1
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 019855A0465F923E6C84510942C0DF539215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0612
Signing time: Tue 29 Jul 2025 10:00:23 +0000
Manifest this update: Tue 29 Jul 2025 10:00:23 +0000
Manifest next update: Wed 30 Jul 2025 10:00:23 +0000
Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=)
2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: bNplX3MNn4f1+cd9aj7hBRw+/4/+HtAmZ3bFXC+9Yn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:46:5f:92:3e:6c:84:51:09:42:c0:df:53:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Jul 29 10:00:23 2025 GMT
Not After : Jul 30 10:00:23 2025 GMT
Subject: CN=d83f33ba40a1489b625a11cff276e0ab60b24da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:b5:92:ce:b8:95:25:1a:7e:41:40:14:19:
d7:44:23:8a:6c:27:a4:1b:fb:e9:d5:0d:57:66:71:
b6:78:1e:c2:a2:dc:f1:1f:a5:ad:72:a3:e1:11:ae:
89:ba:e9:e5:c0:7f:5e:5e:2e:fb:a9:f9:b6:1b:0c:
6f:4b:2c:54:aa:3c:2b:3c:fb:67:25:0b:4e:d0:76:
32:10:f0:81:80:34:e6:42:d6:bc:6b:5f:d3:96:a0:
40:ab:96:b6:a3:80:c8:a6:6a:3f:37:4a:fd:64:cb:
a9:b8:23:af:ea:ce:7e:02:1f:34:26:ee:d1:72:99:
cb:95:57:0a:90:bf:99:3f:c5:2e:c3:10:3b:02:c8:
d7:d7:35:34:6a:e3:58:35:15:1b:7c:63:ae:75:c3:
7a:90:7e:4a:42:b5:a2:4f:44:fc:9b:a7:30:f4:1f:
98:d8:6e:66:2c:7d:2e:c9:84:bd:ca:ed:26:bf:f4:
7f:39:6e:cf:f2:75:13:bc:04:62:12:48:e9:19:46:
cf:0e:f1:12:07:89:ee:db:5f:ff:f8:0a:c6:23:a7:
fd:e0:80:dd:8f:73:97:64:7a:0a:b2:cf:31:04:48:
05:78:53:50:57:ad:a7:a8:64:83:d5:60:6f:4f:06:
ec:10:f5:09:b9:75:2c:da:57:93:ef:cf:40:71:2e:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:33:BA:40:A1:48:9B:62:5A:11:CF:F2:76:E0:AB:60:B2:4D:A1
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:8d:fa:52:68:fc:27:22:2d:19:54:3b:85:0d:08:78:be:
b6:d8:d0:62:bb:df:19:16:0e:51:cf:98:ac:e4:ee:7a:a5:e2:
75:f7:36:52:2f:6f:8b:8b:85:ff:22:1d:51:1a:2d:db:b5:e3:
e0:8c:85:4d:a3:3f:5b:98:e6:cc:45:f9:0d:26:dc:c4:5f:c7:
23:e1:fb:cf:72:70:2a:25:c6:90:21:36:0c:d0:93:59:b0:3d:
e3:59:35:63:d1:15:4b:7e:6e:33:2f:95:f7:d8:a8:f5:af:f3:
e3:3e:35:cc:cb:6f:0a:68:d0:ce:cd:06:5a:d1:47:77:fc:f2:
3c:d0:d0:d7:a5:fc:25:45:e8:0d:de:91:10:d6:1d:ab:af:b8:
e2:c1:22:af:51:9f:0c:1c:49:3f:f8:75:8f:c0:2e:0a:cd:51:
11:4d:f2:3d:98:49:10:fe:70:b2:7d:cb:71:10:0d:fe:ed:24:
a8:80:03:b5:f6:53:96:bc:95:11:1e:d0:88:cc:f2:64:a9:90:
34:bc:e1:63:2a:4b:50:86:23:17:d5:32:28:90:84:cc:66:e9:
0a:41:eb:83:d2:ac:25:c9:46:c2:bc:f9:58:53:e2:bc:62:da:
39:b9:a4:3e:5c:f2:10:82:9c:27:ed:29:8b:49:8d:5f:e2:ca:
a1:5b:3b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVoEZfkj5shFEJQsDfU5IVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy
ZWRmZjkwHhcNMjUwNzI5MTAwMDIzWhcNMjUwNzMwMTAwMDIzWjAzMTEwLwYDVQQD
EyhkODNmMzNiYTQwYTE0ODliNjI1YTExY2ZmMjc2ZTBhYjYwYjI0ZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ru1ks64lSUafkFAFBnXRCOKbCek
G/vp1Q1XZnG2eB7CotzxH6WtcqPhEa6JuunlwH9eXi77qfm2GwxvSyxUqjwrPPtn
JQtO0HYyEPCBgDTmQta8a1/TlqBAq5a2o4DIpmo/N0r9ZMupuCOv6s5+Ah80Ju7R
cpnLlVcKkL+ZP8UuwxA7AsjX1zU0auNYNRUbfGOudcN6kH5KQrWiT0T8m6cw9B+Y
2G5mLH0uyYS9yu0mv/R/OW7P8nUTvARiEkjpGUbPDvESB4nu21//+ArGI6f94IDd
j3OXZHoKss8xBEgFeFNQV62nqGSD1WBvTwbsEPUJuXUs2leT789AcS776QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg/M7pAoUibYloRz/J24Ktgsk2hMB8GA1UdIwQY
MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It
YWRhNmU2NDMwN2M5LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5
LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+eN+lJo
/CciLRlUO4UNCHi+ttjQYrvfGRYOUc+YrOTueqXidfc2Ui9vi4uF/yIdURot27Xj
4IyFTaM/W5jmzEX5DSbcxF/HI+H7z3JwKiXGkCE2DNCTWbA941k1Y9EVS35uMy+V
99io9a/z4z41zMtvCmjQzs0GWtFHd/zyPNDQ16X8JUXoDd6RENYdq6+44sEir1Gf
DBxJP/h1j8AuCs1REU3yPZhJEP5wsn3LcRAN/u0kqIADtfZTlryVER7QiMzyZKmQ
NLzhYypLUIYjF9UyKJCEzGbpCkHrg9KsJclGwrz5WFPivGLaObmkPlzyEIKcJ+0p
i0mNX+LKoVs7lA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:33:28 2025 by rpki-client